Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/QxrO5EAVR8eFM8jH9BCfhqlcchk.roa
File: QxrO5EAVR8eFM8jH9BCfhqlcchk.roa (raw, json)
Hash identifier: YI48GxiCUKeQBfw8EzcAM9WtfO8HGqURFBVLVXq05fo=
Subject key identifier: 43:1A:CE:E4:40:15:47:C7:85:33:C8:C7:F4:10:9F:86:A9:5C:72:19
Certificate issuer: /CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Certificate serial: 019421B1796828985C872753E1E63AEC30EA
Authority key identifier: 92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/QxrO5EAVR8eFM8jH9BCfhqlcchk.roa
Signing time: Wed 01 Jan 2025 11:47:46 +0000
ROA not before: Wed 01 Jan 2025 11:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41320
IP address blocks: 195.26.94.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:79:68:28:98:5c:87:27:53:e1:e6:3a:ec:30:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92205f5a64ea1fb090ad26dcfdb18cefb9aabd8d
Validity
Not Before: Jan 1 11:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=431acee4401547c78533c8c7f4109f86a95c7219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e8:e5:24:dc:12:a3:88:75:13:e7:12:a6:2b:
f3:41:3d:9e:a2:fb:18:48:08:57:6b:80:51:36:31:
74:c2:b0:62:c8:1b:cf:f9:8f:73:dd:0f:6b:92:0a:
28:e4:25:1d:97:ca:c5:05:f9:7d:df:e4:d0:16:75:
2d:56:d5:7f:d4:52:ec:1e:e4:a8:b6:47:eb:f9:f3:
fe:b3:f9:32:a0:2e:12:e4:e6:bb:16:d0:c2:8e:03:
53:05:72:40:26:f9:a2:3c:3b:d5:a8:4f:af:ad:ad:
16:39:89:59:28:90:f8:04:96:a5:41:2f:d0:c8:79:
57:c0:d3:45:b6:fc:b2:c6:56:19:59:02:ff:77:dc:
ba:fa:cd:f7:b1:8a:f0:d8:a3:7e:6d:ad:28:3b:10:
b3:e0:68:81:fe:b3:f3:4a:aa:d8:bc:aa:09:50:ec:
78:3d:06:e6:0b:bc:e3:cb:bf:87:8e:fd:45:7a:98:
14:ba:f1:fa:6a:94:96:40:0a:6a:b0:82:1e:47:17:
41:eb:b7:ef:5f:e5:68:6d:ea:5b:b8:a2:ca:8c:fd:
52:17:9c:cd:b3:0d:aa:4b:1a:78:a9:bb:80:e9:5e:
09:f5:8a:e3:a9:15:a8:52:e6:cf:1c:39:c4:d9:79:
43:2e:60:44:84:08:1f:cd:c6:1e:b9:a2:bd:9c:fe:
91:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1A:CE:E4:40:15:47:C7:85:33:C8:C7:F4:10:9F:86:A9:5C:72:19
X509v3 Authority Key Identifier:
keyid:92:20:5F:5A:64:EA:1F:B0:90:AD:26:DC:FD:B1:8C:EF:B9:AA:BD:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiBfWmTqH7CQrSbc_bGM77mqvY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/QxrO5EAVR8eFM8jH9BCfhqlcchk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/652267-ea13-4892-9ffa-09c1b7336a51/1/kiBfWmTqH7CQrSbc_bGM77mqvY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.26.94.0/23
Signature Algorithm: sha256WithRSAEncryption
13:cd:6e:83:13:0f:4b:27:12:d1:8f:01:e6:5f:c1:6e:3b:8c:
f3:07:fd:95:6c:32:28:fc:cc:e7:00:03:7c:55:ee:ee:70:bf:
f2:4b:7f:07:96:0b:db:0a:10:3e:f5:db:ca:20:8c:bc:7c:3a:
99:4f:c3:e2:89:e9:6c:83:2d:21:af:a1:6b:ca:aa:fb:d5:39:
05:21:bd:52:56:94:72:2b:06:21:b3:b4:c7:18:a8:e1:5f:80:
4d:50:16:c8:1b:8d:c4:b9:2d:22:68:cf:db:27:a6:f0:c0:72:
cd:4a:42:0e:4c:f3:0e:1f:55:f6:b2:e6:99:d7:fc:20:45:6f:
2b:25:63:bc:06:0f:81:89:28:0e:55:f2:5d:18:ac:d1:11:67:
de:18:4d:00:e5:e5:b4:e2:e7:fa:c7:3b:fb:1b:ab:eb:96:bc:
2a:34:73:bd:c0:6a:fe:ac:3d:f1:74:3a:17:4f:7c:d2:0c:69:
7d:38:5b:18:68:b7:4c:b5:1e:fc:a3:76:92:63:b1:4e:db:f3:
f0:08:18:94:b4:9c:11:2b:f0:d0:3b:61:64:a2:72:2f:ee:6a:
99:b9:b7:41:8e:e5:69:2b:59:9e:ac:cb:e1:6f:83:45:e5:24:
c2:9f:83:14:56:83:02:d0:08:61:25:a8:3b:7d:a3:6a:3d:81:
6a:2f:82:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:57:20 2025 by rpki-client