Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/QBpayCeedHorPlMUrxP80cZpQMk.roa
File: QBpayCeedHorPlMUrxP80cZpQMk.roa (raw, json)
Hash identifier: OQ5xE2z8NMteCC4WWbezxTDqjx0MzAo+K4Av2s6co/8=
Subject key identifier: 40:1A:5A:C8:27:9E:74:7A:2B:3E:53:14:AF:13:FC:D1:C6:69:40:C9
Certificate issuer: /CN=7713f3582f63901305530b4b1936cd6e6611a30a
Certificate serial: 019423D6AF72BFEF4CE9E176C016B370E85F
Authority key identifier: 77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/QBpayCeedHorPlMUrxP80cZpQMk.roa
Signing time: Wed 01 Jan 2025 21:47:39 +0000
ROA not before: Wed 01 Jan 2025 21:47:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61329
IP address blocks: 194.13.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:af:72:bf:ef:4c:e9:e1:76:c0:16:b3:70:e8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7713f3582f63901305530b4b1936cd6e6611a30a
Validity
Not Before: Jan 1 21:47:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=401a5ac8279e747a2b3e5314af13fcd1c66940c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e6:11:4b:b7:f1:04:01:17:1c:1e:a0:c2:6a:
c7:38:1d:49:7f:64:1d:be:16:ac:9a:58:a5:47:e2:
cf:3f:8b:2f:d6:e9:d9:e8:20:5a:27:ef:c8:46:99:
57:8a:ab:05:0e:6e:f4:12:46:cf:96:3e:69:47:15:
f3:ee:82:32:e5:9f:7b:5f:43:82:8d:e2:59:09:1c:
cd:e7:ce:3e:d0:23:b7:33:fc:af:e9:a5:47:b7:9f:
0e:0c:8b:bc:87:68:df:79:ca:36:cd:7c:ed:04:9d:
e6:3d:2a:88:84:74:6a:9a:05:cd:2c:e7:81:c4:57:
89:07:ff:89:3a:e8:bc:47:22:52:e0:e3:6f:6f:5d:
72:2a:47:25:4b:08:ca:4d:bb:6b:44:d8:23:85:ee:
c5:ee:89:20:c4:7f:0c:7c:38:84:3c:bc:e8:b3:6d:
e0:18:af:2f:be:8b:87:8a:2f:44:7e:62:38:eb:9b:
d9:69:de:f2:f8:32:b2:61:af:98:f4:27:03:88:f5:
a1:62:cd:50:82:6c:bb:27:d8:8e:b1:0a:fb:09:e6:
fb:d3:97:58:b7:55:57:a3:53:7f:49:4a:09:17:38:
28:c8:38:af:f8:0c:2f:f1:bd:e4:7f:e8:73:df:72:
ad:e0:49:c9:ca:26:45:67:af:85:69:e9:38:a7:2d:
3f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:1A:5A:C8:27:9E:74:7A:2B:3E:53:14:AF:13:FC:D1:C6:69:40:C9
X509v3 Authority Key Identifier:
keyid:77:13:F3:58:2F:63:90:13:05:53:0B:4B:19:36:CD:6E:66:11:A3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxPzWC9jkBMFUwtLGTbNbmYRowo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/QBpayCeedHorPlMUrxP80cZpQMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/f4d76e-34a1-4d0a-b9bd-189d53ae4e3e/1/dxPzWC9jkBMFUwtLGTbNbmYRowo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.13.120.0/22
Signature Algorithm: sha256WithRSAEncryption
24:77:8c:42:3f:41:95:17:3c:18:2d:39:55:27:7a:8a:47:b1:
4e:ef:07:d7:0a:58:af:0e:2c:f4:9a:4f:76:0f:78:f7:21:89:
39:df:cd:c4:51:ec:fe:dc:10:47:bf:b9:f4:d8:fb:26:e9:24:
8c:b3:53:68:fb:c8:9a:84:1c:d7:67:95:75:12:5b:0a:5b:bb:
ce:86:09:4b:38:5f:4d:1a:15:1f:ca:a7:0d:93:39:4b:44:20:
2d:a5:3f:b2:d0:ea:f9:7f:3a:1e:18:95:e7:ec:67:9c:b6:f0:
ab:87:64:6d:5d:f5:61:4b:2e:e1:dc:b6:22:ac:64:e9:c1:e9:
aa:07:ea:4a:8e:b6:55:1f:1f:f7:0b:6f:61:e4:55:56:d6:94:
3b:f2:90:90:97:e2:17:f3:77:5e:29:86:8f:98:45:be:51:ca:
df:90:63:69:a5:84:fd:be:6c:fc:89:0c:37:b6:f4:39:0d:d7:
3c:66:90:71:17:20:64:92:e0:31:79:3d:16:e0:f5:37:21:05:
15:67:74:8d:93:2f:72:f6:4d:ed:51:c8:f9:f7:22:75:a2:b6:
36:f6:e6:6b:3c:ce:75:dd:c9:d7:a6:52:1a:0d:12:cf:bb:c4:
64:8e:e6:d6:b9:67:55:7f:a4:85:1c:9a:f2:1b:a8:22:7e:1d:
65:ec:74:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:08 2025 by rpki-client