Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/Q6We2_Kzknmf_FU65X_ThS9Li9U.roa
File: Q6We2_Kzknmf_FU65X_ThS9Li9U.roa (raw, json)
Hash identifier: T5kdvis2FcaJDZX7ZiymCfqr46qyRqmHtR1xf7wekhE=
Subject key identifier: 43:A5:9E:DB:F2:B3:92:79:9F:FC:55:3A:E5:7F:D3:85:2F:4B:8B:D5
Certificate issuer: /CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Certificate serial: 0194244527A50F8736AE4EBCC3D5ECFFC077
Authority key identifier: DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/Q6We2_Kzknmf_FU65X_ThS9Li9U.roa
Signing time: Wed 01 Jan 2025 23:48:19 +0000
ROA not before: Wed 01 Jan 2025 23:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49556
IP address blocks: 194.5.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:27:a5:0f:87:36:ae:4e:bc:c3:d5:ec:ff:c0:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc4b4a18a7e151a37da5e4ccdaa9e7dbd88e9d93
Validity
Not Before: Jan 1 23:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43a59edbf2b392799ffc553ae57fd3852f4b8bd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ee:5c:18:ed:16:09:28:de:40:6a:5b:52:4e:
39:dd:15:fb:a5:7f:27:6e:db:10:07:f9:99:c5:e1:
06:92:2f:13:bb:0d:b2:34:d6:66:c4:c5:13:aa:15:
f2:5c:ad:ad:34:4b:c3:d6:47:f8:82:f0:e1:13:69:
0f:e2:cb:bd:ff:e4:0a:63:be:a9:a7:df:32:5a:fd:
d5:f8:85:78:4f:d6:6d:27:90:f2:60:44:f6:00:8a:
9a:2c:d1:a5:94:9c:5b:58:bd:86:12:97:1b:78:ec:
3d:e6:64:56:71:b4:39:b0:04:b0:07:dc:75:2c:00:
77:ae:61:72:7b:09:63:a6:f1:50:88:ba:54:2c:fd:
66:54:86:da:8f:6f:76:d4:5e:6f:92:f1:c5:a3:ae:
c7:8d:61:4e:ec:90:50:37:8a:91:f9:cb:88:fa:30:
cd:fa:40:3a:e9:b9:c3:7c:9a:96:be:c2:d0:a3:de:
a5:5c:69:e8:ea:36:0b:9f:8b:e5:c9:6d:bf:b6:74:
75:99:27:c5:86:dc:5a:33:ff:53:ce:34:28:88:6b:
e2:fa:9b:40:60:4a:b9:29:a9:4d:96:d1:a8:31:e7:
5b:89:e3:2e:9b:c8:07:4f:db:5b:c2:4f:5d:1a:f7:
1d:f0:2f:44:82:0f:0f:15:e2:e3:e7:40:75:89:ad:
30:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A5:9E:DB:F2:B3:92:79:9F:FC:55:3A:E5:7F:D3:85:2F:4B:8B:D5
X509v3 Authority Key Identifier:
keyid:DC:4B:4A:18:A7:E1:51:A3:7D:A5:E4:CC:DA:A9:E7:DB:D8:8E:9D:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3EtKGKfhUaN9peTM2qnn29iOnZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/Q6We2_Kzknmf_FU65X_ThS9Li9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/361a21-0b5a-4367-841e-3dd293f74e5e/1/3EtKGKfhUaN9peTM2qnn29iOnZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.50.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:2f:f2:3b:69:e7:46:a0:a7:67:fe:30:b3:61:39:47:15:0f:
9d:1d:3d:d1:3c:0d:39:62:b4:8d:d1:da:c5:00:48:e0:3d:ed:
d8:5e:32:fb:9a:82:78:b7:ed:ce:2f:54:8b:67:b3:2c:9b:b8:
f2:75:44:e1:43:82:e1:e5:a0:2b:b9:ce:40:6d:a4:a5:f9:4e:
eb:2d:57:89:32:6d:10:0a:43:2d:ce:38:f4:69:ae:06:70:ac:
0d:10:c0:f7:69:f4:11:04:45:72:a0:0c:e2:41:3c:75:18:fa:
f6:9e:d8:6b:a4:63:52:25:c4:c3:b1:e9:79:77:50:c6:3c:3e:
11:d6:ba:b0:38:26:5e:95:d4:f5:ef:ee:3a:d2:cd:26:c8:76:
f6:1a:0a:7d:0a:90:7a:e7:98:63:85:e6:12:f4:56:8b:a7:38:
0e:3f:2a:92:b8:a4:ba:ea:e4:65:6a:0b:87:87:a4:1c:af:aa:
0d:78:76:22:dc:b4:ac:88:12:4f:09:39:9e:d4:4a:a9:52:22:
17:2a:ae:bb:62:91:1f:2e:62:2e:75:0e:fc:de:3b:17:d2:c4:
db:7a:5e:62:07:d5:55:2f:25:b6:c1:cb:4f:e3:2c:60:99:c7:
bb:5e:64:6a:e3:53:02:dd:99:3a:82:85:5f:75:20:51:8e:23:
9c:92:f9:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:32:56 2025 by rpki-client