Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/QmuYhMxVHMJMwyzvnCygHs-m3Zo.roa
File: QmuYhMxVHMJMwyzvnCygHs-m3Zo.roa (raw, json)
Hash identifier: /n3/bE2lrLZKCXuOWQR91nGS2U+GVup7q9CGUuChZsQ=
Subject key identifier: 42:6B:98:84:CC:55:1C:C2:4C:C3:2C:EF:9C:2C:A0:1E:CF:A6:DD:9A
Certificate issuer: /CN=b53b0a45f060e10eccf126b6f667589b80328c95
Certificate serial: 0194228D921831B2DE32D42577B86B78BCD7
Authority key identifier: B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/QmuYhMxVHMJMwyzvnCygHs-m3Zo.roa
Signing time: Wed 01 Jan 2025 15:48:10 +0000
ROA not before: Wed 01 Jan 2025 15:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25066
IP address blocks: 193.201.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:92:18:31:b2:de:32:d4:25:77:b8:6b:78:bc:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53b0a45f060e10eccf126b6f667589b80328c95
Validity
Not Before: Jan 1 15:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=426b9884cc551cc24cc32cef9c2ca01ecfa6dd9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:66:1c:fa:c3:8d:7c:eb:86:79:a5:3f:de:bd:
40:a1:09:de:d5:94:dd:70:0c:91:a4:fd:f6:81:06:
57:7c:32:6a:72:21:20:37:92:4e:aa:1b:f5:d8:6e:
01:6c:d1:5c:15:30:c4:ae:1d:86:42:62:5a:17:66:
e1:0d:0a:e4:cc:90:ba:a5:ae:f1:b8:a5:60:67:9b:
76:46:6d:06:56:f0:74:3b:17:53:f7:01:cb:f7:45:
d6:87:eb:ab:d6:cb:71:7a:26:3c:a0:ab:00:8f:14:
ef:c0:a8:d8:32:f4:72:45:6c:fd:39:e2:54:66:be:
43:92:2c:e3:07:6d:ba:d3:fa:64:a6:d5:55:0f:db:
08:4a:df:8b:f9:5d:94:a8:8f:0e:04:a8:fc:6b:fd:
e7:1a:cc:5f:4f:3d:14:c5:b5:76:25:28:51:34:32:
51:df:93:29:ff:0d:ef:8e:67:ed:90:85:dd:ed:bb:
42:b2:99:9a:90:da:85:43:75:e2:6e:82:0d:e2:9c:
9b:1f:34:d5:12:16:8b:03:57:2f:f7:b0:d3:01:1e:
ba:ca:70:27:4a:3b:3a:18:70:98:96:b9:c2:cc:60:
be:48:bc:44:c2:a0:ae:ee:b4:a9:3b:06:dc:8d:90:
8b:89:e1:fa:ee:78:b3:55:99:0e:3f:b2:b1:0f:52:
c9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6B:98:84:CC:55:1C:C2:4C:C3:2C:EF:9C:2C:A0:1E:CF:A6:DD:9A
X509v3 Authority Key Identifier:
keyid:B5:3B:0A:45:F0:60:E1:0E:CC:F1:26:B6:F6:67:58:9B:80:32:8C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/QmuYhMxVHMJMwyzvnCygHs-m3Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/e6f13e-ebeb-4e26-9f91-8183751813d9/1/tTsKRfBg4Q7M8Sa29mdYm4AyjJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.109.0/24
Signature Algorithm: sha256WithRSAEncryption
61:cd:a0:91:8b:c2:60:58:ce:fc:76:01:68:ae:bb:48:b7:2c:
02:e0:9f:ce:be:f4:1b:03:8f:df:d1:27:0f:59:05:8a:6f:62:
d4:34:bb:3b:e0:84:00:c2:65:2f:29:b9:c8:80:78:6c:e0:fe:
90:14:a6:3f:5f:68:bc:d4:4a:7d:22:59:6f:88:3a:1d:28:24:
6d:94:5f:30:76:64:63:d9:ef:d3:e5:98:8f:c8:ac:8c:ce:6c:
84:df:7d:c8:a7:2e:a4:cd:62:27:a6:46:bb:3b:a5:a5:81:fc:
a0:fa:8b:20:90:4b:43:0e:d1:00:a2:c4:da:ff:f5:8a:fd:cb:
5f:3c:23:a1:0e:c5:fa:d6:08:e3:99:16:59:9d:5f:3b:db:97:
15:a8:63:be:00:40:41:31:2d:c9:1d:43:ba:ce:67:7a:ba:a3:
d5:8c:40:f3:cc:ec:e2:fa:c4:40:da:d6:8b:43:2b:97:0b:99:
f7:46:9c:cb:72:5d:a9:15:26:18:f3:67:42:c6:5f:44:e1:ca:
d2:4e:35:a2:7e:3e:4f:37:90:e0:e0:ce:cb:3e:4b:2b:10:7d:
56:40:3a:47:e3:8c:cb:4c:7b:fd:66:a8:39:17:af:83:cf:96:
46:72:c0:b0:ca:ae:2b:27:f3:c4:fb:cb:0b:02:40:c2:ff:0f:
91:1d:7e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:43:37 2025 by rpki-client