Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/qRLnIaoA5tgF_wuUnmtC92FNeHg.roa
File: qRLnIaoA5tgF_wuUnmtC92FNeHg.roa (raw, json)
Hash identifier: rsDTMcr/s8fRxEhGcP2YbL3pJQIYeRkPC77GB19q1oQ=
Subject key identifier: A9:12:E7:21:AA:00:E6:D8:05:FF:0B:94:9E:6B:42:F7:61:4D:78:78
Certificate issuer: /CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Certificate serial: 019421B1A9D20580FEE116BC923168A761FC
Authority key identifier: 1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/qRLnIaoA5tgF_wuUnmtC92FNeHg.roa
Signing time: Wed 01 Jan 2025 11:47:58 +0000
ROA not before: Wed 01 Jan 2025 11:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 174
IP address blocks: 45.93.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a9:d2:05:80:fe:e1:16:bc:92:31:68:a7:61:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e9fdc7fb39ebbbed4ee54f703d3ac6153ddee69
Validity
Not Before: Jan 1 11:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a912e721aa00e6d805ff0b949e6b42f7614d7878
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2a:4a:2f:4c:9e:a6:18:c5:a1:de:da:4c:e2:
8f:00:6c:96:a6:c3:67:5a:29:c7:f1:9b:f4:9d:c9:
d0:71:a6:99:82:cc:db:03:b5:cb:b7:8c:40:d0:82:
36:f4:c9:11:5c:5b:28:ed:e7:6b:55:43:22:50:91:
e1:c4:05:91:56:8e:37:3d:8d:ab:09:d5:89:6d:03:
a4:24:dc:e7:d5:d3:d6:ab:d6:3d:f9:59:51:42:dd:
45:60:43:f5:17:12:dd:29:b3:0e:f9:6a:c9:22:6c:
e9:43:bb:31:59:69:75:45:c0:3f:5b:08:d1:67:0f:
dd:44:0e:cb:92:f2:85:70:27:ff:98:79:f6:be:57:
b7:38:0b:70:1a:43:76:ae:d4:51:8a:95:5c:69:cb:
4f:68:f1:de:b0:6d:d4:fd:5b:96:14:d3:33:18:84:
82:1c:01:4a:9a:de:e6:39:de:d8:78:9c:13:4f:0c:
e7:09:85:0d:35:9c:88:b8:76:89:fc:b0:4c:0d:be:
0f:5f:51:0a:c8:48:e9:15:32:30:69:23:1f:28:25:
39:e2:f4:13:dc:cf:23:e9:8b:f6:ae:06:0a:0d:7b:
ff:d1:c3:e7:d7:48:0b:5a:9e:15:57:52:e2:b2:42:
79:2b:02:dd:76:85:cf:3e:d3:07:ea:95:c8:2c:ea:
90:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:12:E7:21:AA:00:E6:D8:05:FF:0B:94:9E:6B:42:F7:61:4D:78:78
X509v3 Authority Key Identifier:
keyid:1E:9F:DC:7F:B3:9E:BB:BE:D4:EE:54:F7:03:D3:AC:61:53:DD:EE:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/qRLnIaoA5tgF_wuUnmtC92FNeHg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/40fdd1-1092-4f69-b648-691ff5b44b01/1/Hp_cf7Oeu77U7lT3A9OsYVPd7mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.93.62.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:ec:fb:98:5b:f4:2b:ef:6a:22:12:fc:b5:4a:0e:61:69:c1:
3d:96:40:aa:64:97:91:86:2d:7b:ea:6a:39:d3:64:15:ab:bc:
08:14:5f:dd:24:5f:15:65:09:46:b1:41:36:e3:26:ef:a5:0f:
57:8a:e4:2f:09:e4:23:ab:bf:25:c0:b9:7e:50:6c:e6:24:5c:
3a:ae:92:79:7b:a8:e7:6e:92:42:bc:47:7e:85:de:df:a3:b5:
57:ab:fd:55:44:72:f4:4c:49:04:5c:f4:c4:59:1a:a3:9a:af:
fb:da:f5:1f:6c:3b:9f:4a:df:8f:d8:b9:d2:b7:d1:cc:84:ec:
b3:d2:9e:bf:2e:2b:50:10:80:cc:02:6c:e2:04:d8:04:b3:2c:
77:8b:63:c0:3f:9b:25:ba:77:8d:4f:f2:f6:99:96:c7:ae:35:
90:cf:af:e3:fc:05:b5:ec:91:11:39:e3:e8:c2:f0:3d:18:e1:
d8:b1:ee:1a:51:dc:bc:77:70:db:94:d4:0d:6d:7c:2c:af:07:
9e:9a:8c:b3:da:f5:49:03:49:2e:db:fa:ac:ee:1b:22:49:29:
0a:cc:d4:91:77:b8:e0:f9:62:f1:df:d0:37:e6:85:ac:f8:e3:
a1:5f:dd:06:cd:60:be:17:0d:ea:b6:f2:c8:2b:29:a7:b4:60:
da:77:08:dc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsanSBYD+4Ra8kjFop2H8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlOWZkYzdmYjM5ZWJiYmVkNGVlNTRmNzAzZDNhYzYxNTNk
ZGVlNjkwHhcNMjUwMTAxMTE0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTEyZTcyMWFhMDBlNmQ4MDVmZjBiOTQ5ZTZiNDJmNzYxNGQ3ODc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyipKL0yephjFod7aTOKPAGyWpsNn
WinH8Zv0ncnQcaaZgszbA7XLt4xA0II29MkRXFso7edrVUMiUJHhxAWRVo43PY2r
CdWJbQOkJNzn1dPWq9Y9+VlRQt1FYEP1FxLdKbMO+WrJImzpQ7sxWWl1RcA/WwjR
Zw/dRA7LkvKFcCf/mHn2vle3OAtwGkN2rtRRipVcactPaPHesG3U/VuWFNMzGISC
HAFKmt7mOd7YeJwTTwznCYUNNZyIuHaJ/LBMDb4PX1EKyEjpFTIwaSMfKCU54vQT
3M8j6Yv2rgYKDXv/0cPn10gLWp4VV1LiskJ5KwLddoXPPtMH6pXILOqQ8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKkS5yGqAObYBf8LlJ5rQvdhTXh4MB8GA1UdIwQY
MBaAFB6f3H+znru+1O5U9wPTrGFT3e5pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgt
NjkxZmY1YjQ0YjAxLzEvcVJMbklhb0E1dGdGX3d1VW5tdEM5MkZOZUhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS80MGZkZDEtMTA5Mi00ZjY5LWI2NDgtNjkxZmY1YjQ0YjAx
LzEvSHBfY2Y3T2V1NzdVN2xUM0E5T3NZVlBkN21rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALV0+MA0G
CSqGSIb3DQEBCwUAA4IBAQAu7PuYW/Qr72oiEvy1Sg5hacE9lkCqZJeRhi176mo5
02QVq7wIFF/dJF8VZQlGsUE24ybvpQ9XiuQvCeQjq78lwLl+UGzmJFw6rpJ5e6jn
bpJCvEd+hd7fo7VXq/1VRHL0TEkEXPTEWRqjmq/72vUfbDufSt+P2LnSt9HMhOyz
0p6/LitQEIDMAmziBNgEsyx3i2PAP5sluneNT/L2mZbHrjWQz6/j/AW17JEROePo
wvA9GOHYse4aUdy8d3DblNQNbXwsrweemoyz2vVJA0ku2/qs7hsiSSkKzNSRd7jg
+WLx39A35oWs+OOhX90GzWC+Fw3qtvLIKymntGDadwjc
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:44:58 2025 by rpki-client