Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/qcE5lMt-ta8yQgK_A4TOf_qcnKk.roa
File: qcE5lMt-ta8yQgK_A4TOf_qcnKk.roa (raw, json)
Hash identifier: mHbw87Bhgg5orJBSCEF9YhID6w2GXs/pHd+LaovXweg=
Subject key identifier: A9:C1:39:94:CB:7E:B5:AF:32:42:02:BF:03:84:CE:7F:FA:9C:9C:A9
Certificate issuer: /CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Certificate serial: 019425216E60D22B1756259E38FB91AEED03
Authority key identifier: 32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/qcE5lMt-ta8yQgK_A4TOf_qcnKk.roa
Signing time: Thu 02 Jan 2025 03:48:55 +0000
ROA not before: Thu 02 Jan 2025 03:48:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207974
IP address blocks: 146.19.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:6e:60:d2:2b:17:56:25:9e:38:fb:91:ae:ed:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32c78eeef7acb451fc37575feb9114dfccc1cdfb
Validity
Not Before: Jan 2 03:48:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9c13994cb7eb5af324202bf0384ce7ffa9c9ca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4a:aa:9f:da:c9:dd:17:bb:3d:7e:2a:eb:37:
4a:6a:2d:9f:d5:55:e5:96:da:f1:4f:2d:13:71:74:
7e:26:16:71:95:24:2c:28:e8:35:ef:62:80:28:d3:
87:aa:7e:5d:b1:ec:ae:1d:e9:71:ae:a3:c6:5e:52:
31:44:c0:77:5f:cc:4e:d5:33:60:a9:1b:aa:f6:02:
b3:ae:70:33:29:2f:d8:b7:ab:8b:78:f1:1b:63:25:
eb:97:56:57:68:74:a9:c7:22:cf:e4:ff:c1:44:df:
76:8c:fb:30:00:80:e2:5f:e8:51:28:60:7e:d7:65:
6a:fc:7c:df:9e:14:05:2e:76:b1:9d:69:c8:1c:83:
87:2b:cc:91:04:f4:eb:99:d1:bc:22:94:1a:f4:5c:
30:32:47:f1:53:78:4d:4e:1d:d7:65:f9:26:98:be:
de:fb:4d:c8:d8:d3:2e:18:8a:5f:5d:ec:b7:38:22:
0c:f9:5e:b6:60:5f:27:25:5e:99:01:3a:cc:c9:cf:
cd:52:0e:ed:d4:3b:01:9b:19:63:c3:60:53:05:2e:
31:92:3d:99:75:9f:63:6b:af:1f:4a:2f:7a:c1:64:
63:e3:25:34:4a:21:b2:91:bc:7e:de:1c:2e:60:41:
fd:04:3e:76:36:0f:2d:1f:1f:61:eb:0d:8d:9b:42:
b9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C1:39:94:CB:7E:B5:AF:32:42:02:BF:03:84:CE:7F:FA:9C:9C:A9
X509v3 Authority Key Identifier:
keyid:32:C7:8E:EE:F7:AC:B4:51:FC:37:57:5F:EB:91:14:DF:CC:C1:CD:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MseO7vestFH8N1df65EU38zBzfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/qcE5lMt-ta8yQgK_A4TOf_qcnKk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/225bcb-6d3d-4c0e-824f-2f1c8e408b64/1/MseO7vestFH8N1df65EU38zBzfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.117.0/24
Signature Algorithm: sha256WithRSAEncryption
41:89:0a:36:f3:9e:24:51:8a:46:8a:82:4e:87:c7:2d:b2:b1:
8d:9c:b3:d0:72:03:fb:ed:4a:65:53:6e:ba:59:92:fa:85:92:
27:3a:86:14:2b:bb:0b:80:a0:6c:91:99:17:61:ad:71:fb:f5:
dc:9c:06:58:97:19:cb:07:01:25:da:18:59:eb:a9:69:8c:f1:
0f:c2:ba:e3:07:4f:0d:5d:ca:50:9e:ed:bb:02:e9:ea:5d:57:
c3:8c:61:53:ac:05:9e:ca:43:d0:b0:6b:f6:f5:c0:f1:af:98:
80:b0:47:e0:9e:7a:50:eb:b9:f2:29:6d:ff:74:e3:3d:71:3d:
9f:29:b5:81:cf:89:5b:f4:0d:eb:f5:4a:aa:b3:6c:2c:66:4a:
30:3d:32:19:4a:2b:d7:a3:e3:35:f5:cc:8b:30:0f:11:56:75:
68:2b:66:e2:75:50:10:d8:25:27:fa:b2:00:77:1d:f3:1d:08:
55:23:b9:c6:b4:7e:70:38:a5:4d:32:f7:36:c1:57:30:92:ff:
db:52:cf:c5:a5:3a:40:50:74:b1:60:6e:b8:37:55:db:d2:23:
4e:3c:11:61:9a:98:dd:fa:db:5e:97:6d:d0:b8:78:2b:35:ac:
29:50:2c:ad:0b:f6:60:53:1e:d4:d2:52:13:bc:d4:28:48:18:
10:ae:46:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:25:12 2025 by rpki-client