Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/QbfQw6PQWXMnUYTcNMeoW813ttw.roa
File: QbfQw6PQWXMnUYTcNMeoW813ttw.roa (raw, json)
Hash identifier: g9TBhQ7bZYV+JTfg685xMP7NzWGbPIajKmZ/OPgHv/k=
Subject key identifier: 41:B7:D0:C3:A3:D0:59:73:27:51:84:DC:34:C7:A8:5B:CD:77:B6:DC
Certificate issuer: /CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e
Certificate serial: 019422FBE90E905165A8F62E700E97B2CD09
Authority key identifier: 20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/QbfQw6PQWXMnUYTcNMeoW813ttw.roa
Signing time: Wed 01 Jan 2025 17:48:42 +0000
ROA not before: Wed 01 Jan 2025 17:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199484
IP address blocks: 212.101.96.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:e9:0e:90:51:65:a8:f6:2e:70:0e:97:b2:cd:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2050df51f0e5bc81db4b05f449f74308d7fcfa2e
Validity
Not Before: Jan 1 17:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41b7d0c3a3d05973275184dc34c7a85bcd77b6dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:4d:c8:4b:b5:ff:01:ba:f0:08:8e:91:fe:cb:
69:57:70:90:0c:9b:74:47:52:8c:99:cf:8a:bc:f5:
52:ef:03:63:71:37:71:5b:bb:71:22:42:9b:50:c9:
ac:11:bc:19:7f:ff:de:9f:23:79:06:03:4e:79:fd:
51:13:a9:da:f9:e5:32:d8:f8:43:bb:41:99:af:86:
c3:a2:63:1a:5a:5c:a7:39:4e:db:a9:3d:da:30:d4:
8c:5f:84:f7:72:42:73:81:45:53:a4:7c:7a:0f:23:
8f:eb:89:ab:1e:50:71:d3:60:08:ff:28:1c:e7:c5:
af:f4:6f:f2:46:95:3d:ac:ad:27:45:f0:ba:56:50:
35:34:5c:17:a2:eb:79:61:e6:76:4c:c4:b8:16:54:
8e:74:25:c5:78:c0:81:66:94:73:9a:18:d1:8c:f1:
14:39:3c:d3:03:36:6f:3f:40:11:4f:31:9a:1c:4a:
fd:40:ae:2e:f8:ba:e2:94:1f:65:cd:4d:18:21:28:
67:92:53:01:6e:8d:22:62:c2:7b:f5:d3:d0:8b:0c:
95:7a:c8:77:5b:12:a3:b0:93:7a:66:92:93:cc:5c:
de:c7:1f:ff:c5:fe:51:0f:b6:d4:08:2e:4f:82:f1:
30:59:06:42:b3:af:4b:23:88:e8:bf:c5:b3:89:f4:
0e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B7:D0:C3:A3:D0:59:73:27:51:84:DC:34:C7:A8:5B:CD:77:B6:DC
X509v3 Authority Key Identifier:
keyid:20:50:DF:51:F0:E5:BC:81:DB:4B:05:F4:49:F7:43:08:D7:FC:FA:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IFDfUfDlvIHbSwX0SfdDCNf8-i4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/QbfQw6PQWXMnUYTcNMeoW813ttw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/60e376-993c-4baf-b590-6e6481e5765c/1/IFDfUfDlvIHbSwX0SfdDCNf8-i4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.101.96.0/19
Signature Algorithm: sha256WithRSAEncryption
7b:16:93:58:d4:0d:82:51:d1:54:29:e9:e0:a2:a0:f4:df:73:
df:b6:ae:8a:d4:0e:ed:ac:60:c2:ef:3a:c8:f3:53:b7:93:25:
d8:d1:2e:c4:7b:69:a7:83:9f:dd:10:fe:a8:23:d9:e9:cf:8d:
48:12:c0:85:00:6e:d3:48:1c:7d:6f:c5:59:0a:6f:3f:f5:de:
9f:fc:1c:47:05:dc:c4:8b:fc:40:49:51:0d:7c:aa:ca:17:c1:
8c:d9:9b:32:60:d5:10:0e:3a:c8:9e:67:01:04:68:af:1a:3d:
bc:36:76:e8:4d:6f:a5:dd:ea:d2:09:c3:35:92:9e:82:4f:28:
f9:89:0e:65:72:28:ac:59:7e:f2:31:87:8f:8b:e0:87:35:99:
e5:7e:ca:16:97:cd:0b:28:6f:09:0f:84:98:0d:41:d3:eb:61:
15:1f:02:b9:45:68:63:e3:d8:01:2d:ac:5c:ef:10:a8:35:9f:
f9:c3:ab:cf:0a:20:05:87:bf:ed:3b:16:b3:9f:28:cc:f9:bf:
ff:45:20:f2:b9:38:2c:8e:06:1c:f8:be:43:44:f9:16:b3:a7:
3a:ad:c4:9b:95:34:87:9c:3c:24:e2:67:50:c1:ad:95:c0:e1:
ce:5d:5d:e1:28:f9:c5:c8:80:74:8c:ae:68:1c:d4:d1:af:36:
9b:bf:7c:ff
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi++kOkFFlqPYucA6Xss0JMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwNTBkZjUxZjBlNWJjODFkYjRiMDVmNDQ5Zjc0MzA4ZDdm
Y2ZhMmUwHhcNMjUwMTAxMTc0ODQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWI3ZDBjM2EzZDA1OTczMjc1MTg0ZGMzNGM3YTg1YmNkNzdiNmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA703IS7X/AbrwCI6R/stpV3CQDJt0
R1KMmc+KvPVS7wNjcTdxW7txIkKbUMmsEbwZf//enyN5BgNOef1RE6na+eUy2PhD
u0GZr4bDomMaWlynOU7bqT3aMNSMX4T3ckJzgUVTpHx6DyOP64mrHlBx02AI/ygc
58Wv9G/yRpU9rK0nRfC6VlA1NFwXout5YeZ2TMS4FlSOdCXFeMCBZpRzmhjRjPEU
OTzTAzZvP0ARTzGaHEr9QK4u+LrilB9lzU0YIShnklMBbo0iYsJ79dPQiwyVesh3
WxKjsJN6ZpKTzFzexx//xf5RD7bUCC5PgvEwWQZCs69LI4jov8WzifQO7QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEG30MOj0FlzJ1GE3DTHqFvNd7bcMB8GA1UdIwQY
MBaAFCBQ31Hw5byB20sF9En3QwjX/PouMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUZEZlVmRGx2SUhiU3dYMFNmZERDTmY4LWk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS82MGUzNzYtOTkzYy00YmFmLWI1OTAt
NmU2NDgxZTU3NjVjLzEvUWJmUXc2UFFXWE1uVVlUY05NZW9XODEzdHR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS82MGUzNzYtOTkzYy00YmFmLWI1OTAtNmU2NDgxZTU3NjVj
LzEvSUZEZlVmRGx2SUhiU3dYMFNmZERDTmY4LWk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF1GVgMA0G
CSqGSIb3DQEBCwUAA4IBAQB7FpNY1A2CUdFUKengoqD033Pftq6K1A7trGDC7zrI
81O3kyXY0S7Ee2mng5/dEP6oI9npz41IEsCFAG7TSBx9b8VZCm8/9d6f/BxHBdzE
i/xASVENfKrKF8GM2ZsyYNUQDjrInmcBBGivGj28NnboTW+l3erSCcM1kp6CTyj5
iQ5lciisWX7yMYePi+CHNZnlfsoWl80LKG8JD4SYDUHT62EVHwK5RWhj49gBLaxc
7xCoNZ/5w6vPCiAFh7/tOxaznyjM+b//RSDyuTgsjgYc+L5DRPkWs6c6rcSblTSH
nDwk4mdQwa2VwOHOXV3hKPnFyIB0jK5oHNTRrzabv3z/
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:30:20 2025 by rpki-client