Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/qDr_cYRuD3mPTiGEK_G-6xxMKz0.roa
File: qDr_cYRuD3mPTiGEK_G-6xxMKz0.roa (raw, json)
Hash identifier: aqycyjtdIZXGI72ztTizlT0ZMLibQUMgGBBwchmGGPg=
Subject key identifier: A8:3A:FF:71:84:6E:0F:79:8F:4E:21:84:2B:F1:BE:EB:1C:4C:2B:3D
Certificate issuer: /CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Certificate serial: 01941F8C497039668F90A1085C63A4247221
Authority key identifier: 7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/qDr_cYRuD3mPTiGEK_G-6xxMKz0.roa
Signing time: Wed 01 Jan 2025 01:47:55 +0000
ROA not before: Wed 01 Jan 2025 01:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57671
IP address blocks: 192.146.140.0/23 maxlen: 23
192.146.140.0/24 maxlen: 24
192.146.141.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:49:70:39:66:8f:90:a1:08:5c:63:a4:24:72:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a3508be2a868d6ce54db9b3a864d4be985cae4d
Validity
Not Before: Jan 1 01:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a83aff71846e0f798f4e21842bf1beeb1c4c2b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:b9:ab:af:ed:bf:27:d7:f3:ef:ca:85:d5:6e:
3d:cd:e6:5e:ae:87:ae:0c:d3:34:3b:b7:83:5c:a4:
23:98:c0:8c:c6:dc:dd:1e:cc:82:6e:38:d6:e2:26:
41:61:c4:f8:9f:30:ff:ac:85:e0:9e:d7:33:da:c4:
4b:39:dc:9e:c7:72:b7:fe:dc:0e:c5:e1:aa:29:7b:
8f:82:ff:3d:97:af:01:a3:bc:cd:c5:ab:62:ae:4c:
dd:29:79:c8:fc:e0:a3:d2:af:33:95:11:fe:4a:86:
b9:29:ec:73:4b:99:66:ce:d6:4b:63:94:49:92:2a:
b3:b1:7e:30:cc:f6:1d:91:4d:56:c8:95:7e:27:40:
3e:fa:cd:9d:0d:6e:5f:9f:8b:43:6a:5f:57:e9:99:
6a:ee:1a:8f:68:e4:eb:7d:9f:da:ed:bc:0d:04:1f:
78:8e:22:f2:fd:6f:24:2b:fe:87:d4:83:16:45:cd:
54:f9:25:95:ca:7e:2c:05:a5:1d:4c:b9:67:5e:aa:
79:0e:14:4b:63:27:88:6a:f2:6b:ef:35:eb:0a:d3:
00:71:dd:5d:81:4d:cc:e7:43:09:a1:0e:e6:97:39:
a6:94:4b:3f:42:e5:2f:0c:0a:23:d7:27:30:5c:c3:
e3:06:44:a3:fd:16:58:9b:21:7f:4d:a5:0a:a1:fb:
21:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:3A:FF:71:84:6E:0F:79:8F:4E:21:84:2B:F1:BE:EB:1C:4C:2B:3D
X509v3 Authority Key Identifier:
keyid:7A:35:08:BE:2A:86:8D:6C:E5:4D:B9:B3:A8:64:D4:BE:98:5C:AE:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ejUIviqGjWzlTbmzqGTUvphcrk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/qDr_cYRuD3mPTiGEK_G-6xxMKz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7588d0-33bd-49c9-885d-4c38bff1af18/1/ejUIviqGjWzlTbmzqGTUvphcrk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.146.140.0/23
Signature Algorithm: sha256WithRSAEncryption
25:d8:bd:96:e0:93:76:d0:dc:75:54:ed:b7:99:5b:a6:60:59:
47:c8:e0:e2:1e:2f:51:22:d6:53:b9:49:46:58:13:ed:81:21:
ea:b0:8e:26:d4:04:9b:00:cb:ae:be:92:fa:4c:b4:bf:94:69:
4c:45:b2:78:f3:cb:1a:70:1d:13:fa:cc:77:45:3e:2d:b0:43:
8d:64:e8:9e:77:3c:a7:82:40:4a:a6:76:e9:f0:7d:fb:45:52:
ec:4a:5f:a6:a3:4c:cc:69:ca:12:79:74:6c:c0:6b:62:0c:b4:
9c:5e:c9:16:91:c3:19:35:56:fe:38:d7:1a:72:af:b7:40:73:
d0:aa:01:ed:08:f0:f3:00:ec:c2:56:96:59:70:5b:4d:c6:6a:
14:0d:0d:06:29:85:5b:dc:a0:a4:9e:6a:1a:60:5b:f4:7e:3a:
e1:64:3c:ba:e2:7c:e7:df:6d:48:2d:0a:2c:25:e4:e4:5f:4d:
44:30:72:44:20:5e:95:43:33:a3:20:58:54:9f:af:4a:1e:ba:
bd:24:95:34:14:bc:d0:0c:c1:6e:dd:00:1d:52:7c:13:07:09:
9a:c5:72:e2:ec:df:41:7f:5d:65:53:e6:17:1b:e4:f5:18:b9:
38:98:9a:ca:5f:ec:90:76:5e:ed:06:ea:bd:e0:94:26:12:70:
91:40:94:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:06:37 2025 by rpki-client