Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/QqxFkduBQ2lgMz9arezaZJZOZog.roa
File: QqxFkduBQ2lgMz9arezaZJZOZog.roa (raw, json)
Hash identifier: mBPsAiWITfiKSFf58uj2KYBth6c64AHyF7alJJC9J2I=
Subject key identifier: 42:AC:45:91:DB:81:43:69:60:33:3F:5A:AD:EC:DA:64:96:4E:66:88
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 018388DB2F89A9838E931A1E31B6F478F7B4
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/QqxFkduBQ2lgMz9arezaZJZOZog.roa
Signing time: Thu 29 Sep 2022 10:46:49 +0000
ROA not before: Thu 29 Sep 2022 10:46:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205570
IP address blocks: 109.111.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:88:db:2f:89:a9:83:8e:93:1a:1e:31:b6:f4:78:f7:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Sep 29 10:46:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42ac4591db81436960333f5aadecda64964e6688
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cc:0a:5c:bd:72:bb:95:a3:51:82:c6:bc:34:
7a:e7:04:d8:e7:87:d3:a4:20:26:14:1a:0f:a0:54:
57:e9:3e:11:ac:7b:e3:c5:75:e0:7c:ef:1e:13:c9:
ca:15:69:9d:24:b7:a2:d7:7d:a4:fe:c6:98:5e:0a:
b0:57:10:24:dc:e3:01:60:ec:42:49:0a:94:d7:4f:
a5:1e:7b:84:04:99:4e:bf:2e:59:73:48:e3:03:32:
7a:af:05:90:5c:ea:a6:6a:e9:93:52:44:4e:0b:7e:
42:f0:7f:3a:a4:c9:7a:64:d1:d1:3f:ea:b1:37:d3:
0b:34:b5:4d:22:55:39:4c:30:b2:b2:96:e6:73:0f:
76:78:09:49:95:55:e7:14:a4:8f:7f:fd:2e:c0:b4:
be:80:d6:d9:23:5b:4c:1b:76:6b:50:f4:b1:04:91:
03:44:00:70:5d:40:9f:5f:bb:6f:95:53:b0:e6:eb:
70:fd:ad:ef:4a:cd:0c:17:5d:94:51:17:34:cd:34:
33:43:ac:43:7f:a9:e7:d4:be:f5:fb:ce:03:be:b9:
2d:37:2f:63:d8:7f:5b:c9:b7:35:ef:b4:c5:3f:81:
d4:e0:d4:f8:e5:f9:63:c9:3a:5c:e6:85:f0:b3:6d:
22:87:3b:34:06:e1:2c:81:40:43:16:33:0c:70:f0:
26:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AC:45:91:DB:81:43:69:60:33:3F:5A:AD:EC:DA:64:96:4E:66:88
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/QqxFkduBQ2lgMz9arezaZJZOZog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.245.0/24
Signature Algorithm: sha256WithRSAEncryption
10:8a:34:1a:91:fb:a6:bc:e0:4e:1d:dc:2f:7e:d1:e3:4b:5e:
d5:a6:db:f6:64:b3:04:97:f1:e8:d7:46:9d:55:a1:67:00:39:
2b:b3:09:62:88:35:c8:0e:3b:2e:a5:54:69:e6:80:03:ed:fb:
bd:7e:5f:3b:4d:75:69:ed:58:f4:ac:b6:55:29:98:b4:17:60:
5c:c3:0f:0d:2e:c2:af:d6:00:7e:06:ba:e9:6d:20:f8:58:f2:
df:56:5a:b1:9b:85:33:f3:7e:cd:07:8e:33:cf:97:95:8e:50:
22:95:7d:12:bb:02:34:53:7b:92:23:d3:55:1b:d2:86:3a:28:
29:f7:24:d9:35:6e:a6:2c:c3:58:da:59:24:54:a5:57:77:9d:
45:45:11:9e:d3:9e:99:88:f8:b3:a8:dc:35:40:3a:4c:3e:f7:
8f:af:e1:90:ed:fa:40:e7:d9:9c:88:f9:93:68:de:cd:f4:20:
d6:6b:68:54:eb:ae:76:fa:9e:b4:31:c4:99:57:9b:56:97:f5:
06:c6:9d:fd:ba:de:eb:52:32:e4:61:21:64:4c:3a:a1:ef:dd:
60:07:eb:fa:3c:52:34:99:6e:be:bd:25:c6:f4:72:ce:ae:53:
9f:ce:bc:f4:93:de:8c:52:1b:2a:e3:72:ca:6d:aa:66:67:25:
74:69:6f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 19:07:17 2025 by rpki-client