Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/QetUnHj3NyBy3BELD8-Xe-4Rw7U.roa
File: QetUnHj3NyBy3BELD8-Xe-4Rw7U.roa (raw, json)
Hash identifier: /ncfGdoc/H6JYEaSn/PBOO+VMUl3/eKsR0IUffej0io=
Subject key identifier: 41:EB:54:9C:78:F7:37:20:72:DC:11:0B:0F:CF:97:7B:EE:11:C3:B5
Certificate issuer: /CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Certificate serial: 01941FFA75FB36BE3D61B2F7E9861F683589
Authority key identifier: 17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/QetUnHj3NyBy3BELD8-Xe-4Rw7U.roa
Signing time: Wed 01 Jan 2025 03:48:15 +0000
ROA not before: Wed 01 Jan 2025 03:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199842
IP address blocks: 213.199.254.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:75:fb:36:be:3d:61:b2:f7:e9:86:1f:68:35:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=179301dcc7fae4f7ce01e4987a77cb82a336abff
Validity
Not Before: Jan 1 03:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41eb549c78f7372072dc110b0fcf977bee11c3b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:90:a4:95:55:62:75:23:c1:b9:7c:3b:10:33:
f1:62:28:57:ab:db:1b:c1:6e:54:58:41:28:fd:8f:
23:2b:e1:89:bf:a0:10:69:20:67:e6:d0:3e:fa:6c:
ef:41:e2:ee:52:24:40:6b:ad:27:5a:dd:66:df:cc:
d6:c3:03:a0:f1:02:c8:fd:f0:0f:4b:17:6c:6a:8b:
26:11:91:ee:b1:ab:3c:8c:29:29:0b:e2:e9:7d:9c:
58:64:1c:87:24:bf:75:17:d7:d7:36:02:50:11:bb:
c9:13:1a:35:ca:52:d6:77:c0:1a:18:99:bc:0e:bd:
aa:0d:1f:c3:4a:ab:0d:6c:68:77:36:df:7d:25:20:
7b:35:fb:5e:ed:e2:a3:a9:97:9f:3e:f6:6d:73:1b:
52:f7:6a:c3:92:ba:8e:d2:d1:87:88:4b:24:83:d3:
a6:8c:d1:f4:16:ca:c2:80:4c:ce:5b:66:0c:8d:d1:
c1:17:ec:4a:3b:94:87:8b:0e:3b:2d:e5:89:93:ef:
56:67:94:b2:f4:22:81:9a:ac:ce:84:4d:b4:e2:f4:
20:f6:ab:77:29:c3:85:38:35:fa:98:a3:84:8d:0d:
d2:a7:1d:91:c3:53:47:2a:af:27:6c:05:0f:38:6e:
0d:f4:5b:39:d6:c8:5a:92:58:1d:f7:e0:ad:b0:51:
70:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EB:54:9C:78:F7:37:20:72:DC:11:0B:0F:CF:97:7B:EE:11:C3:B5
X509v3 Authority Key Identifier:
keyid:17:93:01:DC:C7:FA:E4:F7:CE:01:E4:98:7A:77:CB:82:A3:36:AB:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F5MB3Mf65PfOAeSYenfLgqM2q_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/QetUnHj3NyBy3BELD8-Xe-4Rw7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/ed7963-72ea-4c1d-addd-aff92c16d8e3/1/F5MB3Mf65PfOAeSYenfLgqM2q_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.199.254.0/23
Signature Algorithm: sha256WithRSAEncryption
60:f8:bf:a2:11:f3:11:97:70:f5:0e:6f:76:e2:3e:f8:b2:ff:
10:5d:23:3c:ca:76:03:1f:ef:8e:30:4a:4b:6b:2c:aa:30:f3:
a6:58:e9:9b:98:41:0a:da:53:1e:7b:3e:12:e5:73:c9:72:75:
b5:e0:8a:0c:a1:b1:5d:04:1a:be:36:ff:b7:f6:a3:b5:09:4a:
c3:9f:06:38:86:eb:91:ba:ed:a0:59:dd:52:5a:a0:7c:12:bd:
5b:d9:1c:b9:73:bd:0e:74:b1:bf:ce:3c:fe:58:5d:e3:9c:1b:
85:b2:d8:c6:e8:d4:19:0b:2f:21:aa:89:20:01:8d:98:72:62:
4b:c3:5c:2c:1f:64:ad:eb:ef:77:03:d6:2d:70:b1:d8:12:12:
0f:80:bf:1a:df:69:61:63:11:ec:03:a9:e7:99:8e:cb:2c:e4:
44:ef:15:dd:92:ad:21:32:6b:83:bf:d2:43:40:97:cb:4a:9d:
ad:5d:a3:a3:5c:a2:e8:99:53:b1:c1:87:d2:41:ce:42:af:15:
93:8b:f3:dc:c2:47:c3:77:1a:d8:e9:8e:00:c0:ad:27:fb:71:
cb:cd:19:e3:92:fc:d4:0a:b5:eb:58:fa:1e:68:77:04:78:91:
30:18:ec:4f:71:82:8d:50:ac:15:4d:3a:5a:73:8c:8c:ac:8a:
9e:35:f4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:04:12 2025 by rpki-client