Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/qZ5B6cZWNigMvxMt3cqg4dY0jiU.roa
File: qZ5B6cZWNigMvxMt3cqg4dY0jiU.roa (raw, json)
Hash identifier: SnE0XmoDm0LWDtWH7eb2K6Ro94mGf3BpbSAuv9CM0y8=
Subject key identifier: A9:9E:41:E9:C6:56:36:28:0C:BF:13:2D:DD:CA:A0:E1:D6:34:8E:25
Certificate issuer: /CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Certificate serial: 0194FD0D6C388A6BCB0A76929E8FDB1A9AF8
Authority key identifier: 5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/qZ5B6cZWNigMvxMt3cqg4dY0jiU.roa
Signing time: Thu 13 Feb 2025 02:05:02 +0000
ROA not before: Thu 13 Feb 2025 02:05:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201851
IP address blocks: 178.34.77.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fd:0d:6c:38:8a:6b:cb:0a:76:92:9e:8f:db:1a:9a:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ee531b9ac2990d69a8a5c3023e72e6d841e6c09
Validity
Not Before: Feb 13 02:05:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a99e41e9c65636280cbf132dddcaa0e1d6348e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:35:8e:ee:01:90:b4:70:50:62:60:31:f0:83:
0a:59:22:86:f2:4a:3d:f0:f6:f7:ff:b1:29:30:3c:
0b:d5:e8:63:0b:a9:b2:34:94:09:34:48:27:69:15:
ae:34:4d:b1:48:6a:81:e0:33:99:74:26:7f:98:4a:
75:9f:a9:fb:a1:04:1e:33:e1:cc:49:eb:35:97:5f:
1e:d1:89:af:04:db:e4:88:12:cf:be:88:5d:2b:00:
8a:bc:65:03:d0:62:98:22:a1:cb:60:b9:bf:ac:a2:
6c:1d:7c:7d:77:49:e9:0e:96:a1:bc:61:66:ca:c5:
95:e9:e3:62:58:f1:db:e0:22:f0:dc:f4:06:1b:0f:
a6:8b:10:fa:63:5f:26:cb:cb:99:ed:d0:9f:25:fe:
a5:7d:cf:aa:21:ab:48:9b:8a:3b:46:8b:b0:35:04:
b2:63:20:a3:ae:57:a4:78:2b:05:a3:a4:f0:fe:c7:
13:40:75:18:33:b0:24:3b:7b:a0:36:73:3a:7b:2c:
8c:26:1c:2d:58:7a:30:51:70:34:36:95:49:7f:37:
0f:22:59:26:5d:72:7a:1d:75:37:2b:0b:72:4c:9e:
62:98:2c:0e:26:6a:cc:5c:9a:9f:6c:bd:5d:c8:82:
c8:0c:99:9a:da:f4:3d:70:30:be:8c:5f:f0:3f:6c:
7b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9E:41:E9:C6:56:36:28:0C:BF:13:2D:DD:CA:A0:E1:D6:34:8E:25
X509v3 Authority Key Identifier:
keyid:5E:E5:31:B9:AC:29:90:D6:9A:8A:5C:30:23:E7:2E:6D:84:1E:6C:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XuUxuawpkNaailwwI-cubYQebAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/qZ5B6cZWNigMvxMt3cqg4dY0jiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/9a1d44-8609-4e5e-ba94-5a86c2757c1e/1/XuUxuawpkNaailwwI-cubYQebAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.34.77.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:7e:b6:4f:88:4d:a9:84:5e:40:ca:77:99:a4:57:7c:7a:c9:
c8:0c:9d:3a:51:d2:f4:1f:78:80:7f:0f:07:87:fa:ba:f2:81:
f7:a7:bc:46:82:eb:a0:e3:f6:c9:3c:9b:18:82:af:3c:54:c9:
9e:0f:bc:34:6b:ca:1a:f5:db:40:aa:d6:d8:fe:f1:32:35:38:
ef:41:81:5a:2d:d3:a8:fe:9b:01:34:0b:2d:d7:ec:fb:1d:7e:
97:68:9d:93:a5:24:88:4e:4a:c5:bf:56:ad:d9:b5:c6:9a:6e:
c3:91:9b:17:63:2f:43:86:c6:cf:26:ed:ab:9a:2c:96:f5:90:
06:00:a5:0b:d5:b2:da:82:0d:26:d4:c1:82:ca:47:af:31:f3:
13:21:f7:30:82:d4:85:96:de:33:92:fe:16:62:60:ed:c7:ab:
2b:15:81:94:4b:fe:a1:9b:d1:91:c2:79:22:ce:58:76:ae:9f:
f1:a3:f4:e9:49:4d:01:e7:a2:3b:23:7d:6d:24:46:39:a8:64:
5f:24:b2:c6:df:4e:10:28:56:d3:5f:f5:f9:05:30:e9:e9:cd:
2d:2f:4c:7b:77:34:d3:1e:8a:c2:00:3f:18:37:b3:51:b9:cf:
be:86:fc:0a:c5:c1:fb:9d:e4:8b:8c:34:5a:2e:be:7d:e6:ad:
80:3d:b5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 05:52:06 2025 by rpki-client