Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/QCuK4L2kTVzKSV1vVFe03doVwV8.roa
File: QCuK4L2kTVzKSV1vVFe03doVwV8.roa (raw, json)
Hash identifier: 7dkx07rgYuCQicI88oKXaI3bLLc9fNDTc6Q+Rw8F3r4=
Subject key identifier: 40:2B:8A:E0:BD:A4:4D:5C:CA:49:5D:6F:54:57:B4:DD:DA:15:C1:5F
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 019422FB7209329510779B0A0BDFF8D27D5D
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/QCuK4L2kTVzKSV1vVFe03doVwV8.roa
Signing time: Wed 01 Jan 2025 17:48:11 +0000
ROA not before: Wed 01 Jan 2025 17:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12722
IP address blocks: 46.150.248.0/24 maxlen: 24
46.150.249.0/24 maxlen: 24
91.195.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:72:09:32:95:10:77:9b:0a:0b:df:f8:d2:7d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 17:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=402b8ae0bda44d5cca495d6f5457b4ddda15c15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bd:3b:25:a1:fd:47:a1:ce:74:7f:c7:30:95:
32:32:45:06:3f:9b:be:64:d3:fc:01:f2:3d:00:86:
c8:49:6f:16:4d:77:56:c4:ef:d6:18:45:8a:ab:c4:
43:cb:42:c0:3a:ec:52:f4:64:9e:42:9e:6e:4f:ff:
45:ae:23:fe:9d:df:05:b8:bf:e1:b9:c1:97:7e:46:
cc:5c:c0:f7:b5:d9:4b:0a:56:de:08:df:c2:dd:a9:
0c:20:eb:46:db:22:fe:3d:21:47:a5:58:3f:63:e3:
c1:60:d9:fc:7e:ee:be:b3:54:30:b3:dc:17:95:e1:
09:4c:2b:39:ad:8f:60:78:07:23:21:32:74:8d:67:
24:ac:7c:73:22:1c:85:47:6c:67:8a:5d:be:83:0d:
dc:e6:d6:9b:bd:7f:78:25:90:a4:a9:df:d8:7f:d5:
f6:12:12:b7:55:8d:06:33:28:a6:7e:e1:51:fb:ae:
06:a0:77:65:fb:55:d1:dc:ef:81:83:fe:e2:9d:17:
6d:e2:1e:54:57:53:80:fb:39:73:dd:01:ee:d5:d1:
e2:5a:28:30:96:b2:52:a4:ac:d3:fd:4a:19:a4:7b:
71:01:19:ce:d2:3c:6e:56:e9:01:cf:99:28:a1:ff:
2e:71:41:b1:c2:63:23:9c:1f:cf:70:47:5c:07:a3:
31:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2B:8A:E0:BD:A4:4D:5C:CA:49:5D:6F:54:57:B4:DD:DA:15:C1:5F
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/QCuK4L2kTVzKSV1vVFe03doVwV8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.150.248.0/23
91.195.21.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:97:d2:13:9e:36:6e:a3:df:d1:1d:03:93:31:97:bc:03:47:
3c:cd:fa:93:f5:d4:72:d0:21:0b:8e:b4:8f:33:0c:69:e3:52:
bf:33:0b:23:d0:aa:e7:5d:7c:fa:cd:6d:e8:36:46:8a:c5:90:
33:68:b0:49:0c:70:eb:56:99:bb:8a:2a:5f:29:2b:6d:76:5e:
ef:bd:bc:8b:15:f2:91:b6:7f:e9:7f:93:9a:3b:5e:84:c5:9d:
d2:30:3e:e2:57:b2:f3:3a:98:66:fe:63:f3:fc:d0:1e:f1:79:
d7:0f:f4:90:0b:f9:86:a8:71:5d:86:9c:18:1d:b1:3f:8e:8c:
83:9e:28:eb:70:c4:40:95:64:12:28:c1:1c:52:cc:5d:70:f8:
25:40:8c:9f:c3:e7:22:21:1b:81:c9:d7:58:be:57:f2:39:85:
48:f9:65:d3:5d:12:79:a9:98:87:26:b5:7b:ff:09:d9:34:49:
9b:09:ab:56:67:65:ea:2f:ea:2b:38:5d:d4:f6:43:37:2e:d0:
03:33:70:c8:9d:21:6c:e1:e2:45:e4:ec:c9:fa:e5:1b:1c:ef:
e5:ad:95:7e:1f:e9:70:f6:aa:86:b1:ed:4a:3c:f3:15:bd:85:
cb:8e:13:e1:11:f0:cd:9b:8b:87:d8:86:ae:94:ab:83:07:fb:
7a:4d:e0:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:43:46 2025 by rpki-client