Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/sqtDA5C4zTAF8EU1UanGLhNGqBE.roa
File: sqtDA5C4zTAF8EU1UanGLhNGqBE.roa (raw, json)
Hash identifier: mht2D+EpFezejVvclFV759gknFNR6V1vy0XD94YDkwU=
Subject key identifier: B2:AB:43:03:90:B8:CD:30:05:F0:45:35:51:A9:C6:2E:13:46:A8:11
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 0194274855EB46858F223C8D42C6DD06CB0F
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/sqtDA5C4zTAF8EU1UanGLhNGqBE.roa
Signing time: Thu 02 Jan 2025 13:50:39 +0000
ROA not before: Thu 02 Jan 2025 13:50:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34837
IP address blocks: 193.104.212.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:55:eb:46:85:8f:22:3c:8d:42:c6:dd:06:cb:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Jan 2 13:50:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2ab430390b8cd3005f0453551a9c62e1346a811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:98:d9:ad:c2:46:24:44:41:f7:c2:89:5d:9b:
ae:94:92:67:7a:45:eb:67:12:11:11:f0:4c:d7:cf:
46:de:d1:6f:66:7f:81:99:83:0d:e0:81:2c:20:8c:
5c:1a:a0:b1:07:44:01:8b:53:67:b2:91:5e:c6:df:
9e:09:15:d7:5a:94:3d:cb:2a:9c:f1:f0:31:5b:5d:
b8:41:c0:3b:80:33:e9:17:2a:41:e9:3d:9b:c9:f3:
88:01:f6:e2:2f:ab:97:8b:82:86:48:66:56:72:0d:
7d:26:ba:b5:09:ec:97:3e:c9:f0:cc:d2:ab:ab:55:
fb:58:bd:a1:15:50:54:83:b8:65:d6:41:ee:95:05:
bd:b0:1a:01:26:8f:f3:53:15:d9:bd:82:b3:ef:31:
4b:c1:e3:c2:36:bf:14:f5:c0:a4:83:f9:f9:7f:16:
9d:af:96:88:68:b4:9a:3f:e6:ac:c2:cf:3e:7a:04:
5f:3f:db:fd:dd:2d:86:6d:09:64:0f:f1:87:77:41:
17:bc:ab:7f:4f:ca:7c:c3:0c:7b:7b:42:72:87:4f:
96:c7:88:10:6a:f3:3c:31:a7:38:85:25:4f:f3:fc:
f9:33:2d:b6:ce:68:82:04:7c:22:09:f8:92:45:71:
3c:a0:ab:ad:70:c3:07:37:27:8e:3a:e8:04:08:11:
23:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:AB:43:03:90:B8:CD:30:05:F0:45:35:51:A9:C6:2E:13:46:A8:11
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/sqtDA5C4zTAF8EU1UanGLhNGqBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.212.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:6d:13:d1:d1:95:a6:e1:fe:2d:73:2e:81:ce:6a:58:7b:6f:
61:3f:03:61:e2:cd:35:f9:a2:1d:2a:e8:3c:70:60:3d:a8:a9:
f5:cb:9a:d5:5a:ae:a3:00:26:63:a2:03:22:eb:f8:96:01:73:
d6:dc:21:dc:6c:f3:43:3d:ab:3c:a8:f5:2d:30:fe:fe:a8:60:
45:d7:71:63:46:17:7b:1b:b6:61:c1:02:13:f4:a1:24:14:ba:
a3:a3:99:02:9f:15:57:cf:95:47:1a:7e:a4:1b:ca:c4:40:c1:
6d:01:89:ee:9d:83:f5:92:0c:33:1f:83:c4:59:6e:90:94:0f:
a6:01:4a:71:ff:64:8a:0b:03:5d:e9:c5:39:2d:57:12:f3:76:
78:4a:f2:cc:a0:70:08:0f:d9:df:40:68:3c:3d:1b:e4:99:37:
4c:0b:c7:16:4b:42:b2:e0:9c:46:24:aa:9f:68:2a:58:c6:6d:
cc:14:7a:62:44:31:c1:20:ea:f1:94:96:6f:f6:d7:3e:f0:5c:
04:15:05:7a:d5:6f:9e:07:e6:81:84:dc:b3:a5:67:57:b1:ab:
9b:61:a7:23:f4:72:c7:88:be:ec:21:34:59:f5:c0:c6:85:35:
32:27:1b:16:48:37:22:dc:bf:d3:fe:66:e1:30:7d:fa:11:e3:
dd:84:76:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:38:31 2025 by rpki-client