Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/__QM0Y00A8o9_wWPyDLaVQsYZls.roa
File: __QM0Y00A8o9_wWPyDLaVQsYZls.roa (raw, json)
Hash identifier: Tt5jgaPYYhPlmRSiaLMYS5DQDbnj5Cw5Zwmf+6k+kyM=
Subject key identifier: FF:F4:0C:D1:8D:34:03:CA:3D:FF:05:8F:C8:32:DA:55:0B:18:66:5B
Certificate issuer: /CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Certificate serial: 0194214408BB1D403D7C1B9BA2972DB1EA4D
Authority key identifier: 26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/__QM0Y00A8o9_wWPyDLaVQsYZls.roa
Signing time: Wed 01 Jan 2025 09:48:14 +0000
ROA not before: Wed 01 Jan 2025 09:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39029
IP address blocks: 87.238.32.0/19 maxlen: 19
185.47.40.0/22 maxlen: 22
194.31.39.0/24 maxlen: 24
2a02:c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:08:bb:1d:40:3d:7c:1b:9b:a2:97:2d:b1:ea:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=26a451e245e01ba9b2fb2314c2609e7b151e74a2
Validity
Not Before: Jan 1 09:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fff40cd18d3403ca3dff058fc832da550b18665b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bd:84:b1:c8:1a:13:2c:a4:d9:b1:1a:70:df:
aa:28:35:d7:f0:74:ab:70:01:9d:59:fa:f1:13:8c:
a2:a8:40:48:95:d4:c6:e0:dd:bd:69:b8:0e:3a:fa:
28:ed:f8:7f:e6:d7:2f:cc:e9:62:2b:63:6d:28:39:
90:05:67:9d:0f:20:7b:55:0a:3c:7b:bb:e1:09:d3:
89:62:0f:c0:3d:38:df:d5:60:8a:e7:9a:93:f0:e3:
5b:b6:79:aa:31:9f:7b:b5:cb:78:7f:3b:57:f7:36:
c9:80:76:9c:1d:2e:20:b8:ca:3f:34:04:70:ad:f4:
2f:c2:58:11:22:4a:70:3c:68:a3:b7:85:75:ca:6f:
f4:d0:74:ce:fe:6f:e8:f4:ca:93:f0:86:61:15:05:
d3:41:39:8d:c6:ba:d8:91:93:bf:ac:00:e7:94:5d:
14:20:3e:d9:c6:31:bd:17:d3:f9:45:f1:87:af:b4:
89:7e:af:68:73:da:14:49:0c:13:ad:ba:32:be:6d:
d4:3a:c1:bd:37:cd:80:61:58:92:3f:a6:68:4f:41:
64:98:34:36:96:82:09:82:b1:0e:50:45:df:36:f8:
b6:03:43:68:a7:75:e9:aa:60:56:4c:bc:4c:f2:03:
f0:fa:34:f3:23:8e:6f:ec:49:db:70:6f:24:31:c6:
3b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F4:0C:D1:8D:34:03:CA:3D:FF:05:8F:C8:32:DA:55:0B:18:66:5B
X509v3 Authority Key Identifier:
keyid:26:A4:51:E2:45:E0:1B:A9:B2:FB:23:14:C2:60:9E:7B:15:1E:74:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JqRR4kXgG6my-yMUwmCeexUedKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/__QM0Y00A8o9_wWPyDLaVQsYZls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/a07739-60ba-4e19-bc55-b56c53662028/1/JqRR4kXgG6my-yMUwmCeexUedKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.238.32.0/19
185.47.40.0/22
194.31.39.0/24
IPv6:
2a02:c0::/32
Signature Algorithm: sha256WithRSAEncryption
54:3f:d3:99:83:cc:ab:da:54:2a:27:05:7a:68:28:86:28:53:
7a:c8:94:97:25:2e:61:cd:1c:8f:fb:81:59:92:07:02:e1:ea:
70:2a:3c:46:36:53:a5:d5:9b:a6:fb:6a:eb:5b:96:32:e2:80:
14:84:fd:d2:63:9b:c4:4d:de:c6:18:69:3f:a7:e1:31:06:3c:
eb:1f:ba:c8:1a:51:56:4d:6c:7f:09:a9:c6:b0:97:dd:1f:e9:
3f:4b:04:aa:da:0f:d8:28:07:64:e1:41:6e:5c:9f:7a:81:25:
66:a9:ac:11:63:a1:59:64:bb:09:e0:49:bc:2c:05:f3:d6:b0:
dc:9c:9d:50:01:b9:f5:73:d1:03:f9:41:2b:3c:c9:81:19:cf:
74:a3:98:69:3a:4b:ce:68:a5:03:bb:22:cb:1f:39:c1:ca:46:
12:eb:6f:61:77:fa:b5:0a:63:49:07:ae:d8:d3:1e:ae:18:35:
49:39:fa:12:b4:ec:d6:ee:94:58:c1:4e:42:bb:4b:39:34:b4:
d8:19:50:e2:c4:ba:88:31:c0:61:d5:1f:05:4b:e4:90:ba:f7:
7b:67:a5:03:40:25:c2:12:2e:e5:e0:e2:60:e6:b5:ba:53:00:
21:8d:4f:95:48:01:17:b1:0d:bf:ea:4d:4f:66:23:6e:18:7f:
c4:09:d8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 22:00:05 2025 by rpki-client