Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/qMZKQsm86k3APveafN2OHKFVdlc.roa
File: qMZKQsm86k3APveafN2OHKFVdlc.roa (raw, json)
Hash identifier: StEeWkUrbwVbFDe+g7Oaxogo7FQ3MGb8RnH0U7tSpHY=
Subject key identifier: A8:C6:4A:42:C9:BC:EA:4D:C0:3E:F7:9A:7C:DD:8E:1C:A1:55:76:57
Certificate issuer: /CN=19bbc28498eb169590b069a005414c41a179b240
Certificate serial: 01942143A2CE4C209B710C550FDFE39CF5D6
Authority key identifier: 19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/qMZKQsm86k3APveafN2OHKFVdlc.roa
Signing time: Wed 01 Jan 2025 09:47:48 +0000
ROA not before: Wed 01 Jan 2025 09:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44292
IP address blocks: 92.42.168.0/24 maxlen: 24
92.42.169.0/24 maxlen: 24
92.42.170.0/24 maxlen: 24
92.42.171.0/24 maxlen: 24
92.42.172.0/24 maxlen: 24
92.42.173.0/24 maxlen: 24
92.42.174.0/24 maxlen: 24
92.42.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:a2:ce:4c:20:9b:71:0c:55:0f:df:e3:9c:f5:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19bbc28498eb169590b069a005414c41a179b240
Validity
Not Before: Jan 1 09:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8c64a42c9bcea4dc03ef79a7cdd8e1ca1557657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:65:ec:f6:e8:c0:6e:f0:09:65:7b:3a:bb:2c:
c7:05:d4:d8:1f:e8:82:99:4c:9d:9e:c5:9c:76:76:
e5:29:cd:8d:04:00:bf:03:26:60:1e:e0:00:b2:43:
c5:b7:61:8b:30:7e:71:ab:4a:4d:a9:3a:b1:28:7c:
28:f5:c0:ca:85:56:13:4b:5c:db:83:9f:66:8a:e8:
44:60:bf:9f:0e:b1:03:f7:45:83:13:eb:13:fa:0e:
a7:91:ea:cc:7c:bf:4f:d9:f2:a2:32:5e:e0:24:a0:
0c:cc:3b:ff:52:85:40:4e:23:f8:c4:3d:60:3a:1f:
c1:21:f3:2e:84:e3:e3:3b:8c:20:e9:fb:90:70:38:
cb:83:fc:58:73:9e:5d:e5:0f:9a:7f:ae:28:be:63:
37:49:6c:cc:8d:fd:cb:56:e1:5e:a5:d8:ff:02:50:
bc:53:7d:a3:33:1d:0d:c1:af:80:53:40:2d:45:3b:
02:1b:ef:ea:1e:e7:57:30:0f:e2:3d:45:3b:be:c4:
0f:1c:73:b1:e1:5c:36:e8:28:8e:f9:f3:49:c5:7a:
13:be:42:ad:68:a5:47:a9:eb:2e:59:a3:cc:21:57:
b4:be:5b:3e:66:88:71:37:cf:d0:d0:1e:07:98:d8:
25:3a:b9:ea:a2:11:a5:55:84:db:68:fa:e1:ec:24:
cc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C6:4A:42:C9:BC:EA:4D:C0:3E:F7:9A:7C:DD:8E:1C:A1:55:76:57
X509v3 Authority Key Identifier:
keyid:19:BB:C2:84:98:EB:16:95:90:B0:69:A0:05:41:4C:41:A1:79:B2:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GbvChJjrFpWQsGmgBUFMQaF5skA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/qMZKQsm86k3APveafN2OHKFVdlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/16865b-0e70-4160-a48d-7f01972186a3/1/GbvChJjrFpWQsGmgBUFMQaF5skA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.168.0/21
Signature Algorithm: sha256WithRSAEncryption
06:78:3b:fd:cf:00:d5:37:f2:2f:08:f4:56:36:3e:22:4f:80:
a1:0f:96:58:b8:56:fd:5a:b9:43:5b:c5:5d:a8:5b:97:0b:8d:
cb:0a:1b:c0:fd:89:06:80:ef:9e:a0:40:36:ec:1d:57:1e:02:
86:a3:00:3b:e9:1f:d2:f2:b0:ba:2a:8b:ab:b7:57:a5:84:f0:
be:8d:de:9a:16:96:2d:cd:c1:e2:77:45:52:35:ec:82:b2:6c:
66:77:fa:f3:ed:b1:3c:5e:86:f1:2a:a1:5a:fe:0d:7d:8b:3e:
d6:8a:0c:c5:91:a5:15:7b:75:e9:2f:b4:0b:fb:6a:bb:ed:c4:
30:6c:ce:86:94:a2:49:be:3c:65:61:7b:97:af:b1:0a:68:e3:
b2:41:50:39:48:aa:d7:8c:f8:47:8f:27:fb:51:65:07:34:ba:
a9:c8:ab:90:c3:92:99:52:39:ae:6c:ee:c9:07:3e:17:93:46:
a5:e2:fe:81:16:e4:d8:42:66:6a:1c:5d:4b:01:3d:94:47:99:
3f:cd:90:bf:44:0a:90:99:e2:bc:ba:a4:f8:2b:cc:bb:b5:28:
12:e8:54:37:0d:e9:96:7b:1e:90:79:eb:52:e9:13:ac:90:98:
fa:60:e5:23:8b:cd:6e:1f:5b:9f:ad:58:82:f8:eb:67:44:80:
8d:23:32:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:50:58 2025 by rpki-client