Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/zqQPqsNghrHDurnrcYBnEoZLmxo.roa
File: zqQPqsNghrHDurnrcYBnEoZLmxo.roa (raw, json)
Hash identifier: X61i/t72QEVUDPoVAXxvJ+YmKuAemlBmWuMndAD4GQ0=
Subject key identifier: CE:A4:0F:AA:C3:60:86:B1:C3:BA:B9:EB:71:80:67:12:86:4B:9B:1A
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 019427B5DC4CDC0A99578926D5917C3AC4C3
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/zqQPqsNghrHDurnrcYBnEoZLmxo.roa
Signing time: Thu 02 Jan 2025 15:50:17 +0000
ROA not before: Thu 02 Jan 2025 15:50:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48940
IP address blocks: 77.232.140.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:dc:4c:dc:0a:99:57:89:26:d5:91:7c:3a:c4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Jan 2 15:50:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cea40faac36086b1c3bab9eb71806712864b9b1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:74:96:38:06:16:ad:f2:d9:15:71:3c:81:56:
3e:24:2a:19:a2:2b:46:52:f7:56:a3:1c:c7:c6:ca:
5a:c0:50:69:93:0a:79:b5:97:e4:bb:e7:4c:58:75:
6b:df:2a:04:24:3d:9e:f1:3a:55:21:b8:c1:f5:8a:
0b:da:e3:db:2a:25:7c:af:38:05:5c:af:64:6b:b4:
38:a2:c1:47:46:0c:57:29:a9:08:b3:89:a2:ea:74:
23:42:6f:a3:b2:0a:28:58:4b:75:bf:47:0e:d0:c1:
a2:fa:1b:28:8a:db:24:64:df:9f:cd:52:f2:c7:bd:
6b:a6:ab:5f:88:1a:d9:bd:e0:f8:f8:d6:5b:2d:c4:
ab:fa:17:8a:22:7c:31:0a:2b:33:ca:28:7a:2f:7d:
fc:c6:8d:0f:9c:a0:49:35:91:0f:c9:5b:90:d1:f9:
3a:f0:a3:f8:ed:57:72:0e:63:38:07:a3:0a:2f:21:
a7:97:55:b0:36:21:8a:24:44:8c:f1:c4:70:01:ab:
91:6e:71:a3:24:3f:32:12:9c:0d:ec:f1:1e:af:05:
79:c6:15:a4:61:dd:5f:95:4f:5e:41:16:31:f5:55:
00:a8:04:67:23:d7:17:96:21:80:25:0f:da:5d:29:
79:c8:3e:b3:da:2c:ef:33:d4:60:ea:41:54:b7:33:
29:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A4:0F:AA:C3:60:86:B1:C3:BA:B9:EB:71:80:67:12:86:4B:9B:1A
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/zqQPqsNghrHDurnrcYBnEoZLmxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.232.140.0/22
Signature Algorithm: sha256WithRSAEncryption
59:22:cc:b6:bd:93:f5:21:29:4a:0c:f3:6a:bb:76:7f:6f:38:
bc:92:c3:a8:20:84:22:29:81:bb:f8:a3:6c:76:ae:c1:e2:f8:
ed:05:8a:cc:ec:18:88:50:a8:5e:fe:e4:5f:2f:2f:dc:19:6a:
68:fe:1f:50:19:0f:5c:2a:ff:e6:c7:d8:bf:8f:fb:db:4e:45:
0b:1e:bc:15:a1:6c:7b:69:a8:0d:f9:9c:60:ab:11:03:52:af:
96:a8:b6:c4:47:9d:0d:c9:7b:0d:ba:26:66:a6:3a:8b:ad:47:
59:6e:39:98:70:3d:66:df:a4:d6:84:d9:6f:27:37:7f:d3:7b:
a5:0c:df:84:89:93:5c:7f:46:c7:b4:62:4e:67:cd:d4:7f:64:
dc:0e:31:21:11:d9:7f:8e:29:9d:67:32:1d:b0:f6:ca:13:97:
5c:d2:f0:f4:9d:bf:da:e5:0a:73:06:17:20:80:e5:18:6e:3c:
3b:1e:55:d9:d3:24:ab:ae:58:bc:32:5a:1c:93:e3:c4:33:53:
4f:95:c7:32:c6:0b:e1:17:4d:9b:7e:fa:a6:a1:13:e4:76:24:
d0:e2:98:26:67:19:0b:f8:5d:6d:99:84:e3:bd:02:6d:47:1d:
29:4c:1c:84:52:76:58:05:47:bb:bc:3e:3a:2e:1b:bd:e0:ae:
46:00:bf:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:31 2025 by rpki-client