Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/1-QyBzd9rm5Adz5T66hemt4mqchM.roa
File: 1-QyBzd9rm5Adz5T66hemt4mqchM.roa (raw, json)
Hash identifier: k/ZsToVQPkWNF1ny2kDjlSwa0MAW61u333/62OgvXkw=
Subject key identifier: F9:0C:81:CD:DF:6B:9B:90:1D:CF:94:FA:EA:17:A6:B7:89:AA:72:13
Certificate issuer: /CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Certificate serial: 019424B3363D08E9F6151BF967EE5B60B35F
Authority key identifier: 5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/1-QyBzd9rm5Adz5T66hemt4mqchM.roa
Signing time: Thu 02 Jan 2025 01:48:32 +0000
ROA not before: Thu 02 Jan 2025 01:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42821
IP address blocks: 195.182.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:36:3d:08:e9:f6:15:1b:f9:67:ee:5b:60:b3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f14a4e6558bab89d36e3ba21c95e2afdd68fbea
Validity
Not Before: Jan 2 01:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f90c81cddf6b9b901dcf94faea17a6b789aa7213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:02:d8:74:d2:9f:52:cd:84:5d:bd:86:e1:5e:
d7:7c:55:63:cd:ca:ca:ac:82:3e:ea:a4:42:08:84:
69:e6:ed:50:99:08:eb:a8:d2:6b:60:35:b4:bd:bb:
ca:db:ad:30:7e:fa:1d:f5:76:fc:12:86:7e:c9:ef:
9a:bb:94:4f:78:05:9b:3c:88:45:03:51:e6:c0:33:
04:25:f8:8b:85:0b:fc:9e:c0:02:35:ec:4f:d2:4b:
ca:8b:5d:0e:a7:96:d2:d8:bb:9d:2d:9b:e1:ca:a3:
a7:13:bc:7e:3b:30:aa:b3:fa:8d:0a:0d:34:46:88:
20:99:4d:6d:86:3e:9f:49:5b:67:5d:28:88:19:c1:
e2:54:62:74:c4:0f:a0:ca:7e:f6:32:d0:11:83:7e:
f0:f5:89:32:3c:8e:ae:7f:00:5e:51:9e:32:f3:e8:
00:6e:6d:1a:2a:f4:5a:b4:05:4c:73:74:aa:28:09:
0a:8a:0f:5c:63:bd:50:e1:6d:f8:97:94:35:a5:f7:
b2:a8:62:b6:66:2a:ec:67:93:1b:b8:f6:53:15:ca:
ca:bf:bd:24:a2:ba:e9:27:bf:b5:f7:7b:ba:d2:c2:
e7:73:a9:18:2d:b8:84:96:18:90:13:27:19:3b:c5:
bd:a3:7f:b6:47:3b:e8:04:5c:93:e4:d1:06:58:77:
f2:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0C:81:CD:DF:6B:9B:90:1D:CF:94:FA:EA:17:A6:B7:89:AA:72:13
X509v3 Authority Key Identifier:
keyid:5F:14:A4:E6:55:8B:AB:89:D3:6E:3B:A2:1C:95:E2:AF:DD:68:FB:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XxSk5lWLq4nTbjuiHJXir91o--o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/1-QyBzd9rm5Adz5T66hemt4mqchM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a96cb-c3e0-49c6-ae34-da81f08f6001/1/XxSk5lWLq4nTbjuiHJXir91o--o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.182.50.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:5f:40:4c:4b:1b:2a:84:cf:eb:97:90:50:2e:c4:40:ea:18:
78:d4:69:04:1b:7e:56:19:b1:29:a6:ba:42:c1:3c:e6:59:39:
6f:9e:75:ac:c3:1c:79:9f:5e:b6:c6:3c:0b:c2:a9:61:51:37:
eb:97:21:92:5f:7b:94:96:d1:e7:df:98:91:22:41:4a:ad:21:
0d:66:c9:32:a2:2c:8c:7b:41:fd:7f:d8:c3:48:8b:8b:f8:43:
f4:0c:2f:d1:d9:74:26:ad:e8:73:14:c6:a1:20:d5:f4:8c:35:
6f:0c:f3:de:72:66:58:8d:aa:cc:64:e8:5f:19:51:d3:af:49:
e2:65:08:e0:3c:79:2e:b5:6b:56:ee:e8:62:7a:f0:5d:49:87:
c1:3a:33:0f:21:05:05:da:30:fd:fc:f1:e7:54:6d:b3:90:aa:
93:85:87:eb:9f:fa:d4:17:ab:2e:41:62:93:e0:4e:ac:9b:08:
96:61:db:26:c7:97:8c:af:b8:a4:f2:5a:13:14:08:19:e3:b5:
03:d0:35:b6:bb:1d:8a:2c:71:72:a4:af:04:1b:8c:66:d5:c8:
fa:be:1c:5d:2e:8e:84:d0:a5:47:d8:6d:97:44:59:89:5f:53:
56:c8:3b:c5:b7:5a:ed:6c:5b:39:9d:4e:a5:bd:b1:91:5b:f2:
a0:55:2d:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:50:33 2025 by rpki-client