Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/mq2WK1BWz4a2Yo_KhLxZIcR7xCc.roa
File: mq2WK1BWz4a2Yo_KhLxZIcR7xCc.roa (raw, json)
Hash identifier: Qcby8Wr2h6htBY3phdXczNrS5qR9unpp5KemIo49KRI=
Subject key identifier: 9A:AD:96:2B:50:56:CF:86:B6:62:8F:CA:84:BC:59:21:C4:7B:C4:27
Certificate issuer: /CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Certificate serial: 0194266BAD7FE4DDB076F5D165CCC5FEA3FE
Authority key identifier: 84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/mq2WK1BWz4a2Yo_KhLxZIcR7xCc.roa
Signing time: Thu 02 Jan 2025 09:49:38 +0000
ROA not before: Thu 02 Jan 2025 09:49:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35046
IP address blocks: 94.143.232.0/21 maxlen: 21
185.133.100.0/22 maxlen: 22
213.226.208.0/20 maxlen: 20
2a00:5100::/32 maxlen: 34
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ad:7f:e4:dd:b0:76:f5:d1:65:cc:c5:fe:a3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b0cac838f282e042948f9d2b2cd5754d2e8c47
Validity
Not Before: Jan 2 09:49:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9aad962b5056cf86b6628fca84bc5921c47bc427
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:46:54:36:fd:5e:c1:1a:1e:7c:ed:0e:c1:98:
6f:9e:84:58:46:8a:85:23:1f:56:2f:f9:44:05:6e:
45:4e:c7:39:87:a6:22:ff:4f:d1:28:39:90:fc:fa:
db:c5:41:8a:8b:42:b2:ce:da:bf:b3:7e:c9:16:47:
e5:16:ae:a2:ca:b6:77:52:ad:dc:16:f0:f1:a5:59:
fa:a0:02:0e:3e:45:7c:52:2d:6e:7b:67:45:b2:18:
ce:14:46:d8:d2:cc:eb:a6:07:e4:0e:32:c3:e9:74:
96:1b:dd:e7:f0:68:99:57:a7:69:5e:ae:41:28:89:
e9:4e:71:cc:db:dd:90:54:d1:d3:0e:17:2f:d3:5b:
06:b7:c3:d8:27:50:1e:5d:2c:2b:d7:9f:37:ed:01:
5f:30:b3:33:0e:0b:6b:b8:e9:2d:99:98:ed:d7:9b:
3b:ec:e6:17:c7:58:55:6b:77:17:08:6f:13:bc:72:
4b:27:a7:2a:b8:a6:2a:18:9f:35:6e:cd:29:26:ab:
38:4b:cc:22:83:c9:12:75:b4:94:29:e5:c5:d6:3b:
72:01:8d:01:20:45:af:e1:95:cd:b9:3f:fb:15:1b:
dc:2b:38:c9:b9:28:02:d9:2b:7c:ec:83:b2:77:a6:
d6:34:5c:e3:79:c7:2c:60:02:e6:52:ee:68:b6:94:
f2:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AD:96:2B:50:56:CF:86:B6:62:8F:CA:84:BC:59:21:C4:7B:C4:27
X509v3 Authority Key Identifier:
keyid:84:B0:CA:C8:38:F2:82:E0:42:94:8F:9D:2B:2C:D5:75:4D:2E:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLDKyDjyguBClI-dKyzVdU0ujEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/mq2WK1BWz4a2Yo_KhLxZIcR7xCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/e9487f-fdc7-40a7-8a67-1be69ca393ba/1/hLDKyDjyguBClI-dKyzVdU0ujEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.143.232.0/21
185.133.100.0/22
213.226.208.0/20
IPv6:
2a00:5100::/32
Signature Algorithm: sha256WithRSAEncryption
68:9d:02:89:cd:b4:c4:d0:bf:99:38:8e:45:66:00:af:46:21:
d7:18:d5:22:ed:1e:e2:b2:2f:42:ab:21:9a:b3:32:cd:f8:a9:
79:cf:bc:bf:f9:d7:5d:ea:8b:4a:b6:5e:2b:ad:91:bd:b6:ca:
c8:ac:f1:3c:5e:e6:fd:76:fa:0a:e4:19:a7:d4:20:50:56:3b:
83:be:5d:d9:f9:f3:01:e3:80:bb:09:e7:df:ad:b1:f2:29:db:
57:33:82:6c:9d:ae:a3:6a:fe:d8:82:48:61:fc:e2:71:90:9e:
de:87:11:27:76:06:23:6c:13:e7:ef:f2:ac:46:66:82:a4:6b:
9f:a2:27:5a:23:ae:d9:41:e6:83:b8:84:15:73:2d:01:8d:f2:
42:df:11:ce:5f:55:2f:79:21:4e:0a:e8:a6:d7:10:a3:8a:f4:
23:72:43:04:80:04:58:d5:29:1a:6a:5e:85:c0:f4:e4:9f:c7:
48:6a:41:d7:c7:b8:b1:e0:a0:63:6e:23:15:91:54:2a:d0:ca:
e4:4a:d6:27:98:dc:b9:84:b2:4a:fe:3b:ab:3c:c3:94:66:dd:
d7:20:b0:b5:d7:64:44:54:bd:af:27:08:50:94:d6:b8:7e:08:
fc:9f:fe:87:22:ee:f2:6b:11:2a:91:cb:4f:43:6e:0d:32:d9:
d9:2a:73:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:53:35 2025 by rpki-client