Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/qcINREJGIFWN3YXOgtNuqjCBfnY.roa
File: qcINREJGIFWN3YXOgtNuqjCBfnY.roa (raw, json)
Hash identifier: 1gG5XU0DGFtKFXRvNOA96XCA/EPC9XB/rEykj9F+ocs=
Subject key identifier: A9:C2:0D:44:42:46:20:55:8D:DD:85:CE:82:D3:6E:AA:30:81:7E:76
Certificate issuer: /CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Certificate serial: 01941F8C363E60AD6CAA1F8CF2BA3BE67453
Authority key identifier: 3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/qcINREJGIFWN3YXOgtNuqjCBfnY.roa
Signing time: Wed 01 Jan 2025 01:47:50 +0000
ROA not before: Wed 01 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12886
IP address blocks: 193.23.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:36:3e:60:ad:6c:aa:1f:8c:f2:ba:3b:e6:74:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d70fe1d75f7da76d2e3dc344fb1f0b0b69de001
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9c20d44424620558ddd85ce82d36eaa30817e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b7:65:c3:d2:fb:9d:1e:56:4a:32:d1:b5:3a:
b7:81:18:a8:ea:b2:2f:f2:ca:43:24:f4:39:ef:6f:
36:91:80:e1:75:d6:32:8c:43:7f:f9:55:8d:9b:31:
f5:8c:a7:0c:01:97:6e:e3:91:2f:29:40:33:0e:31:
d3:98:4f:f5:c8:b0:83:b0:bb:f5:b9:8a:3d:fe:5d:
eb:aa:64:66:d7:16:e5:7a:a0:48:2c:fc:d7:aa:a8:
89:98:61:54:1f:21:b3:7e:8f:02:78:5a:65:21:f7:
ec:0a:0a:fc:47:18:62:ba:ae:e8:3c:3e:d2:80:9f:
07:e4:08:d3:a1:27:57:ed:57:5c:84:95:ff:34:b5:
1e:65:bf:ff:db:9c:c9:5d:64:67:35:ae:2d:42:c2:
d5:5c:86:9d:3f:91:43:82:dd:bd:a6:1f:8c:02:09:
fa:56:74:a7:be:3d:af:c0:bf:f5:95:39:3e:23:cf:
56:59:4c:df:23:f9:22:93:a8:b6:4a:56:cc:52:10:
2d:f4:4f:8d:56:52:e2:4a:b3:6e:bc:dd:9c:b2:90:
e1:b6:af:65:0c:af:4a:40:03:8a:45:1c:94:25:df:
fb:e0:23:94:8b:6f:9e:d0:13:94:59:f6:c8:3c:73:
54:90:46:ab:01:f6:69:6a:26:6b:7f:8c:8c:a3:71:
6a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:C2:0D:44:42:46:20:55:8D:DD:85:CE:82:D3:6E:AA:30:81:7E:76
X509v3 Authority Key Identifier:
keyid:3D:70:FE:1D:75:F7:DA:76:D2:E3:DC:34:4F:B1:F0:B0:B6:9D:E0:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PXD-HXX32nbS49w0T7HwsLad4AE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/qcINREJGIFWN3YXOgtNuqjCBfnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/2456e5-61dd-4ae3-a24f-b852bd8123f0/1/PXD-HXX32nbS49w0T7HwsLad4AE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.148.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:82:7f:f2:d5:a7:cc:19:65:bf:53:0a:0f:88:42:15:7f:41:
14:6f:af:71:6b:3d:59:f0:1e:f1:5e:68:6f:b2:82:82:81:6f:
6b:29:4d:7b:13:2d:67:15:44:7b:41:c2:db:68:dd:79:a2:5b:
8f:a9:e8:e8:70:06:49:9f:18:3c:1e:c9:8a:87:ec:cc:cb:8c:
93:d8:76:21:0e:7b:c7:b8:93:ac:14:6c:d4:f9:48:0c:4f:51:
0d:41:7d:f3:69:57:71:75:c6:8f:90:da:f7:cb:f7:6d:a1:de:
12:3f:9b:a3:b6:fe:ba:1c:37:f1:70:24:f7:ae:e6:99:d3:8d:
08:73:9b:73:41:42:e1:45:b6:7d:6e:41:b7:f1:e1:eb:21:34:
3a:a5:bd:89:fb:da:e7:ab:15:9b:41:02:a7:4e:7b:0e:f3:47:
b8:c5:c8:13:c1:40:07:c1:c1:bd:a6:40:85:80:1d:4b:97:af:
9c:95:f0:eb:e4:f1:3f:31:c4:32:6b:b2:5e:7f:18:45:84:cc:
b8:51:d2:4e:bb:db:8f:c8:6c:6a:e0:97:52:02:eb:b5:73:17:
39:a0:ba:25:45:95:ee:7e:ed:b4:c9:fe:0b:b0:ec:23:f6:04:
52:f3:96:eb:8a:7a:41:8b:b7:b4:c9:42:bb:26:5e:a4:09:a2:
45:7e:e1:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:39:39 2025 by rpki-client