Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/qrkEYAyWdukZTm5XyqiS-xT8TmY.roa
File: qrkEYAyWdukZTm5XyqiS-xT8TmY.roa (raw, json)
Hash identifier: zSUcH0ExfvbaHK3qrtk/nMWlCvae+aNOPb/D60GUy1g=
Subject key identifier: AA:B9:04:60:0C:96:76:E9:19:4E:6E:57:CA:A8:92:FB:14:FC:4E:66
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0194228E42526EB83769CC3A71D71A88178D
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/qrkEYAyWdukZTm5XyqiS-xT8TmY.roa
Signing time: Wed 01 Jan 2025 15:48:55 +0000
ROA not before: Wed 01 Jan 2025 15:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13115
IP address blocks: 213.145.64.0/23 maxlen: 23
213.145.80.0/23 maxlen: 23
2001:41f8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:42:52:6e:b8:37:69:cc:3a:71:d7:1a:88:17:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jan 1 15:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aab904600c9676e9194e6e57caa892fb14fc4e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f8:20:3a:f7:2e:32:d9:db:3b:06:49:2b:15:
81:27:33:54:2c:a2:85:2c:fd:4d:d4:c2:f6:37:61:
24:87:6b:90:f3:78:88:fb:44:df:31:c8:5b:c2:68:
8f:1e:60:e1:c8:0a:14:67:b7:df:eb:e5:0e:d3:70:
c4:c0:65:49:84:1b:f1:d0:55:c3:20:47:a8:66:b5:
c3:f6:24:39:54:73:84:5c:40:40:a5:13:5d:b4:59:
8d:f7:54:1d:4b:5d:fa:03:2d:84:a7:61:93:8e:92:
7d:ab:d6:ad:77:ea:d2:8e:21:e2:6d:2a:34:45:c2:
c8:c8:07:0e:e1:56:e3:1a:37:8c:50:95:2e:4d:1c:
88:29:09:6b:7c:8c:2f:c2:64:9d:af:db:97:9a:22:
3f:26:a3:32:af:51:4a:00:ed:7c:05:07:6d:17:32:
3e:86:3e:34:2b:c0:7d:ad:58:3e:5c:37:27:7e:3e:
a8:a2:80:5a:38:92:95:82:37:65:60:13:a6:26:27:
81:8b:10:d2:8b:58:93:61:26:d0:a3:a8:e5:81:c1:
9c:f2:c3:d6:02:60:71:4c:aa:54:39:11:71:39:13:
fd:5f:7b:9c:3e:4a:b6:87:f3:03:92:55:0b:50:77:
ab:d7:7c:c6:c7:07:e8:46:a2:51:75:e7:9c:74:18:
3f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B9:04:60:0C:96:76:E9:19:4E:6E:57:CA:A8:92:FB:14:FC:4E:66
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/qrkEYAyWdukZTm5XyqiS-xT8TmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.64.0/23
213.145.80.0/23
IPv6:
2001:41f8::/32
Signature Algorithm: sha256WithRSAEncryption
72:0c:32:49:2f:f8:76:d3:e8:13:f3:27:5e:98:4d:44:16:56:
7c:54:7e:08:0e:6d:a7:87:f9:92:23:bc:1c:11:0a:9a:3b:6f:
9c:19:05:22:a7:00:3e:a9:1b:7b:17:2d:fd:d2:b5:de:c5:01:
42:f6:de:27:57:31:04:4a:33:d2:22:cd:1f:2d:f1:01:0c:bb:
e7:c2:c0:f0:72:dc:70:35:a9:35:fa:7a:d7:5a:94:f0:9a:50:
93:5a:35:41:c9:07:d6:4c:ad:c0:5b:cf:1d:ea:d6:90:ef:90:
38:eb:9b:57:ce:3e:eb:11:b1:12:97:a2:ea:04:b8:bb:05:e3:
f8:65:bb:46:98:b2:a1:e3:f3:9c:f4:e8:e5:c6:c1:47:c6:c7:
35:9b:00:d3:5a:50:91:1d:60:6c:ad:da:fe:f9:39:46:8d:e1:
69:56:0e:a5:dd:ab:c9:14:68:fe:59:40:f2:21:f0:d6:16:3a:
19:bf:ef:eb:87:28:38:9d:87:60:e3:30:91:f5:de:98:d5:07:
c5:94:7f:0d:40:7f:04:12:32:69:5d:fe:d5:b1:49:75:5d:98:
4c:cd:07:13:78:dd:6b:40:79:55:66:3d:47:7d:40:7d:5d:10:
4f:83:b5:7f:17:40:5d:e9:f3:28:32:da:40:bf:29:a3:95:0b:
e6:f3:33:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:49:25 2025 by rpki-client