Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/QufC61fw7pK87dB-kx4RiKifXlM.roa
File: QufC61fw7pK87dB-kx4RiKifXlM.roa (raw, json)
Hash identifier: r+1QwPLgLXThXyY70R3A0vn9kct3kVdr0ohpYgp0VlA=
Subject key identifier: 42:E7:C2:EB:57:F0:EE:92:BC:ED:D0:7E:93:1E:11:88:A8:9F:5E:53
Certificate issuer: /CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Certificate serial: 019423D7319B2BA9A9876CD8871B089721CD
Authority key identifier: A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/QufC61fw7pK87dB-kx4RiKifXlM.roa
Signing time: Wed 01 Jan 2025 21:48:12 +0000
ROA not before: Wed 01 Jan 2025 21:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204198
IP address blocks: 193.176.92.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:31:9b:2b:a9:a9:87:6c:d8:87:1b:08:97:21:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3b85fe2b2c26991b1f31c66fc67ac0c8a109746
Validity
Not Before: Jan 1 21:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42e7c2eb57f0ee92bcedd07e931e1188a89f5e53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:88:1c:41:5a:ab:f6:09:b2:61:14:3b:db:b6:
1c:94:f3:c8:76:c5:4d:12:fb:ba:ee:9d:dc:03:94:
b1:18:25:86:9a:f1:16:fd:ca:b0:fa:9f:f9:9a:4e:
12:91:10:e6:f0:96:ab:9c:e7:45:e7:79:49:84:36:
92:8d:64:70:f6:8b:83:c1:88:30:79:b4:2b:12:17:
d7:3c:20:1a:7d:32:dc:9e:f2:89:1d:6d:26:f8:d7:
34:29:55:a9:b3:73:4c:ab:92:5f:26:dd:2b:45:5b:
b7:0a:96:4b:e6:59:b3:d9:5f:31:9e:4e:eb:1b:db:
a8:a9:a0:ec:49:ba:47:73:c5:fd:60:12:4b:96:dc:
7c:33:e3:3d:52:3f:1f:53:ca:30:f0:c9:6d:e2:62:
82:07:b2:9e:26:52:e5:ff:fe:94:cb:c9:62:0f:f1:
af:55:1a:4e:a1:c1:11:dc:a5:16:b6:0b:3a:4d:0c:
06:2d:07:a7:ed:43:3f:29:43:c4:5c:29:1b:71:64:
d9:32:be:fa:8d:f5:52:9a:e6:71:79:9c:76:64:5f:
65:79:8d:29:ea:09:51:07:b3:b5:f5:cc:c8:ff:5f:
d2:e6:5c:f4:90:56:33:35:65:f0:fd:0e:6a:5f:57:
8d:4a:b3:ce:b0:b6:b1:2f:b2:29:8c:f7:e2:ae:c8:
2f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E7:C2:EB:57:F0:EE:92:BC:ED:D0:7E:93:1E:11:88:A8:9F:5E:53
X509v3 Authority Key Identifier:
keyid:A3:B8:5F:E2:B2:C2:69:91:B1:F3:1C:66:FC:67:AC:0C:8A:10:97:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o7hf4rLCaZGx8xxm_GesDIoQl0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/QufC61fw7pK87dB-kx4RiKifXlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/e99082-659e-49e2-ad91-76bb71eb0a5a/1/o7hf4rLCaZGx8xxm_GesDIoQl0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.92.0/24
Signature Algorithm: sha256WithRSAEncryption
96:b1:31:b1:d1:75:bb:c6:f2:00:6b:ca:a5:b3:2f:f9:15:d8:
05:b0:48:36:e3:18:7f:a0:7f:95:88:75:f0:b9:dd:f6:8f:70:
55:9e:cf:50:fc:af:54:ad:b7:4b:65:36:27:f1:9d:4e:3e:24:
0e:af:c9:ef:60:0d:ad:a8:ba:c1:fd:29:b6:f1:e2:d3:b4:22:
3f:85:4a:e6:ce:d0:42:fa:98:d5:30:bf:72:54:23:c4:93:e2:
75:31:bc:b0:44:a6:b1:bc:48:e1:e2:2f:46:54:1d:4f:8a:17:
95:26:ac:e5:c7:35:b4:b8:7a:bb:ff:89:f8:4d:a2:10:0b:a0:
fc:be:85:2d:c1:52:d4:0c:52:a2:a3:3c:bd:44:d2:4b:f5:df:
33:c8:6e:ce:8c:99:76:4e:4e:23:c0:fe:67:f7:01:7e:b7:0a:
04:d7:52:5f:1a:9e:f9:57:cd:80:8d:05:f0:54:66:49:3e:8e:
0d:66:ee:ee:21:6e:4f:f2:38:f8:7f:9b:9e:59:be:4f:e7:c5:
59:55:24:7f:09:83:25:fc:2f:b4:b7:30:c5:90:fd:08:1a:0e:
1c:7a:d5:f8:3f:72:7a:62:b3:7c:b9:34:bb:51:10:4c:52:f1:
3b:6f:26:c3:6d:c4:62:36:0f:c8:e9:af:23:bb:40:52:11:3c:
c0:9b:54:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:25 2025 by rpki-client