Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/qqyGB6KSD3iZzSONUC5Oq8flDeI.roa
File: qqyGB6KSD3iZzSONUC5Oq8flDeI.roa (raw, json)
Hash identifier: n5Z8NEBtkRzZ0epErhq7o4jPB0402D4cSSViIVgc46A=
Subject key identifier: AA:AC:86:07:A2:92:0F:78:99:CD:23:8D:50:2E:4E:AB:C7:E5:0D:E2
Certificate issuer: /CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Certificate serial: 01856CC140B422B7F70E6F30F487C4F70BA9
Authority key identifier: 1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/qqyGB6KSD3iZzSONUC5Oq8flDeI.roa
Signing time: Sun 01 Jan 2023 09:54:42 +0000
ROA not before: Sun 01 Jan 2023 09:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 559
IP address blocks: 148.196.0.0/16 maxlen: 16
157.26.0.0/16 maxlen: 16
192.135.150.0/23 maxlen: 24
192.135.152.0/21 maxlen: 21
192.135.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:40:b4:22:b7:f7:0e:6f:30:f4:87:c4:f7:0b:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ea559d8bf6ac2d868d0665ad57d2c6ac1472193
Validity
Not Before: Jan 1 09:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=aaac8607a2920f7899cd238d502e4eabc7e50de2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:87:9c:1f:bc:2a:d4:3d:83:1b:70:3c:bb:ce:
78:51:15:7b:f6:87:97:62:43:91:0c:b4:3a:5d:7b:
32:c8:c0:93:ac:7f:1f:89:37:49:83:b7:16:de:0a:
cc:62:ff:14:48:a1:50:0b:0b:76:df:54:bf:79:c5:
6d:50:06:24:24:99:37:b1:33:85:22:af:9b:a4:45:
2a:3c:9a:58:b0:09:2a:b2:15:f5:36:0e:25:1f:66:
0f:e6:20:8f:a3:82:27:b2:0e:3a:1b:9d:b9:aa:47:
d4:0c:5f:6a:43:5d:c0:6d:3c:58:af:51:44:b5:84:
8a:1d:ba:dd:b6:dd:7f:df:46:26:3b:04:e6:06:99:
91:ed:ee:c4:24:c3:89:b5:fa:67:c4:fb:2d:9d:a9:
ca:e0:d9:57:e8:63:08:e3:90:7e:b3:1c:97:ec:f9:
f0:4c:f9:e5:87:cf:a1:31:70:21:c3:29:e9:82:08:
d0:a1:ff:21:cb:1c:8e:aa:32:0c:08:38:97:38:94:
77:a8:e6:9d:fd:f2:51:9c:11:c8:45:c6:8c:42:2c:
c1:09:2b:75:fd:dc:11:fd:16:ab:5a:dd:b5:00:93:
b0:47:b8:1d:8c:ba:b7:61:e7:6d:c2:c2:83:b0:fe:
ef:9d:2a:d6:f1:8c:ce:ee:ca:d6:61:68:8b:2c:1b:
06:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AC:86:07:A2:92:0F:78:99:CD:23:8D:50:2E:4E:AB:C7:E5:0D:E2
X509v3 Authority Key Identifier:
keyid:1E:A5:59:D8:BF:6A:C2:D8:68:D0:66:5A:D5:7D:2C:6A:C1:47:21:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HqVZ2L9qwtho0GZa1X0sasFHIZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/qqyGB6KSD3iZzSONUC5Oq8flDeI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/4fb785-fff1-43a3-afd1-5ffcc46ae7b5/1/HqVZ2L9qwtho0GZa1X0sasFHIZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.196.0.0/16
157.26.0.0/16
192.135.150.0-192.135.159.255
Signature Algorithm: sha256WithRSAEncryption
44:0e:3b:be:b1:d0:13:45:41:f7:c6:0b:de:2e:4c:b1:db:8a:
ea:29:5d:10:5f:82:6d:66:bf:99:66:e1:87:26:88:7b:78:26:
89:63:11:9b:2d:d2:80:2d:79:36:5f:0a:26:a7:b7:1c:ad:36:
80:0e:38:fc:18:c3:d6:f3:63:f0:9a:2e:67:27:5f:cb:7f:74:
fa:0d:92:76:9d:53:8d:05:5d:3b:fe:83:4a:96:f9:e9:4e:41:
e9:44:cb:99:f4:31:3f:9a:c0:fa:5a:6a:3e:4c:a7:56:f6:60:
2b:e9:47:2e:f3:ac:ed:c3:76:82:6d:7e:1b:9f:3c:31:c7:4c:
eb:74:0e:21:62:de:08:0e:15:b9:52:b4:8b:6c:f0:21:bc:6c:
1e:e4:5f:4a:d1:68:dd:d8:4a:0d:bb:0f:51:9b:99:8c:d9:f1:
e9:6c:d6:5c:68:a9:0a:a5:47:ee:82:00:bc:b9:ad:1f:0e:cc:
b0:bc:92:37:e2:3b:3d:12:59:5e:5b:eb:33:8a:3b:23:75:ba:
1b:49:31:32:1b:ce:b4:df:68:a5:db:56:6c:31:ba:a0:44:04:
d1:15:a7:dc:00:ea:3a:ff:2d:08:99:38:7c:26:85:3b:2e:95:
85:9f:da:79:12:03:7a:cd:2c:6f:59:49:2b:4c:c5:13:e0:24:
a9:ce:c9:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:25 2025 by rpki-client