Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/QcxKffYW9L0mTv0Jq295IGFtAJg.roa
File: QcxKffYW9L0mTv0Jq295IGFtAJg.roa (raw, json)
Hash identifier: pFWfUYdezJ2t7AHZ+5X/670ftk9lQIJoGvPFtNKSvUo=
Subject key identifier: 41:CC:4A:7D:F6:16:F4:BD:26:4E:FD:09:AB:6F:79:20:61:6D:00:98
Certificate issuer: /CN=8fb17426e77745a6887b6e2c8a110dadb7194bc7
Certificate serial: 0187819DE6736F6C53D0F364E2E5D21DFFFC
Authority key identifier: 8F:B1:74:26:E7:77:45:A6:88:7B:6E:2C:8A:11:0D:AD:B7:19:4B:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7F0Jud3RaaIe24sihENrbcZS8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/QcxKffYW9L0mTv0Jq295IGFtAJg.roa
Signing time: Fri 14 Apr 2023 21:13:41 +0000
ROA not before: Fri 14 Apr 2023 21:13:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16509
IP address blocks: 193.227.246.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:81:9d:e6:73:6f:6c:53:d0:f3:64:e2:e5:d2:1d:ff:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb17426e77745a6887b6e2c8a110dadb7194bc7
Validity
Not Before: Apr 14 21:13:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41cc4a7df616f4bd264efd09ab6f7920616d0098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:ad:9e:2c:b6:73:45:cb:ee:94:41:72:c0:
f1:45:ec:18:9c:ce:de:9c:48:a5:bc:a4:7d:7b:51:
79:af:e1:e6:43:05:37:ae:6f:0d:68:3d:65:15:24:
dd:a6:29:ee:86:b5:fe:64:e3:68:61:92:dd:e1:bd:
9c:1e:02:d1:19:e9:b6:32:80:72:5b:0d:1e:33:2d:
39:1f:f2:84:12:d8:24:fb:90:2c:b0:96:b0:50:9f:
ed:93:b6:eb:7c:b6:9e:20:e4:52:f1:07:c3:6e:c6:
14:b2:99:95:32:f3:cc:46:1b:13:14:57:92:63:2b:
77:0b:b4:41:ea:c0:ca:f4:f7:e4:ce:24:f4:30:0a:
98:c6:25:3c:f9:54:fd:d9:66:83:f1:e4:95:a3:92:
4b:92:c1:8f:f2:90:d7:41:20:4e:c2:9c:3c:bb:0a:
7e:cd:44:ac:aa:28:01:c1:d5:03:36:f1:76:e5:3f:
18:75:37:86:a3:74:22:25:aa:29:43:2d:59:f1:a8:
5e:64:ee:4f:fe:9b:70:b3:bd:21:c4:67:c8:96:8c:
ad:9c:d6:87:3a:f6:18:8c:2e:ea:1f:00:11:44:ec:
3f:bc:5c:6f:32:38:13:d7:69:41:6b:aa:80:8b:e7:
7b:85:20:e2:a2:b5:91:70:e3:4a:f1:ab:97:47:b6:
a6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CC:4A:7D:F6:16:F4:BD:26:4E:FD:09:AB:6F:79:20:61:6D:00:98
X509v3 Authority Key Identifier:
keyid:8F:B1:74:26:E7:77:45:A6:88:7B:6E:2C:8A:11:0D:AD:B7:19:4B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7F0Jud3RaaIe24sihENrbcZS8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/QcxKffYW9L0mTv0Jq295IGFtAJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/454d35-a80c-4ddb-966d-a0fdf6f2e72d/1/j7F0Jud3RaaIe24sihENrbcZS8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.227.246.0/23
Signature Algorithm: sha256WithRSAEncryption
5a:4f:28:df:d5:4e:97:84:8a:84:d8:71:90:71:a2:46:85:12:
da:6f:c6:a7:95:4a:4a:f4:cd:51:b6:2a:e7:42:c7:25:00:8c:
aa:c6:de:32:25:b4:32:b1:6e:67:d0:8f:bb:8a:d1:29:36:ba:
65:26:cc:4d:ce:58:e8:3a:4b:ee:7b:07:16:b0:4f:f8:76:ab:
39:77:f2:41:96:26:8e:8a:e2:ed:51:9f:eb:38:65:23:2d:b7:
02:df:d5:fc:73:67:6f:c9:3c:d9:9a:1c:ad:62:ff:82:e3:21:
03:64:32:13:6a:b4:61:a7:e2:88:3b:99:de:18:33:01:06:66:
2a:a5:ed:d8:8a:37:d2:14:f7:65:27:f6:ce:f2:31:30:32:b1:
10:10:6e:43:8f:7b:b2:d0:fe:bb:c1:4a:14:9b:91:f1:6c:de:
8d:55:ea:15:fb:39:9c:c7:74:68:45:b0:07:db:f1:04:df:73:
83:b7:3a:cc:46:07:3b:9b:90:d9:64:34:a3:7d:67:08:57:74:
90:a9:4f:84:0a:7a:27:4e:25:df:ff:25:23:0b:af:9a:21:34:
ee:c1:83:6c:5d:95:ee:d8:89:af:5a:4d:40:df:27:03:4e:c6:
49:57:54:8a:1c:3b:56:b9:0c:85:c8:e4:a9:c1:28:12:5c:e6:
ac:3e:a6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:57 2025 by rpki-client