Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/qsCWx0y5U0_tpArKY33BWGyPAKg.roa
File: qsCWx0y5U0_tpArKY33BWGyPAKg.roa (raw, json)
Hash identifier: 5zlW+fe570TQ9t9Q/r880168DEL2PLYQkcP+DEhbBe0=
Subject key identifier: AA:C0:96:C7:4C:B9:53:4F:ED:A4:0A:CA:63:7D:C1:58:6C:8F:00:A8
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 019420D5E2B66BC7A026920ECBBAFEE12FB6
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/qsCWx0y5U0_tpArKY33BWGyPAKg.roa
Signing time: Wed 01 Jan 2025 07:47:55 +0000
ROA not before: Wed 01 Jan 2025 07:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209242
IP address blocks: 5.10.244.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:e2:b6:6b:c7:a0:26:92:0e:cb:ba:fe:e1:2f:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 07:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aac096c74cb9534feda40aca637dc1586c8f00a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:d3:ca:fa:1c:94:b5:cd:9d:e9:b5:fb:8a:
16:79:6d:6f:f5:8e:31:a1:23:c7:48:7a:c8:7c:84:
77:41:e2:7a:4d:a3:92:1d:a1:6d:3d:de:9c:35:27:
6b:e2:96:78:62:11:61:be:ac:df:e0:de:71:96:c6:
6a:81:53:30:a6:80:0a:25:52:91:69:48:ff:77:47:
3b:61:40:37:fb:43:4a:4f:92:37:ba:50:18:cb:b8:
7d:95:f4:f7:3f:b1:f8:f2:35:70:3e:6f:81:29:d4:
ac:4f:1c:74:7f:74:b2:7a:9d:11:c4:d2:08:87:5e:
ca:db:ef:f8:24:72:e9:25:3c:fc:9f:81:87:b1:b5:
07:74:a7:1a:c7:15:3d:3e:72:f0:16:41:87:63:70:
a2:f4:3d:f7:a0:48:e4:94:07:ef:36:11:31:4a:02:
0b:50:80:b5:5b:b3:bd:74:8d:fa:5c:92:63:65:b7:
53:94:13:59:72:de:0e:e0:bb:1e:36:e6:31:28:16:
88:93:09:7f:57:f8:84:3c:b5:c5:6a:95:08:b1:3c:
62:e9:f9:99:5a:63:0e:7a:6c:f7:0a:c1:4a:a3:0d:
bc:42:45:12:2a:c9:db:a9:92:78:60:78:bd:56:ab:
7e:6d:12:c8:3a:b1:69:52:6a:34:6b:46:44:57:77:
41:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C0:96:C7:4C:B9:53:4F:ED:A4:0A:CA:63:7D:C1:58:6C:8F:00:A8
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/qsCWx0y5U0_tpArKY33BWGyPAKg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.244.0/22
Signature Algorithm: sha256WithRSAEncryption
67:17:a1:0a:5c:61:0f:72:1d:d4:76:c2:6a:99:30:c6:3b:95:
a7:55:4e:18:86:1b:c4:49:50:3a:70:ea:65:83:81:bf:51:cc:
2e:b4:cf:5c:c6:d4:55:9d:bd:0f:50:c5:1e:eb:ce:d4:88:c8:
eb:d6:cc:c7:de:ba:9f:b1:2b:8a:15:63:73:31:ea:f7:30:03:
9a:23:63:6f:ac:48:54:e0:bf:f2:f5:63:30:11:01:a9:3c:45:
55:2c:a1:7b:46:4e:9d:2e:57:8e:03:d4:b4:33:9b:09:c5:3b:
22:f5:bc:ec:f3:d7:f6:49:ed:a4:f9:d2:b7:30:e6:76:30:35:
0a:2f:df:1c:e0:3a:3d:eb:fb:f7:c3:6a:c7:cd:24:e2:12:37:
79:fb:fd:84:b9:84:4b:2a:bb:5a:df:fb:d1:39:eb:49:c7:e7:
45:08:e6:c6:15:78:f5:c0:86:64:05:a3:b8:b6:7b:1d:64:05:
dc:14:fd:b4:a9:cd:d7:70:84:34:a4:ee:c0:c2:3e:74:9d:8f:
33:ce:44:92:12:a9:6a:45:b1:21:6d:b5:22:a8:54:87:45:2d:
23:8e:fb:78:fc:f1:6a:ef:30:4a:70:da:7c:b5:06:5c:ab:04:
8d:35:f7:f4:eb:04:da:52:7b:53:6a:37:52:f9:1f:ae:cf:31:
16:c7:22:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:07 2025 by rpki-client