Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/mqF2RjdFA6s0KgMfGsBOR0Qb9yM.roa
File: mqF2RjdFA6s0KgMfGsBOR0Qb9yM.roa (raw, json)
Hash identifier: yxhv05cM0V5vU8+TVhDLNuomPpK2FpyHDnTeqXp6tfc=
Subject key identifier: 9A:A1:76:46:37:45:03:AB:34:2A:03:1F:1A:C0:4E:47:44:1B:F7:23
Certificate issuer: /CN=64757185472f16d53eeb68a140e3513fa31c31d8
Certificate serial: 01941F8C998ED2F64862BC85846613D0B008
Authority key identifier: 64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/mqF2RjdFA6s0KgMfGsBOR0Qb9yM.roa
Signing time: Wed 01 Jan 2025 01:48:15 +0000
ROA not before: Wed 01 Jan 2025 01:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39010
IP address blocks: 185.70.225.0/24 maxlen: 24
185.70.226.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:99:8e:d2:f6:48:62:bc:85:84:66:13:d0:b0:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64757185472f16d53eeb68a140e3513fa31c31d8
Validity
Not Before: Jan 1 01:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9aa17646374503ab342a031f1ac04e47441bf723
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:fb:95:07:6d:c5:10:91:d2:7d:93:3b:d1:07:
19:86:b8:ee:8f:4a:ff:29:32:81:67:7e:86:25:9d:
8e:5b:39:cd:62:e0:12:02:8a:ca:0b:72:25:ce:65:
07:df:7c:3f:f9:e6:fa:75:17:67:aa:35:c5:fb:97:
4b:d7:c1:f9:5a:5f:8f:7d:db:83:87:42:d5:7b:03:
4d:13:f9:69:07:2e:38:0a:a5:80:9e:c6:f1:0a:17:
28:e9:6e:c7:e1:d1:dc:3f:53:58:2b:59:53:a7:ea:
92:91:85:60:82:c8:e9:17:23:41:38:6e:1f:51:76:
2a:2f:dd:c4:8f:27:7c:cc:ab:1b:ce:53:8c:7c:34:
52:22:23:95:d6:3e:b4:3e:3d:92:86:c7:aa:39:b7:
32:36:51:24:d3:7a:80:f8:d2:21:0a:58:9d:12:03:
58:d4:5e:4e:f1:06:7a:5b:ef:4a:a7:c1:04:61:31:
f0:2f:33:d1:be:4f:e7:97:1d:bb:68:47:ee:64:18:
a9:ae:c6:64:a2:9c:07:39:fc:78:b4:b3:8f:6e:99:
ef:c2:3d:d5:e6:7f:38:af:d4:26:06:8f:29:f5:a1:
d8:51:f7:d2:91:11:01:ff:39:d4:c7:4c:03:cb:67:
4b:59:40:cb:fc:80:84:1b:d4:7f:df:35:c2:7e:41:
cd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:A1:76:46:37:45:03:AB:34:2A:03:1F:1A:C0:4E:47:44:1B:F7:23
X509v3 Authority Key Identifier:
keyid:64:75:71:85:47:2F:16:D5:3E:EB:68:A1:40:E3:51:3F:A3:1C:31:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZHVxhUcvFtU-62ihQONRP6McMdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/mqF2RjdFA6s0KgMfGsBOR0Qb9yM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/121447-d2c8-4ca8-96c7-81d10073dee4/1/ZHVxhUcvFtU-62ihQONRP6McMdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.70.225.0-185.70.226.255
Signature Algorithm: sha256WithRSAEncryption
4e:fc:d9:72:9f:8d:8c:94:92:60:ce:2d:36:30:71:a8:79:ed:
78:92:76:41:e9:39:86:0e:c3:88:70:12:32:51:10:9d:ca:2a:
b8:e1:e3:ca:e0:c5:64:90:85:2e:54:1e:93:be:c8:43:d1:c7:
19:21:c1:c7:00:6b:e2:5a:a9:e1:6d:52:32:c9:b7:44:e3:47:
9e:9a:73:bf:24:9c:e9:63:d8:f9:49:10:bb:3a:c4:82:4d:5d:
8b:51:49:dd:f8:76:da:0c:35:4e:94:0c:4e:e2:61:6a:7d:dc:
2d:25:5a:6f:37:1e:67:81:99:0b:3e:1f:a0:a3:d7:ae:0f:b8:
55:33:68:c9:1b:b5:77:4b:d5:51:40:81:f4:8c:48:c8:ae:4e:
a2:9c:74:57:da:0c:25:2d:3b:c5:4b:bd:97:72:40:61:18:72:
f5:25:7f:9b:36:2a:bc:14:7d:80:83:a8:5c:98:0c:3e:a9:df:
6b:d9:f3:cd:df:20:c9:dc:b0:c3:73:de:1c:6e:bd:05:98:f8:
48:d0:a5:d9:8e:f6:19:c7:1e:aa:d1:ea:1c:a8:38:4d:2e:cf:
5c:97:38:d6:aa:96:59:ff:71:a3:13:85:02:b9:0b:da:66:4a:
73:7b:49:a7:54:68:7d:e2:42:6d:b0:bb:31:35:56:bb:21:bd:
11:53:55:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:08:12 2025 by rpki-client