Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/qcpy2trLVlMtCs_YUMoapnpVOiY.roa
File: qcpy2trLVlMtCs_YUMoapnpVOiY.roa (raw, json)
Hash identifier: kXj1j8R13poDsCnQAYIV+jTRpyGNnFmiFn63Si++gbk=
Subject key identifier: A9:CA:72:DA:DA:CB:56:53:2D:0A:CF:D8:50:CA:1A:A6:7A:55:3A:26
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 0194266B8CAA3377AA74560617E4EC00C4FE
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/qcpy2trLVlMtCs_YUMoapnpVOiY.roa
Signing time: Thu 02 Jan 2025 09:49:30 +0000
ROA not before: Thu 02 Jan 2025 09:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42947
IP address blocks: 84.232.66.0/23 maxlen: 23
84.232.68.0/24 maxlen: 24
84.232.94.0/24 maxlen: 24
88.148.8.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:8c:aa:33:77:aa:74:56:06:17:e4:ec:00:c4:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: Jan 2 09:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9ca72dadacb56532d0acfd850ca1aa67a553a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:a3:ba:6e:a9:49:bf:4a:5c:7d:ba:e5:93:
23:e6:58:16:2c:9d:26:c2:ce:7f:17:b3:e7:ca:b0:
88:68:d9:4c:c9:a0:22:99:23:18:09:be:d9:3e:7c:
1e:15:33:95:e1:ac:e1:c1:a8:50:11:06:76:b4:7e:
e6:c4:85:10:7b:1b:32:d1:cb:09:62:f2:d4:03:12:
cf:48:5e:a0:45:9a:51:03:7b:de:89:46:e2:31:a6:
1b:bd:b8:74:9a:40:b1:76:56:be:67:7b:a8:69:bf:
d4:8a:ae:76:ac:99:71:ec:cb:91:6d:6c:f3:c6:90:
4c:d2:9e:9f:d5:8f:c2:59:79:41:2d:36:f6:c9:64:
97:cd:17:24:e1:b1:64:2e:7d:28:83:f8:e5:99:ad:
e0:f2:2b:11:21:bf:a9:be:b2:a2:71:d4:d5:5e:9e:
05:56:1c:3f:15:c4:bf:a9:62:cc:df:c7:6e:25:28:
05:3b:de:a6:90:17:01:ad:c6:42:15:5e:18:ea:d5:
75:7a:fd:ff:b4:5f:d2:41:d2:11:e5:6e:28:cc:c1:
fc:be:ed:65:1e:e4:e1:31:7a:6b:1d:db:ae:50:3e:
a5:5d:fa:13:a5:2c:f2:b5:d0:d2:2c:f7:3a:05:3d:
c9:01:34:92:38:4c:43:5f:ce:f0:f0:3f:5b:51:e6:
18:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CA:72:DA:DA:CB:56:53:2D:0A:CF:D8:50:CA:1A:A6:7A:55:3A:26
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/qcpy2trLVlMtCs_YUMoapnpVOiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.232.66.0-84.232.68.255
84.232.94.0/24
88.148.8.0/23
Signature Algorithm: sha256WithRSAEncryption
cd:96:32:e1:91:f5:ae:5f:71:37:52:e3:79:ab:8d:24:d2:d3:
0d:a0:03:f8:ac:61:72:c2:06:07:72:7b:f8:e3:f7:bb:da:a5:
09:7d:9b:d8:7b:e8:6a:e1:b7:1f:0e:03:14:e0:4c:81:97:4c:
15:64:5f:c6:61:28:3a:81:1d:f0:f9:42:3c:8d:e2:b1:74:ed:
3e:7f:ee:5b:d7:9b:c3:9a:e4:6e:24:aa:69:43:f4:ca:bd:de:
4f:ba:97:75:99:5c:d8:80:b9:b7:7d:1a:e7:36:52:ae:52:f8:
58:12:6e:25:91:0b:33:87:e8:35:cd:5a:9f:12:eb:86:e2:b6:
59:88:7a:f1:4d:81:2a:fa:8d:7f:b0:c4:5a:71:ee:8a:89:f7:
5e:32:29:02:5c:47:41:e3:50:ba:cb:ec:63:72:a8:d1:62:c8:
ab:eb:c0:57:d1:ee:cc:43:56:3d:04:90:f8:7c:c7:bd:f7:ea:
e3:d8:1c:52:d1:92:f5:b5:3f:27:e6:f5:5d:50:f0:76:45:df:
64:37:f5:fc:4b:bc:f0:3f:9b:61:1a:aa:f0:df:ce:3f:df:12:
9b:15:da:75:7c:7b:71:ef:aa:b5:09:e0:97:1f:cc:ea:72:7a:
ee:dd:db:b5:42:ce:5a:9b:1c:3f:68:8d:e0:65:3f:3b:d3:6a:
da:bc:52:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:52:45 2025 by rpki-client