Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/qhtmZa0GBJu-LNeg5d5k1hem6bE.roa
File: qhtmZa0GBJu-LNeg5d5k1hem6bE.roa (raw, json)
Hash identifier: Uh/IbFG52qMt7jSUYgnpbLvKrotH1qlqQb6PDTI4TP4=
Subject key identifier: AA:1B:66:65:AD:06:04:9B:BE:2C:D7:A0:E5:DE:64:D6:17:A6:E9:B1
Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial: 01942144149BFF30060DBCCCAC3554C7D829
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/qhtmZa0GBJu-LNeg5d5k1hem6bE.roa
Signing time: Wed 01 Jan 2025 09:48:17 +0000
ROA not before: Wed 01 Jan 2025 09:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30741
IP address blocks: 83.145.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:14:9b:ff:30:06:0d:bc:cc:ac:35:54:c7:d8:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Validity
Not Before: Jan 1 09:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa1b6665ad06049bbe2cd7a0e5de64d617a6e9b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d8:3b:b5:eb:73:b5:25:8b:90:5e:4f:fb:78:
bd:be:ae:fb:0b:ee:fc:5f:42:39:07:27:c2:36:6b:
75:f4:85:19:5f:ec:72:a1:9c:20:0e:0c:4b:d0:6e:
e4:4a:d1:01:20:4a:27:0d:86:5d:eb:63:3d:20:ba:
c3:70:50:81:be:45:da:b1:45:a8:3f:2e:dd:c0:ea:
4c:f8:f7:f4:02:47:f8:54:00:df:bd:29:ea:f1:ac:
6a:81:d3:35:ab:c8:ab:b5:c6:6b:79:98:cf:ff:d0:
75:a5:10:ad:68:be:f1:02:b2:9b:c2:f3:54:08:f4:
cb:b9:16:8c:05:08:7b:8a:e7:6e:ec:18:9b:c0:5e:
0b:fd:e4:21:c6:7d:63:98:f1:1d:27:ab:37:d3:89:
66:17:01:87:7d:95:44:b4:11:62:47:7e:28:f0:a6:
c4:78:2d:3b:dd:ea:f7:51:13:31:38:42:d1:58:2b:
b7:1d:a1:04:32:a7:15:f1:90:c1:ff:87:0a:01:80:
66:9a:9c:aa:df:fa:ad:05:bf:a2:af:01:aa:05:1b:
d6:1d:5c:df:5b:b9:37:aa:1b:10:2d:58:d1:49:aa:
1b:57:55:62:b9:2d:c0:46:f0:94:cc:2e:1b:5e:e8:
cf:09:39:b8:d2:a4:d3:53:ac:a7:9d:0f:82:6c:67:
e8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1B:66:65:AD:06:04:9B:BE:2C:D7:A0:E5:DE:64:D6:17:A6:E9:B1
X509v3 Authority Key Identifier:
keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/qhtmZa0GBJu-LNeg5d5k1hem6bE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.145.127.0/24
Signature Algorithm: sha256WithRSAEncryption
72:54:b8:8c:86:e4:08:3a:ea:06:85:61:ac:a7:af:16:b4:9f:
33:79:cc:55:50:8a:ae:75:4c:0a:5e:56:76:59:20:d1:e8:a0:
11:85:de:5f:69:38:74:2c:ad:6f:e0:3b:f2:0e:b8:4d:ca:2f:
8b:29:2c:f8:87:69:cb:66:60:db:88:09:66:97:73:6e:6b:e4:
10:e3:18:25:4d:6b:a2:49:4f:ac:69:65:98:fe:f9:6a:74:b1:
7c:3a:b2:02:39:fc:e1:df:61:76:e4:bf:7d:9c:72:cd:e9:62:
93:27:39:35:d8:6e:48:73:01:21:8a:88:77:e5:b6:aa:bd:d2:
25:a4:68:ee:1f:b2:fd:87:45:cb:3d:fc:ba:0c:a1:64:d6:04:
48:d4:95:01:c1:c0:3d:fd:d4:f4:bc:4b:64:3d:66:fc:91:4d:
c5:61:6a:14:d0:53:5b:2f:83:ab:ea:42:29:be:fd:32:dd:6e:
79:b0:12:65:d9:e3:38:bb:cc:eb:d7:57:29:cb:74:e6:bd:ea:
b1:9e:12:99:ec:2b:ac:15:d0:8c:ca:07:55:98:04:b2:48:a5:
03:6e:a6:bb:ff:be:90:c4:3e:bc:b6:54:6c:d1:96:42:8d:e9:
94:42:ed:c7:c7:25:0b:5b:8e:0a:05:6c:49:f4:df:aa:5b:bd:
bd:b9:28:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:02 2025 by rpki-client