Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/tqcB3IDCxjadXrA6Ts7NqmHf1Lo.roa
File: tqcB3IDCxjadXrA6Ts7NqmHf1Lo.roa (raw, json)
Hash identifier: Wfp7RVYDKQPn5CU+Zk9mzBupBD5mIq/A37zszm0IaiQ=
Subject key identifier: B6:A7:01:DC:80:C2:C6:36:9D:5E:B0:3A:4E:CE:CD:AA:61:DF:D4:BA
Certificate issuer: /CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Certificate serial: 01942521AF7EFBF8D5CFEB9D32B045FE7BF2
Authority key identifier: 5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/tqcB3IDCxjadXrA6Ts7NqmHf1Lo.roa
Signing time: Thu 02 Jan 2025 03:49:12 +0000
ROA not before: Thu 02 Jan 2025 03:49:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214218
IP address blocks: 31.41.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:af:7e:fb:f8:d5:cf:eb:9d:32:b0:45:fe:7b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c64f9d04efd5a9fc2e23b42d5b51aefd9a50250
Validity
Not Before: Jan 2 03:49:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6a701dc80c2c6369d5eb03a4ececdaa61dfd4ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c1:e8:11:3a:a0:70:72:ca:77:9c:83:40:03:
57:82:5e:c7:be:9c:c2:b6:d6:f8:90:c6:65:b0:e8:
af:0d:15:4c:57:fe:0e:63:98:95:7b:f1:28:c5:39:
fb:01:be:a2:7c:67:00:f9:58:aa:53:ef:88:9b:74:
17:3a:ba:c2:c8:e9:eb:85:8d:0e:eb:e8:de:5f:78:
4b:86:44:e7:f4:eb:0f:e2:14:ce:c0:c8:2d:82:06:
1e:98:3d:5d:2c:f9:55:33:84:40:34:d3:cc:b0:38:
a3:6a:1d:ab:7e:0f:2e:2a:9c:94:86:13:a9:95:20:
80:88:86:4e:7f:9b:e7:4a:4c:56:08:61:46:b6:be:
5b:57:35:9a:c0:2e:11:fe:6e:1e:d1:c1:d2:1e:c1:
cc:0f:b7:db:d1:d5:b9:59:10:47:10:95:1e:75:86:
70:0b:b5:04:02:07:23:9f:78:b9:3b:d9:08:02:57:
e7:0e:d2:0c:85:e1:f1:ac:f3:a6:76:c2:25:e5:66:
77:6c:4b:e3:e0:49:cb:9d:6f:9a:28:a5:d8:84:01:
99:48:c3:ef:d0:98:8c:9d:81:b8:55:e7:45:e7:1e:
90:95:10:ec:9d:7f:80:c6:8b:11:b1:b9:0e:6a:41:
e5:c0:06:6d:53:52:c5:f3:c6:40:a3:2c:1f:cc:db:
1c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A7:01:DC:80:C2:C6:36:9D:5E:B0:3A:4E:CE:CD:AA:61:DF:D4:BA
X509v3 Authority Key Identifier:
keyid:5C:64:F9:D0:4E:FD:5A:9F:C2:E2:3B:42:D5:B5:1A:EF:D9:A5:02:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGT50E79Wp_C4jtC1bUa79mlAlA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/tqcB3IDCxjadXrA6Ts7NqmHf1Lo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/1849a6-f921-4b50-915e-b66fa4f4763a/1/XGT50E79Wp_C4jtC1bUa79mlAlA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.41.14.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:a8:89:fe:bf:45:89:ee:ae:16:62:b3:63:e9:45:54:e6:2c:
40:56:00:bf:65:d4:98:b9:62:17:0b:e1:f3:3a:97:42:44:20:
ae:cb:d5:2d:3d:9c:3d:7c:62:10:2d:29:e0:61:17:0b:49:83:
76:8e:f8:a2:0a:77:c1:d2:a8:f6:87:9e:a4:8b:98:70:f0:4d:
65:87:32:4b:49:2f:41:3a:30:cf:34:5b:ac:14:fe:47:e9:ba:
98:3f:a8:90:8d:14:c5:3c:35:a0:f0:ff:75:d0:c3:4f:dd:7e:
6c:95:be:f8:b8:e8:b5:b9:88:cb:ea:dd:2c:aa:f7:7c:99:6c:
b7:9e:98:cd:f5:cb:08:d9:8c:9f:d0:c1:47:37:57:da:3a:48:
7e:7c:3f:46:55:62:a1:03:a1:79:4c:cd:d2:9c:34:95:25:87:
cc:e4:2b:82:d4:dd:ce:d5:4e:d7:c8:80:36:23:6a:d6:43:19:
bd:fb:59:af:2d:50:66:9f:af:aa:c7:15:a3:ee:25:97:fb:e0:
4c:34:27:26:a2:ee:7d:cf:bc:cf:b1:bf:db:24:fb:d7:bb:55:
d3:c7:c2:ef:a5:f6:fb:99:8d:ea:c8:94:76:bd:04:00:e5:e2:
35:d1:3c:6e:27:e0:b5:52:49:43:81:37:68:a7:da:54:b4:ca:
2a:00:18:ef
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIa9++/jVz+udMrBF/nvyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjNjRmOWQwNGVmZDVhOWZjMmUyM2I0MmQ1YjUxYWVmZDlh
NTAyNTAwHhcNMjUwMTAyMDM0OTEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmE3MDFkYzgwYzJjNjM2OWQ1ZWIwM2E0ZWNlY2RhYTYxZGZkNGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMHoETqgcHLKd5yDQANXgl7HvpzC
ttb4kMZlsOivDRVMV/4OY5iVe/EoxTn7Ab6ifGcA+ViqU++Im3QXOrrCyOnrhY0O
6+jeX3hLhkTn9OsP4hTOwMgtggYemD1dLPlVM4RANNPMsDijah2rfg8uKpyUhhOp
lSCAiIZOf5vnSkxWCGFGtr5bVzWawC4R/m4e0cHSHsHMD7fb0dW5WRBHEJUedYZw
C7UEAgcjn3i5O9kIAlfnDtIMheHxrPOmdsIl5WZ3bEvj4EnLnW+aKKXYhAGZSMPv
0JiMnYG4VedF5x6QlRDsnX+AxosRsbkOakHlwAZtU1LF88ZAoywfzNscwwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLanAdyAwsY2nV6wOk7Ozaph39S6MB8GA1UdIwQY
MBaAFFxk+dBO/VqfwuI7QtW1Gu/ZpQJQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUt
YjY2ZmE0ZjQ3NjNhLzEvdHFjQjNJREN4amFkWHJBNlRzN05xbUhmMUxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8xODQ5YTYtZjkyMS00YjUwLTkxNWUtYjY2ZmE0ZjQ3NjNh
LzEvWEdUNTBFNzlXcF9DNGp0QzFiVWE3OW1sQWxBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAHykOMA0G
CSqGSIb3DQEBCwUAA4IBAQBeqIn+v0WJ7q4WYrNj6UVU5ixAVgC/ZdSYuWIXC+Hz
OpdCRCCuy9UtPZw9fGIQLSngYRcLSYN2jviiCnfB0qj2h56ki5hw8E1lhzJLSS9B
OjDPNFusFP5H6bqYP6iQjRTFPDWg8P910MNP3X5slb74uOi1uYjL6t0sqvd8mWy3
npjN9csI2Yyf0MFHN1faOkh+fD9GVWKhA6F5TM3SnDSVJYfM5CuC1N3O1U7XyIA2
I2rWQxm9+1mvLVBmn6+qxxWj7iWX++BMNCcmou59z7zPsb/bJPvXu1XTx8Lvpfb7
mY3qyJR2vQQA5eI10TxuJ+C1UklDgTdop9pUtMoqABjv
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:20:58 2025 by rpki-client