Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/q3c0nqu3cvVF1P4pP_Fd1QB__oM.roa
File: q3c0nqu3cvVF1P4pP_Fd1QB__oM.roa (raw, json)
Hash identifier: 0T5a1M9vKHZOI+vI06dhOxwkFavzMzkoK2syLRuS4BI=
Subject key identifier: AB:77:34:9E:AB:B7:72:F5:45:D4:FE:29:3F:F1:5D:D5:00:7F:FE:83
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01942521C6AF83C587FB109A8FC24B2E6878
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/q3c0nqu3cvVF1P4pP_Fd1QB__oM.roa
Signing time: Thu 02 Jan 2025 03:49:18 +0000
ROA not before: Thu 02 Jan 2025 03:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 193.163.85.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c6:af:83:c5:87:fb:10:9a:8f:c2:4b:2e:68:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jan 2 03:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab77349eabb772f545d4fe293ff15dd5007ffe83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:0c:db:0c:50:77:5c:ca:f0:14:33:2b:32:36:
55:25:87:ca:10:55:20:ec:3d:59:22:7b:34:3f:07:
f3:f6:e2:c4:c2:ed:b7:c0:f7:64:02:af:6f:39:1c:
0e:af:a0:d5:2a:2d:97:33:0e:51:f7:f4:ac:87:27:
08:5d:84:3f:cc:c2:64:9a:83:ce:f1:31:67:99:6a:
cf:60:d8:94:b9:a0:97:b3:00:32:44:51:07:24:ef:
8f:78:61:a4:13:4e:35:71:75:ac:95:e3:d9:23:3a:
2a:ef:82:78:e1:de:33:f1:8d:8e:c3:be:00:7c:17:
66:4a:34:6c:99:41:a6:ba:3d:15:40:b1:1e:da:d5:
c1:61:fc:51:00:cc:61:a6:87:7f:bf:90:de:6f:0d:
79:5b:3a:ce:f7:2f:7e:76:ab:29:85:12:6e:c2:28:
27:0e:23:82:dd:be:ff:88:75:2e:47:4f:aa:0d:42:
2f:6f:fc:c3:3e:3c:c9:09:f6:3f:31:1f:ad:52:da:
05:88:75:2c:58:4a:f1:05:a2:6e:17:6d:ac:b2:4c:
31:de:92:c5:6a:02:98:8e:ce:6c:e9:30:4f:d8:34:
be:03:54:6a:6b:e9:06:85:6b:7c:58:9f:57:87:fe:
91:15:fd:32:23:ff:ba:1b:cf:dd:3f:41:ad:9b:be:
af:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:77:34:9E:AB:B7:72:F5:45:D4:FE:29:3F:F1:5D:D5:00:7F:FE:83
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/q3c0nqu3cvVF1P4pP_Fd1QB__oM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.85.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:0a:da:2f:ef:06:80:97:51:95:fe:e5:55:e2:3f:cb:1a:47:
25:cc:85:03:c0:f9:12:30:86:3e:83:08:a5:fe:60:e2:e9:8e:
78:b7:e4:6e:1f:69:d9:14:9f:64:48:49:1f:cd:89:e3:f0:f7:
bc:f2:bf:17:ba:0a:d3:be:dc:ba:1a:75:a0:97:c5:ac:a6:ef:
28:c2:2b:ce:a8:8a:ac:73:d8:de:e2:66:10:3f:3c:16:f5:7a:
5f:de:44:f4:5b:ae:47:e9:6e:53:e1:0f:41:77:ba:62:4b:85:
b5:2a:ff:c2:50:d4:ad:01:74:0e:a6:19:9c:61:da:a0:b2:6c:
34:fc:73:b6:97:d9:f5:8c:76:b1:a3:07:a1:71:7f:28:68:7c:
c3:a9:16:63:d9:84:33:ad:aa:8d:c8:2c:a0:05:81:a5:d9:de:
6f:f8:8c:ec:a0:7f:90:a5:28:fc:00:dc:9f:88:10:dc:d6:cb:
62:ac:ce:a4:5e:24:f2:84:6c:65:47:c6:24:af:e8:e0:46:a6:
ff:46:ca:fa:ab:51:14:a4:76:2c:b3:a6:33:9d:88:a3:6d:43:
84:1a:c8:2f:61:ac:89:94:62:4a:9b:76:00:ca:ca:51:ed:a5:
92:38:73:f5:a5:ea:e1:2d:91:db:ed:ff:94:f6:4a:a0:80:4d:
79:4d:39:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:29:04 2025 by rpki-client