Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/qfFhbPzEEV7-3fOF8iI3mosl_gc.roa
File: qfFhbPzEEV7-3fOF8iI3mosl_gc.roa (raw, json)
Hash identifier: eNrgqVa+1D+OMy3T6aNIQjkftemLm7/l9HKfq0aM6Lw=
Subject key identifier: A9:F1:61:6C:FC:C4:11:5E:FE:DD:F3:85:F2:22:37:9A:8B:25:FE:07
Certificate issuer: /CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Certificate serial: 01942143E9DC3B56AA018F5DFF26DC4FE746
Authority key identifier: 5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/qfFhbPzEEV7-3fOF8iI3mosl_gc.roa
Signing time: Wed 01 Jan 2025 09:48:06 +0000
ROA not before: Wed 01 Jan 2025 09:48:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56818
IP address blocks: 91.227.254.0/24 maxlen: 24
192.162.200.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e9:dc:3b:56:aa:01:8f:5d:ff:26:dc:4f:e7:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5be719f985df394a42ac11e5cbc8f82b4b7aec5d
Validity
Not Before: Jan 1 09:48:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9f1616cfcc4115efeddf385f222379a8b25fe07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:43:d2:7f:75:ca:a1:5b:1f:35:3f:ef:89:c8:
c3:f6:09:0e:39:fb:a7:ef:da:31:b7:d0:22:3f:94:
87:3b:23:ca:10:39:ac:36:b9:90:9a:14:25:07:47:
4e:5b:49:54:f3:4d:27:aa:78:01:6f:6c:d7:24:85:
99:05:67:72:69:6f:97:fb:a0:c5:c4:60:76:8e:33:
79:1c:47:db:62:2b:f8:f2:0d:1e:bd:6f:db:03:1f:
ea:47:c1:08:ca:58:b6:85:aa:f9:e0:dc:14:75:7d:
9e:d5:15:fd:fc:ac:2d:67:dd:50:9d:13:04:b9:bc:
b7:c1:4e:dd:6f:9b:86:d1:a5:da:70:84:33:d2:88:
b5:78:84:45:fe:f2:3e:98:a6:a1:11:85:f6:c8:1d:
59:a4:b7:65:0f:8c:a7:07:a1:89:e4:cf:31:50:09:
57:30:b7:0a:f0:17:83:f9:4e:31:7f:77:b7:c6:ad:
4a:b8:9c:4d:34:5f:b6:38:4f:09:78:36:68:4e:15:
60:88:7a:b7:13:eb:da:a2:90:37:74:29:0b:e5:ab:
78:27:87:8e:80:cd:33:30:0e:8e:e6:17:42:ee:00:
48:5c:de:a8:24:f0:f7:a6:de:dd:58:96:dd:98:4b:
5d:6f:c4:a8:20:a3:1f:f4:1a:d7:55:c6:f5:19:a3:
22:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F1:61:6C:FC:C4:11:5E:FE:DD:F3:85:F2:22:37:9A:8B:25:FE:07
X509v3 Authority Key Identifier:
keyid:5B:E7:19:F9:85:DF:39:4A:42:AC:11:E5:CB:C8:F8:2B:4B:7A:EC:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W-cZ-YXfOUpCrBHly8j4K0t67F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/qfFhbPzEEV7-3fOF8iI3mosl_gc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9c0278-542c-4467-ac7c-24aee2b0e82b/1/W-cZ-YXfOUpCrBHly8j4K0t67F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.254.0/24
192.162.200.0/22
Signature Algorithm: sha256WithRSAEncryption
06:d2:a7:07:35:01:a3:78:70:50:db:66:d0:36:eb:fe:ef:09:
9e:ca:24:68:4e:a7:e5:1c:cd:0a:4d:b4:e1:1b:eb:3a:f2:41:
76:63:04:4d:71:8b:27:b3:2f:d1:46:86:0d:e4:66:c8:f2:e3:
39:c8:7e:f9:55:62:c5:24:1d:71:b2:b9:74:47:9a:4a:f7:ef:
d6:42:60:cc:2c:2f:4f:23:a3:f0:22:7c:cb:59:1c:b1:77:43:
2e:35:dc:9a:0e:4e:90:d4:eb:2b:fd:be:59:fd:35:9e:36:33:
71:96:9a:72:c1:4a:7e:6f:fe:72:44:d3:e7:c9:b7:5c:cf:28:
4d:4d:da:f8:c1:f8:81:10:4e:a3:f5:45:e8:79:18:ae:29:19:
16:ab:27:fb:1c:ad:2f:d2:11:ee:99:0b:83:c3:ae:f0:a3:d6:
d7:60:42:60:06:d9:c0:1d:f0:27:79:ec:aa:9a:4c:70:a3:61:
fa:a0:49:a8:94:72:a1:5e:c0:d7:3e:84:fb:9b:a0:0e:e4:8e:
54:7e:dd:30:81:1c:48:6e:ad:db:76:a8:d5:23:ad:ed:fe:d9:
8e:87:03:9f:9d:a8:83:c4:8e:01:51:0a:9b:26:51:95:1d:05:
2f:b3:d0:57:0c:39:eb:a6:7c:fe:24:b5:c1:3f:70:53:03:cb:
4f:93:31:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:57:27 2025 by rpki-client