Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/qABhsOLWjcCV2-NCnGtwC8QlYyU.roa
File: qABhsOLWjcCV2-NCnGtwC8QlYyU.roa (raw, json)
Hash identifier: md9z/89P3sn3nXo5h/larqHDUL4eXCPfvLewxfl/iTY=
Subject key identifier: A8:00:61:B0:E2:D6:8D:C0:95:DB:E3:42:9C:6B:70:0B:C4:25:63:25
Certificate issuer: /CN=887d30119351500f259a57e2ff6850797d1b4e1a
Certificate serial: 019425216AF1007995EF1843865EB8D027F8
Authority key identifier: 88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/qABhsOLWjcCV2-NCnGtwC8QlYyU.roa
Signing time: Thu 02 Jan 2025 03:48:54 +0000
ROA not before: Thu 02 Jan 2025 03:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12570
IP address blocks: 193.17.248.0/22 maxlen: 22
195.78.122.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6a:f1:00:79:95:ef:18:43:86:5e:b8:d0:27:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=887d30119351500f259a57e2ff6850797d1b4e1a
Validity
Not Before: Jan 2 03:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a80061b0e2d68dc095dbe3429c6b700bc4256325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:45:06:de:5d:83:fd:74:b8:03:68:9a:79:77:
e8:8c:9b:6c:2f:a6:c2:70:60:b9:53:f4:ef:7a:34:
99:58:e5:68:5c:c2:4c:87:c2:06:06:83:2c:9f:5f:
d6:e7:04:68:52:18:ad:e3:7e:b4:c5:01:3d:59:aa:
cf:a4:67:88:2d:95:b7:e0:49:d8:20:01:21:30:8f:
02:c8:99:73:01:80:b8:48:dd:17:f1:97:40:2c:26:
72:cc:27:7c:ec:1f:cb:99:0b:8d:bd:42:c3:57:cb:
48:f3:9d:e6:7d:d8:30:af:20:07:43:62:b2:ea:5e:
b9:1b:c9:65:35:fb:a8:d7:ca:61:f2:14:b7:2e:5a:
3d:85:bb:6c:ed:9f:cc:2e:57:51:b2:12:dc:01:f7:
a0:1a:4b:8a:fb:fc:10:c1:20:95:7f:9c:79:00:77:
ee:84:69:e5:ff:77:bb:e0:d6:02:db:ab:fd:98:36:
bb:74:4f:3e:5f:7c:1e:5b:b9:81:40:d6:c9:ea:89:
e5:2e:5f:75:6d:7f:51:75:76:a3:ea:68:aa:6e:f8:
d8:30:12:7c:16:2d:a1:a2:a5:2b:92:c7:e9:54:ff:
d5:5c:22:ec:31:fa:ea:03:65:c2:48:7d:4a:80:30:
a8:d8:f4:ca:10:89:2d:4e:41:e6:ab:09:a7:3c:61:
e4:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:00:61:B0:E2:D6:8D:C0:95:DB:E3:42:9C:6B:70:0B:C4:25:63:25
X509v3 Authority Key Identifier:
keyid:88:7D:30:11:93:51:50:0F:25:9A:57:E2:FF:68:50:79:7D:1B:4E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iH0wEZNRUA8lmlfi_2hQeX0bTho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/qABhsOLWjcCV2-NCnGtwC8QlYyU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/febb2e-f0da-4d74-b547-f7401b4e4b4a/1/iH0wEZNRUA8lmlfi_2hQeX0bTho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.17.248.0/22
195.78.122.0/23
Signature Algorithm: sha256WithRSAEncryption
04:ed:9c:f7:c5:93:49:a6:16:b1:8f:4c:d8:f5:08:51:8f:6f:
85:19:b8:20:0d:7a:6b:c2:a8:38:04:f0:67:40:d0:f6:1a:fb:
53:3e:ba:dd:7b:bd:7c:71:e6:eb:91:a2:9a:99:a1:98:58:c4:
bc:b1:09:3a:31:a9:c8:cc:b9:2e:f9:45:41:d1:19:47:e3:04:
03:97:50:a4:bb:0b:36:a6:71:4e:99:98:6d:f9:52:f3:58:8e:
75:ad:ce:c2:9b:bc:f0:33:4a:74:f6:48:3e:ef:4a:2d:3d:f6:
c1:63:ba:dd:1a:9a:3f:94:4c:35:34:ec:77:53:06:70:7c:fd:
1f:9d:5c:51:90:3e:53:e6:f3:02:63:72:df:20:9b:b4:c0:32:
29:ce:62:2d:d5:51:99:3e:6c:ba:5b:61:23:0a:7c:35:a9:4d:
8a:1e:a0:80:b4:20:2a:40:75:5a:81:a2:1e:34:3a:5c:87:05:
43:1f:1f:e6:97:0f:99:16:e8:ec:b8:df:cd:80:21:3c:c6:2a:
9a:e5:d3:a9:81:3c:85:6f:4f:b9:b5:97:f9:26:68:01:2a:a0:
a8:5f:04:83:49:31:87:58:c8:6a:ad:8b:82:3b:ec:59:40:6e:
fb:16:f3:00:12:8c:29:04:68:7d:05:5c:d8:a6:32:83:63:7f:
ad:a1:2e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:47 2025 by rpki-client