Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/kqpQozJYbiOeF5Yf2auzSJ7PAQw.roa
File: kqpQozJYbiOeF5Yf2auzSJ7PAQw.roa (raw, json)
Hash identifier: 1P+cwreujhRRyFPgrb8zcY4I1d2u+NU9now7YdN+EEs=
Subject key identifier: 92:AA:50:A3:32:58:6E:23:9E:17:96:1F:D9:AB:B3:48:9E:CF:01:0C
Certificate issuer: /CN=a7a538aac33778460e19701aab5952c7aa25f05c
Certificate serial: 01941F8C3E54192CAB10C29CC96700045121
Authority key identifier: A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/kqpQozJYbiOeF5Yf2auzSJ7PAQw.roa
Signing time: Wed 01 Jan 2025 01:47:52 +0000
ROA not before: Wed 01 Jan 2025 01:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207718
IP address blocks: 194.147.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3e:54:19:2c:ab:10:c2:9c:c9:67:00:04:51:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7a538aac33778460e19701aab5952c7aa25f05c
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=92aa50a332586e239e17961fd9abb3489ecf010c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:cd:66:63:b7:36:4a:c9:58:55:e5:bc:7a:28:
63:20:2e:f2:23:07:54:f9:7f:7d:56:bc:9c:e0:8e:
80:a5:ca:05:ab:af:bc:6e:28:8e:f8:72:4c:73:91:
b5:63:cf:d9:ec:04:af:17:ad:29:e1:ba:fe:c9:7f:
f3:2d:fd:17:5a:b7:25:b3:36:e2:a2:ad:f5:8d:9b:
7a:26:f6:b1:f6:35:68:34:02:1b:b0:2d:e6:c6:32:
9f:5b:76:66:81:b9:37:ca:ac:05:f8:59:f7:24:52:
92:10:5a:78:34:4b:71:48:ee:5d:18:3b:33:58:21:
e4:9e:22:df:41:7d:ea:ea:4b:af:a7:1d:ab:4b:cc:
1d:af:c9:38:4c:fd:3a:78:f3:42:95:3a:ba:29:1a:
53:64:cd:81:32:0a:81:d0:be:1a:75:b8:62:b7:28:
f3:7d:ae:2a:e5:b5:95:40:93:d5:b6:e8:1a:e5:97:
70:fb:bc:db:a6:59:49:5e:48:43:56:00:db:9f:84:
28:7c:a5:b7:ed:3f:d1:0e:7f:19:cb:41:00:ad:ad:
f6:24:65:44:f0:84:6a:50:15:fa:ac:8b:50:28:24:
2e:e2:43:0f:53:9c:0a:c4:01:09:20:8e:6e:67:a4:
14:c5:26:d0:23:5d:a6:94:36:e3:4c:1d:a3:bb:93:
a7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:AA:50:A3:32:58:6E:23:9E:17:96:1F:D9:AB:B3:48:9E:CF:01:0C
X509v3 Authority Key Identifier:
keyid:A7:A5:38:AA:C3:37:78:46:0E:19:70:1A:AB:59:52:C7:AA:25:F0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/kqpQozJYbiOeF5Yf2auzSJ7PAQw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a83337-6e16-4cd9-921a-87b010ea6235/1/p6U4qsM3eEYOGXAaq1lSx6ol8Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.32.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:89:73:97:9f:df:a1:6b:5a:e1:35:d5:88:ae:4a:a0:3e:44:
71:db:3b:74:f5:04:2e:e5:33:5b:db:ee:e3:d8:95:c6:7f:0b:
f3:b8:e4:c1:16:69:8f:03:f4:b8:21:76:3e:77:d9:ff:b8:bb:
70:ae:be:05:34:aa:cc:10:24:6a:a0:f1:f6:cf:cf:56:1c:88:
42:76:33:04:c2:d6:76:34:a4:e6:45:d5:3c:e9:7c:88:e1:0b:
62:a0:c0:0b:1c:22:d7:ee:f6:1b:c5:a5:42:31:37:e2:6b:73:
2e:26:88:da:ad:9e:8e:76:5f:e6:e5:ca:b9:05:6c:a3:f3:c8:
b2:9b:ab:33:06:de:91:3b:2c:8c:c9:ce:44:cf:0b:66:e6:db:
7d:34:3a:fc:53:2a:82:50:1b:21:eb:ac:ca:af:6a:32:d2:76:
3b:a5:ee:5f:1d:a9:38:88:ed:b3:d6:9c:49:a8:80:8c:16:f6:
f6:36:8d:83:4b:79:ee:0b:ec:a9:05:ad:c4:c6:6b:73:8d:e7:
d0:0e:1e:4f:e9:b9:24:d8:b3:c4:1c:31:f1:f4:8f:a1:11:4a:
fd:d2:b1:83:91:1b:8c:43:ee:26:c8:c9:53:fa:d8:22:d6:9a:
c5:dd:9f:64:fe:25:02:96:e0:f1:c5:33:b0:df:40:15:b7:40:
73:7d:13:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:05:58 2025 by rpki-client