Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/QjI0f6h1vx4R58D2O97owRK7kc8.roa
File: QjI0f6h1vx4R58D2O97owRK7kc8.roa (raw, json)
Hash identifier: 0p7Lmtg52KtnYmflOV0+mXW+Qg4/g670AZUU4TIeaVE=
Subject key identifier: 42:32:34:7F:A8:75:BF:1E:11:E7:C0:F6:3B:DE:E8:C1:12:BB:91:CF
Certificate issuer: /CN=82b3dcdf31af6ef0c934eaf24884ad99516edd76
Certificate serial: 0956F545
Authority key identifier: 82:B3:DC:DF:31:AF:6E:F0:C9:34:EA:F2:48:84:AD:99:51:6E:DD:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/grPc3zGvbvDJNOrySIStmVFu3XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/QjI0f6h1vx4R58D2O97owRK7kc8.roa
Signing time: Sat 01 Jan 2022 02:53:25 +0000
ROA not before: Sat 01 Jan 2022 02:53:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 398577
IP address blocks: 144.57.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156693829 (0x956f545)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82b3dcdf31af6ef0c934eaf24884ad99516edd76
Validity
Not Before: Jan 1 02:53:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4232347fa875bf1e11e7c0f63bdee8c112bb91cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d5:87:f5:61:c4:a8:00:fb:e9:89:4b:f6:1f:
ff:a5:58:20:05:4f:51:ef:f2:bb:6a:33:67:b7:5f:
12:c5:96:b7:a1:c0:23:fd:95:95:a2:64:6c:82:b7:
56:05:a9:8c:5a:f0:fb:d9:a1:84:69:d4:c0:76:f6:
10:d9:01:7e:07:20:6d:f5:22:92:5a:3c:6d:24:e3:
97:fa:c9:a4:64:1f:47:c3:96:69:75:c9:35:54:cf:
98:ca:5f:e1:69:5a:75:1a:15:57:90:5e:be:9d:dc:
a8:e1:f4:9b:e9:ef:47:67:ce:94:65:6a:31:4c:0c:
af:88:6e:7d:55:3c:6b:68:c3:59:87:f2:69:3a:67:
97:41:c2:87:7f:98:ce:8b:c5:5e:4d:f7:94:64:9b:
a9:cf:44:56:43:5a:bb:3c:64:90:03:7a:a2:b6:8a:
f4:7e:e6:a6:f7:24:30:83:ba:16:4c:9e:2a:c8:cb:
98:1a:25:1e:37:6a:f5:46:e6:90:dc:8c:89:ac:d5:
f9:6d:29:63:ff:f3:cd:bf:33:b0:3e:42:bb:3d:08:
cc:80:77:5b:f5:e5:8a:de:93:3e:8b:de:20:fa:e6:
ff:da:1d:8c:02:24:a0:1b:fe:89:81:7d:0f:3d:3a:
f0:c0:62:72:23:ac:ea:eb:6e:70:f7:dc:70:a2:e1:
03:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:32:34:7F:A8:75:BF:1E:11:E7:C0:F6:3B:DE:E8:C1:12:BB:91:CF
X509v3 Authority Key Identifier:
keyid:82:B3:DC:DF:31:AF:6E:F0:C9:34:EA:F2:48:84:AD:99:51:6E:DD:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/grPc3zGvbvDJNOrySIStmVFu3XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/QjI0f6h1vx4R58D2O97owRK7kc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/41f4c7-9668-4cf4-9e9d-e0e0468e69d7/1/grPc3zGvbvDJNOrySIStmVFu3XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.57.40.0/21
Signature Algorithm: sha256WithRSAEncryption
9c:45:1f:33:2e:de:4c:3e:cb:1b:ff:a5:14:0a:66:11:c3:4c:
4b:18:8e:46:c5:e4:43:3b:c9:92:3d:b6:e2:d9:76:ec:00:5a:
22:1a:a3:30:a7:4d:2a:dc:67:7f:93:e7:74:7c:a8:3a:63:7e:
ff:b2:46:38:fd:5a:8b:90:00:44:3c:c0:b8:58:25:59:6a:49:
5c:48:88:16:d0:6d:62:2a:5b:39:2e:55:95:4a:d2:93:1d:c8:
74:39:7c:9b:dd:a9:1a:bd:d8:dd:60:61:d0:93:5f:15:ec:d7:
af:d1:72:65:14:e7:44:4e:f7:1d:3d:c6:36:40:4c:66:e5:68:
94:a9:90:23:e4:e5:ed:bf:e2:89:f1:38:cb:64:f8:24:c0:88:
62:05:35:79:da:15:08:94:04:c9:a4:5e:c5:8a:de:00:15:49:
0a:bb:95:84:49:dd:da:13:51:7c:75:23:ef:f5:73:27:c8:fb:
6b:04:d6:27:53:b8:38:f6:63:0a:36:33:61:ea:b4:a2:e1:ee:
a5:3b:2d:04:ca:b1:f9:3f:a4:2a:6c:45:1c:10:4f:45:d3:eb:
4c:5b:01:92:3b:51:75:82:eb:75:1a:c0:b7:8e:92:3d:1f:c0:
f7:2b:b7:c9:cb:53:d6:64:c3:31:90:1f:50:15:c7:25:d2:4e:
3f:09:0a:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:17:13 2025 by rpki-client