Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/QnTqLhMHC9T4AoMjaLap4QpmLDU.roa
File: QnTqLhMHC9T4AoMjaLap4QpmLDU.roa (raw, json)
Hash identifier: 7wNURJNL1VG5jzuYA7SYiM1RdZjO0wnh2b7/W3YMGs8=
Subject key identifier: 42:74:EA:2E:13:07:0B:D4:F8:02:83:23:68:B6:A9:E1:0A:66:2C:35
Certificate issuer: /CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Certificate serial: 0194228D8BACAF65C7EAE533CC5049341E3F
Authority key identifier: 64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/QnTqLhMHC9T4AoMjaLap4QpmLDU.roa
Signing time: Wed 01 Jan 2025 15:48:09 +0000
ROA not before: Wed 01 Jan 2025 15:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8648
IP address blocks: 194.34.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:8b:ac:af:65:c7:ea:e5:33:cc:50:49:34:1e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=643e1ba91c569a8b21a6d2d67f5dbbd6c04e43ea
Validity
Not Before: Jan 1 15:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4274ea2e13070bd4f802832368b6a9e10a662c35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:c5:b7:57:68:86:bb:6f:46:b9:f4:50:f7:
f4:3a:df:6f:04:59:54:1d:aa:69:06:50:55:6f:0f:
17:68:12:48:d3:66:0c:4f:78:cb:d0:92:d2:92:94:
3f:09:aa:d7:02:b4:28:b1:68:18:d3:33:54:4b:92:
84:02:62:c5:51:58:39:10:46:97:c1:bb:7d:78:a8:
f8:82:5d:77:e7:ab:00:a1:ef:7e:44:31:75:5a:a4:
e9:d5:f1:fb:cc:1d:81:ba:9f:db:61:a8:ea:67:01:
ca:1a:67:1c:59:38:c9:7b:b2:09:08:ec:61:1a:07:
d7:0d:a7:6e:f3:58:45:ea:25:5a:66:e5:97:a1:19:
c8:75:45:6b:f4:75:e3:3a:43:b3:c1:5b:62:2d:c4:
77:b9:f7:1e:04:50:63:89:46:65:95:16:fe:ff:1a:
4d:39:76:c8:da:7c:13:26:a8:b5:fd:66:27:d6:ab:
41:c9:2c:e8:f3:97:9f:0b:5a:72:36:e6:1c:2c:bf:
9e:56:ae:f9:c2:78:6b:7f:da:88:7b:0d:47:f6:af:
60:36:f4:cf:fe:ea:c0:84:72:d7:d7:5e:00:05:70:
b6:16:2f:94:34:f3:3a:1a:37:3e:4a:96:32:32:8b:
e3:57:91:a2:a6:9a:9a:23:79:b0:33:be:77:4e:ab:
25:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:74:EA:2E:13:07:0B:D4:F8:02:83:23:68:B6:A9:E1:0A:66:2C:35
X509v3 Authority Key Identifier:
keyid:64:3E:1B:A9:1C:56:9A:8B:21:A6:D2:D6:7F:5D:BB:D6:C0:4E:43:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZD4bqRxWmoshptLWf1271sBOQ-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/QnTqLhMHC9T4AoMjaLap4QpmLDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/aca912-9e8d-4749-95e0-fea0aff359f5/1/ZD4bqRxWmoshptLWf1271sBOQ-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.34.225.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:b8:39:83:10:d1:fe:5b:08:33:b7:2d:bf:ba:5e:ab:12:55:
44:fa:19:25:c6:49:0f:2a:4b:bb:ca:40:2b:74:a7:c0:ec:8c:
0c:61:a9:ba:ba:dd:ed:0c:78:8e:09:4f:dc:16:90:21:d3:57:
ae:6c:6e:56:94:0d:6c:84:56:38:b0:cc:5c:7e:47:4d:c7:03:
9e:66:3a:a2:7b:0f:cb:a9:56:90:d7:36:b0:1d:f1:9a:41:8b:
00:70:21:53:27:c8:cf:d5:ef:18:e0:ac:af:94:71:2f:4f:92:
b3:45:48:6e:a0:91:8e:da:05:9e:c1:b4:c5:e4:d7:45:c9:b4:
60:1a:da:84:16:90:53:e4:d4:eb:c0:cc:87:8b:3c:c2:83:b9:
8b:21:f6:2c:41:af:38:39:fc:5a:42:db:e1:48:0f:41:e8:31:
d8:2f:83:f0:ba:1e:0c:d8:8f:eb:59:a1:04:ef:83:cc:21:df:
c4:e6:e3:03:65:68:83:15:0f:53:97:7b:cf:39:3e:dd:19:a6:
cd:42:3d:59:7b:43:dd:62:20:5c:fc:75:3d:e8:31:03:9a:94:
70:dc:58:7f:5a:26:e1:22:2e:45:05:f1:97:91:d4:cf:fd:80:
35:0d:d1:5f:6a:0e:b4:91:70:88:e3:fb:e9:95:aa:84:74:10:
a4:3d:e6:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijYusr2XH6uUzzFBJNB4/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0M2UxYmE5MWM1NjlhOGIyMWE2ZDJkNjdmNWRiYmQ2YzA0
ZTQzZWEwHhcNMjUwMTAxMTU0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Mjc0ZWEyZTEzMDcwYmQ0ZjgwMjgzMjM2OGI2YTllMTBhNjYyYzM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujHFt1dohrtvRrn0UPf0Ot9vBFlU
HappBlBVbw8XaBJI02YMT3jL0JLSkpQ/CarXArQosWgY0zNUS5KEAmLFUVg5EEaX
wbt9eKj4gl1356sAoe9+RDF1WqTp1fH7zB2Bup/bYajqZwHKGmccWTjJe7IJCOxh
GgfXDadu81hF6iVaZuWXoRnIdUVr9HXjOkOzwVtiLcR3ufceBFBjiUZllRb+/xpN
OXbI2nwTJqi1/WYn1qtBySzo85efC1pyNuYcLL+eVq75wnhrf9qIew1H9q9gNvTP
/urAhHLX114ABXC2Fi+UNPM6Gjc+SpYyMovjV5GippqaI3mwM753TqslHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEJ06i4TBwvU+AKDI2i2qeEKZiw1MB8GA1UdIwQY
MBaAFGQ+G6kcVpqLIabS1n9du9bATkPqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkQ0YnFSeFdtb3NocHRMV2YxMjcxc0JPUS1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9hY2E5MTItOWU4ZC00NzQ5LTk1ZTAt
ZmVhMGFmZjM1OWY1LzEvUW5UcUxoTUhDOVQ0QW9NamFMYXA0UXBtTERVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9hY2E5MTItOWU4ZC00NzQ5LTk1ZTAtZmVhMGFmZjM1OWY1
LzEvWkQ0YnFSeFdtb3NocHRMV2YxMjcxc0JPUS1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiLhMA0G
CSqGSIb3DQEBCwUAA4IBAQCouDmDENH+Wwgzty2/ul6rElVE+hklxkkPKku7ykAr
dKfA7IwMYam6ut3tDHiOCU/cFpAh01eubG5WlA1shFY4sMxcfkdNxwOeZjqiew/L
qVaQ1zawHfGaQYsAcCFTJ8jP1e8Y4KyvlHEvT5KzRUhuoJGO2gWewbTF5NdFybRg
GtqEFpBT5NTrwMyHizzCg7mLIfYsQa84OfxaQtvhSA9B6DHYL4Pwuh4M2I/rWaEE
74PMId/E5uMDZWiDFQ9Tl3vPOT7dGabNQj1Ze0PdYiBc/HU96DEDmpRw3Fh/Wibh
Ii5FBfGXkdTP/YA1DdFfag60kXCI4/vplaqEdBCkPeYI
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:05:11 2025 by rpki-client