Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/Q3zBBX-aYmQxouSjQDIx6WeyYB8.roa
File: Q3zBBX-aYmQxouSjQDIx6WeyYB8.roa (raw, json)
Hash identifier: V4ZjRVPUW9lk8qotnPpjhgvHeApYlc70WdpbVZxrAPo=
Subject key identifier: 43:7C:C1:05:7F:9A:62:64:31:A2:E4:A3:40:32:31:E9:67:B2:60:1F
Certificate issuer: /CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
Certificate serial: 01941FFA209C9EF3C15E712C730F6BFEE7A0
Authority key identifier: 1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/Q3zBBX-aYmQxouSjQDIx6WeyYB8.roa
Signing time: Wed 01 Jan 2025 03:47:53 +0000
ROA not before: Wed 01 Jan 2025 03:47:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206673
IP address blocks: 185.174.128.0/22 maxlen: 24
185.185.148.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:20:9c:9e:f3:c1:5e:71:2c:73:0f:6b:fe:e7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
Validity
Not Before: Jan 1 03:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=437cc1057f9a626431a2e4a3403231e967b2601f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7f:7f:48:fe:e4:7f:dc:14:f9:74:50:60:af:
1f:b6:e9:e5:d6:64:26:ac:76:7a:7b:24:ea:44:4a:
4c:ec:33:53:ec:88:00:98:b1:47:16:f9:81:9d:4e:
bf:1d:5d:52:ef:67:58:f7:4a:4d:ef:73:55:23:6e:
8e:12:b5:09:86:20:46:c4:4a:ac:e7:4f:29:3a:f4:
8a:ee:65:b0:15:ac:d2:e3:45:af:69:d8:54:c1:6d:
2c:62:85:48:31:84:df:a0:4d:0b:d8:a8:da:77:cb:
44:3d:3b:1e:de:14:33:e2:ba:9b:e8:eb:48:85:5c:
6d:80:f2:4f:90:8a:20:a9:71:ad:a8:3d:eb:c3:1e:
8d:36:6d:2b:82:07:ec:1b:8e:2d:c8:6a:95:29:4e:
42:83:8a:c6:47:f2:69:a1:1c:78:16:ec:30:91:b5:
2c:79:64:84:ec:9c:3a:ef:09:1c:df:cd:d8:24:05:
e3:6b:1d:27:5d:74:52:5e:22:9a:11:ce:e1:d2:9b:
fb:3a:ff:e9:37:32:49:0a:a8:9d:ec:98:c0:3e:a9:
5d:0f:de:f7:ca:76:16:4f:f7:b5:01:ab:e5:95:e1:
f5:24:2a:f7:09:73:cd:fb:3d:94:18:ba:ec:c6:b3:
21:b6:78:54:c0:e8:8b:eb:a4:0f:27:dc:c0:bf:80:
f8:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7C:C1:05:7F:9A:62:64:31:A2:E4:A3:40:32:31:E9:67:B2:60:1F
X509v3 Authority Key Identifier:
keyid:1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/Q3zBBX-aYmQxouSjQDIx6WeyYB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.128.0/22
185.185.148.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:5f:a2:5e:38:f8:26:31:19:36:7b:f8:83:1d:47:ba:69:f6:
65:6c:d2:3d:8e:fa:94:dd:02:67:53:3a:df:bb:b1:0d:6b:c2:
c0:8e:3d:f8:6a:5e:44:48:fc:e1:78:b9:f6:b3:42:71:d8:67:
5d:f8:f7:dc:c4:d1:0d:9e:74:a1:c6:1e:3c:5f:5d:af:d9:43:
ea:38:7a:fd:f4:2c:63:50:40:7e:eb:f1:62:85:1d:b7:1f:87:
3a:6f:94:fd:a6:9b:53:fc:8c:ca:2c:1b:d1:85:3d:7b:6e:2d:
22:da:87:9b:fd:5e:4a:90:c4:87:14:5f:50:3a:fa:8f:e8:d2:
f4:d7:b4:b7:0c:61:3c:04:ff:4f:38:a2:1a:db:5a:03:5b:86:
11:1e:80:16:41:c5:5a:ed:67:14:9f:6f:10:1f:cd:39:e7:0b:
94:d6:41:17:fd:04:cf:ee:9f:db:4b:54:ed:8b:76:d2:68:3f:
5b:1b:2a:0b:e5:95:ac:21:c0:21:72:67:50:0b:51:58:15:40:
b6:b5:17:15:2e:13:78:3f:2e:96:f6:37:f1:14:f2:a8:ba:eb:
1e:5d:19:1c:2b:f9:f6:5c:64:ab:e1:67:64:ba:6f:38:f4:1e:
1c:37:b3:d4:17:2c:e8:49:c3:92:c5:7c:ad:27:d1:0b:44:f8:
44:30:56:76
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQf+iCcnvPBXnEscw9r/uegMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhNDIxYWNlNDZjNWRkNThhMjlkNDZjZDkxZmIyOGZjMzlj
NTZmZWUwHhcNMjUwMTAxMDM0NzUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzdjYzEwNTdmOWE2MjY0MzFhMmU0YTM0MDMyMzFlOTY3YjI2MDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwX9/SP7kf9wU+XRQYK8ftunl1mQm
rHZ6eyTqREpM7DNT7IgAmLFHFvmBnU6/HV1S72dY90pN73NVI26OErUJhiBGxEqs
508pOvSK7mWwFazS40WvadhUwW0sYoVIMYTfoE0L2Kjad8tEPTse3hQz4rqb6OtI
hVxtgPJPkIogqXGtqD3rwx6NNm0rggfsG44tyGqVKU5Cg4rGR/JpoRx4FuwwkbUs
eWSE7Jw67wkc383YJAXjax0nXXRSXiKaEc7h0pv7Ov/pNzJJCqid7JjAPqldD973
ynYWT/e1AavlleH1JCr3CXPN+z2UGLrsxrMhtnhUwOiL66QPJ9zAv4D4aQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEN8wQV/mmJkMaLko0AyMelnsmAfMB8GA1UdIwQY
MBaAFBpCGs5Gxd1Yop1GzZH7KPw5xW/uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR2tJYXprYkYzVmlpblViTmtmc29fRG5GYi00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi85YzQ4YTAtZDNjZC00NGIzLTlhZTYt
N2RmZmNlMWQ2ZTJkLzEvUTN6QkJYLWFZbVF4b3VTalFESXg2V2V5WUI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi85YzQ4YTAtZDNjZC00NGIzLTlhZTYtN2RmZmNlMWQ2ZTJk
LzEvR2tJYXprYkYzVmlpblViTmtmc29fRG5GYi00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCua6AAwQC
ubmUMA0GCSqGSIb3DQEBCwUAA4IBAQBrX6JeOPgmMRk2e/iDHUe6afZlbNI9jvqU
3QJnUzrfu7ENa8LAjj34al5ESPzheLn2s0Jx2Gdd+PfcxNENnnShxh48X12v2UPq
OHr99CxjUEB+6/FihR23H4c6b5T9pptT/IzKLBvRhT17bi0i2oeb/V5KkMSHFF9Q
OvqP6NL017S3DGE8BP9POKIa21oDW4YRHoAWQcVa7WcUn28QH8055wuU1kEX/QTP
7p/bS1Tti3bSaD9bGyoL5ZWsIcAhcmdQC1FYFUC2tRcVLhN4Py6W9jfxFPKouuse
XRkcK/n2XGSr4Wdkum849B4cN7PUFyzoScOSxXytJ9ELRPhEMFZ2
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:31:42 2025 by rpki-client