Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/qADZbjUspL_WRqhq7wvNpX-fT-E.roa
File: qADZbjUspL_WRqhq7wvNpX-fT-E.roa (raw, json)
Hash identifier: 8V+RbGGUYULjGMvZVkBND643qQkjbKJgabtjnmu0hrU=
Subject key identifier: A8:00:D9:6E:35:2C:A4:BF:D6:46:A8:6A:EF:0B:CD:A5:7F:9F:4F:E1
Certificate issuer: /CN=e230de5fd3c2455173ba696a99441d9620d81d38
Certificate serial: 019425FC161C066F1B814556511344E5990B
Authority key identifier: E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/qADZbjUspL_WRqhq7wvNpX-fT-E.roa
Signing time: Thu 02 Jan 2025 07:47:45 +0000
ROA not before: Thu 02 Jan 2025 07:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49771
IP address blocks: 64.7.88.0/22 maxlen: 24
194.242.24.0/24 maxlen: 24
194.242.25.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:16:1c:06:6f:1b:81:45:56:51:13:44:e5:99:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e230de5fd3c2455173ba696a99441d9620d81d38
Validity
Not Before: Jan 2 07:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a800d96e352ca4bfd646a86aef0bcda57f9f4fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bf:4e:68:0e:19:c4:c0:23:ca:6b:96:47:20:
cf:65:5d:27:28:73:3a:c3:db:09:e9:ca:f6:30:18:
d7:23:8b:6c:69:5e:e1:61:51:68:40:ed:ad:4d:6f:
83:34:58:97:bf:54:c0:c0:8a:d9:19:8b:31:6a:9a:
b0:72:5e:ad:aa:00:c7:b4:4c:0e:c9:4d:d7:d9:e1:
d9:a8:63:84:34:c6:35:1e:3d:06:7f:7c:02:23:8c:
d0:8d:71:6e:0b:ae:c6:3e:11:a7:9e:9f:1c:a8:fa:
fc:13:17:ce:24:b6:7b:ca:de:da:be:1b:d6:ad:59:
dc:81:7a:ba:26:b7:2a:18:ea:b8:d5:ca:75:b5:39:
bd:6c:1c:c0:3d:0c:ed:16:27:fc:e0:ba:3b:d4:8f:
c1:9c:b5:c8:4f:43:be:74:c0:04:af:08:05:f0:cf:
e8:f7:6a:b1:e1:a8:1c:e7:bd:43:8e:d3:fa:a4:06:
7c:07:a8:77:0c:ea:9e:13:bc:44:56:e7:f0:cf:32:
97:01:2d:36:bf:8c:f2:0c:4f:24:75:44:24:36:12:
59:08:a1:dc:bf:6b:84:9b:30:78:3f:13:3e:da:82:
bd:8c:d7:fb:07:df:58:0d:37:6a:65:90:42:f5:ea:
3d:f3:23:da:81:0f:9b:3e:e4:72:f5:fa:b2:b7:99:
c5:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:00:D9:6E:35:2C:A4:BF:D6:46:A8:6A:EF:0B:CD:A5:7F:9F:4F:E1
X509v3 Authority Key Identifier:
keyid:E2:30:DE:5F:D3:C2:45:51:73:BA:69:6A:99:44:1D:96:20:D8:1D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4jDeX9PCRVFzumlqmUQdliDYHTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/qADZbjUspL_WRqhq7wvNpX-fT-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/fac7ed-9018-45db-8947-fb5c582e4097/1/4jDeX9PCRVFzumlqmUQdliDYHTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.7.88.0/22
194.242.24.0/23
Signature Algorithm: sha256WithRSAEncryption
35:d8:67:4f:ab:f8:4e:87:ec:b2:24:53:8b:e7:77:6f:0f:2d:
00:6e:3b:16:aa:3e:12:8b:0b:a4:29:45:d6:da:71:79:26:db:
43:4f:46:6f:4d:71:70:82:31:4e:59:9e:c0:8e:06:25:e5:e6:
18:0a:87:49:c6:44:48:7c:e7:7a:7f:90:67:79:d5:13:60:0b:
9c:e1:ce:65:3c:54:2c:72:bc:71:57:84:d9:0a:18:52:35:60:
c7:54:5b:ef:19:7f:37:65:14:6f:d0:ca:5a:1d:87:80:39:d2:
34:99:f0:20:b4:11:fe:7f:52:7d:6f:47:7b:71:9e:ff:d7:89:
68:67:10:83:c2:28:e1:81:b1:5b:55:06:96:58:57:7f:ba:80:
f0:ee:87:2f:7c:ca:82:59:b4:15:fc:36:37:0a:fd:44:48:67:
ca:8d:63:c1:83:72:27:6f:88:57:7b:83:05:3a:a2:f2:2a:40:
94:a7:59:98:b4:9b:8a:5a:b4:bf:fb:f5:53:ab:4c:c3:54:e8:
2b:0f:57:d9:3b:92:2a:a2:2a:15:a7:ac:7e:9e:3e:76:a4:73:
3c:9b:84:14:6a:50:e5:c3:3b:7b:eb:cc:b5:91:0d:ab:76:c6:
d3:49:a1:4f:0d:07:4c:9c:30:35:4b:16:35:01:f6:35:07:00:
07:b3:38:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:02 2025 by rpki-client on console.sobornost.net