Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/_QkywIQ5MYjLQgAq3HIEi0yS3ts.roa
File: _QkywIQ5MYjLQgAq3HIEi0yS3ts.roa (raw, json)
Hash identifier: XOazSSRb7RPjyPPcCQsskJ3rE/egTw8zpZ2LPq6cndM=
Subject key identifier: FD:09:32:C0:84:39:31:88:CB:42:00:2A:DC:72:04:8B:4C:92:DE:DB
Certificate issuer: /CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Certificate serial: 0194266BD0082321A87FF151CD60ECFB13A6
Authority key identifier: 4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/_QkywIQ5MYjLQgAq3HIEi0yS3ts.roa
Signing time: Thu 02 Jan 2025 09:49:47 +0000
ROA not before: Thu 02 Jan 2025 09:49:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57348
IP address blocks: 194.8.250.0/24 maxlen: 24
194.8.251.0/24 maxlen: 24
2001:67c:1814::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:d0:08:23:21:a8:7f:f1:51:cd:60:ec:fb:13:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14397e3021beff3b5fd30daaab62514cfa166b
Validity
Not Before: Jan 2 09:49:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fd0932c084393188cb42002adc72048b4c92dedb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:15:aa:0f:33:96:44:90:14:34:b3:32:52:0b:
22:ae:b4:4c:6f:e0:40:14:06:38:e7:12:fa:33:86:
4d:35:37:03:19:4c:1a:2f:dd:fd:08:41:00:f8:85:
60:6d:a4:93:b9:60:15:6f:d4:04:a5:e0:c6:02:b6:
ee:92:8c:41:68:ae:b4:34:43:39:ea:dd:1b:c3:61:
f8:0f:c0:01:ed:55:83:88:83:40:3b:50:a8:18:2d:
e0:67:f7:87:16:19:bd:55:45:cc:63:32:87:66:4e:
56:0b:10:30:93:23:fe:0b:ec:27:a4:95:bf:f3:62:
a0:c1:f3:bd:c7:f1:a6:9c:24:c7:11:58:31:1d:90:
c2:e5:01:b7:c3:2b:1d:88:2c:b8:9e:92:ef:6c:dc:
e4:06:cd:e4:c2:cd:91:93:ed:6f:58:47:ed:f0:23:
8c:0f:b2:a3:2e:6f:23:31:35:4d:1c:c8:ed:88:9e:
32:aa:10:ff:df:c7:d5:2b:6d:1b:09:c1:2a:8b:a3:
3d:21:8b:d8:a4:ff:1a:5f:d9:05:7d:11:fe:e7:6b:
17:e6:f6:0e:2d:3a:59:b3:1c:f0:30:4f:2b:93:7a:
46:77:ec:4e:b9:a0:0a:4e:1f:36:73:6c:f2:1b:16:
bf:36:bf:c6:e8:f7:3b:bb:2c:21:f3:d0:83:76:8d:
b4:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:09:32:C0:84:39:31:88:CB:42:00:2A:DC:72:04:8B:4C:92:DE:DB
X509v3 Authority Key Identifier:
keyid:4F:14:39:7E:30:21:BE:FF:3B:5F:D3:0D:AA:AB:62:51:4C:FA:16:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQ5fjAhvv87X9MNqqtiUUz6Fms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/_QkywIQ5MYjLQgAq3HIEi0yS3ts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/beed6c-fb5a-4802-ae50-a2f728bdc275/1/TxQ5fjAhvv87X9MNqqtiUUz6Fms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.8.250.0/23
IPv6:
2001:67c:1814::/48
Signature Algorithm: sha256WithRSAEncryption
3d:8b:3a:c5:84:a6:70:b9:9c:9a:69:c7:9c:fc:5d:b4:47:9e:
44:76:af:10:b9:1c:79:7f:48:3d:b5:af:f6:c0:72:46:b3:e7:
72:b2:9a:aa:67:79:71:cf:97:2d:c7:80:f5:32:f3:04:5b:1f:
87:b5:80:98:bb:ef:32:df:fe:6e:c6:9e:49:c6:1f:ae:d5:26:
74:95:12:24:08:a1:21:ff:a5:d7:6c:e3:18:0a:10:ad:ff:d6:
45:f7:0f:f1:ce:7d:5b:4c:4f:67:3a:b0:a7:65:34:ae:3c:4e:
0e:87:f6:db:dd:8f:07:1b:72:cd:e6:d0:db:c5:ee:cc:c3:2d:
b7:fc:58:28:da:02:99:01:a4:ba:c2:16:db:45:d3:ae:6f:e4:
a7:fc:9b:08:ed:a6:b8:3e:fa:22:cf:51:cd:2f:86:4a:fe:c9:
47:0a:24:34:e1:56:16:f7:48:4b:39:c9:e2:f4:ee:da:c5:8c:
93:48:77:6a:c1:19:ff:3f:a2:c2:ca:77:65:50:36:50:8b:a6:
6b:30:14:ac:12:7b:8c:63:d2:d4:28:ca:fd:46:71:ef:9b:f8:
2b:aa:9d:2c:7e:e3:3c:80:56:60:5a:a0:94:ed:be:09:b3:c8:
ce:c9:b4:9e:51:fd:6c:e6:68:d6:f5:81:d6:7a:bf:0b:aa:ce:
ed:08:a4:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:04:29 2025 by rpki-client