Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/qwVGjqL0m5G9ustOpPZ5FS2RFbA.roa
File: qwVGjqL0m5G9ustOpPZ5FS2RFbA.roa (raw, json)
Hash identifier: QQptDB1uT/9FFhotqk1bN1Jx0M0NJncKcjU5av3+7no=
Subject key identifier: AB:05:46:8E:A2:F4:9B:91:BD:BA:CB:4E:A4:F6:79:15:2D:91:15:B0
Certificate issuer: /CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Certificate serial: 01942369468181FFD523A72D782316E124E8
Authority key identifier: 8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/qwVGjqL0m5G9ustOpPZ5FS2RFbA.roa
Signing time: Wed 01 Jan 2025 19:48:09 +0000
ROA not before: Wed 01 Jan 2025 19:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203739
IP address blocks: 185.255.68.0/24 maxlen: 24
185.255.69.0/24 maxlen: 24
185.255.70.0/24 maxlen: 24
185.255.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:46:81:81:ff:d5:23:a7:2d:78:23:16:e1:24:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ec33b8e1356fccfc83466eed8a865512a7d00f1
Validity
Not Before: Jan 1 19:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab05468ea2f49b91bdbacb4ea4f679152d9115b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:e5:fa:23:64:5d:56:12:f2:da:82:6c:8f:26:
00:ee:99:3e:9d:53:8f:27:7c:c3:2c:1e:7a:fa:4d:
66:05:85:7b:a9:b6:0e:25:ce:5a:49:74:27:1a:33:
e6:b9:91:46:9d:f6:62:2b:71:63:dd:45:0a:53:79:
c7:ad:99:b6:be:62:d2:28:8a:dc:34:fd:0e:33:81:
f9:cf:bd:a6:75:7a:bb:b1:85:2a:59:12:44:4f:62:
dc:6e:3a:63:7c:44:44:88:ac:b0:f6:b5:27:28:ac:
e6:c0:ef:4d:ed:75:2a:ba:36:f2:5c:67:b4:64:f0:
26:dc:c3:1d:8b:91:2b:06:ba:9b:ee:c9:b7:0c:40:
87:fc:c5:53:53:77:65:25:3b:1a:18:7e:77:2a:f6:
a0:98:88:e5:65:b7:e9:b9:1a:a8:59:90:1a:dc:15:
45:95:a1:07:91:7f:bb:cb:f3:66:31:54:9b:a3:43:
e4:ee:e2:09:4f:08:74:01:b7:24:12:b0:33:c8:20:
72:c1:25:46:c9:f6:2f:02:23:c5:2e:a7:53:1d:62:
3c:9a:59:f8:8b:a1:52:64:7b:1d:ae:90:9a:87:f6:
09:0a:bf:ce:77:08:5b:84:63:c5:85:b2:85:b5:41:
69:f3:84:df:d6:2a:4f:41:29:53:48:e1:db:8b:fa:
62:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:05:46:8E:A2:F4:9B:91:BD:BA:CB:4E:A4:F6:79:15:2D:91:15:B0
X509v3 Authority Key Identifier:
keyid:8E:C3:3B:8E:13:56:FC:CF:C8:34:66:EE:D8:A8:65:51:2A:7D:00:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jsM7jhNW_M_INGbu2KhlUSp9APE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/qwVGjqL0m5G9ustOpPZ5FS2RFbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/b72806-49e8-4112-a235-1c1e8532d5b0/1/jsM7jhNW_M_INGbu2KhlUSp9APE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.68.0/22
Signature Algorithm: sha256WithRSAEncryption
45:b7:30:79:dc:26:54:d5:ec:ef:ef:f9:75:2b:fe:f0:1e:0c:
a2:90:1c:b6:86:3f:38:81:8a:df:53:e2:6a:73:76:93:93:30:
82:5a:34:52:5c:ba:bc:e0:01:08:3c:ba:8b:3d:c4:5f:d7:fb:
79:c7:30:0f:25:c5:c1:b1:c7:1c:79:ae:11:04:ae:ee:b4:9b:
15:e6:da:0b:ae:25:e7:10:91:6a:bd:78:78:18:2e:71:9a:3f:
d2:60:2a:6e:0b:4b:41:53:4f:56:ef:76:d5:af:e9:dc:d9:0d:
92:4c:a3:22:7a:5e:98:cc:ac:b4:3f:bd:ff:02:ec:21:28:ae:
05:5c:18:ad:3d:e9:c4:78:83:2e:8c:3c:f1:bd:da:81:3f:66:
05:e0:09:74:d3:c4:52:31:5c:af:12:7a:8e:55:58:d1:c1:6d:
6d:0c:84:1b:df:9f:68:da:6f:37:b5:72:c0:48:4c:c8:35:1c:
df:bb:3f:f8:a8:33:6b:c7:f6:46:9b:5c:54:8e:59:92:ac:75:
b4:46:8a:93:65:bb:ca:11:a8:21:e5:16:bf:43:55:c6:e7:20:
d0:05:f9:3b:53:64:f8:23:d9:df:a0:74:be:91:4f:c2:b6:c3:
53:f3:8d:6d:5f:02:da:e5:fa:4e:a3:f3:a8:dd:89:98:39:3b:
bf:34:6e:c8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjaUaBgf/VI6cteCMW4SToMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYzMzYjhlMTM1NmZjY2ZjODM0NjZlZWQ4YTg2NTUxMmE3
ZDAwZjEwHhcNMjUwMTAxMTk0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjA1NDY4ZWEyZjQ5YjkxYmRiYWNiNGVhNGY2NzkxNTJkOTExNWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxOX6I2RdVhLy2oJsjyYA7pk+nVOP
J3zDLB56+k1mBYV7qbYOJc5aSXQnGjPmuZFGnfZiK3Fj3UUKU3nHrZm2vmLSKIrc
NP0OM4H5z72mdXq7sYUqWRJET2LcbjpjfEREiKyw9rUnKKzmwO9N7XUqujbyXGe0
ZPAm3MMdi5ErBrqb7sm3DECH/MVTU3dlJTsaGH53KvagmIjlZbfpuRqoWZAa3BVF
laEHkX+7y/NmMVSbo0Pk7uIJTwh0AbckErAzyCBywSVGyfYvAiPFLqdTHWI8mln4
i6FSZHsdrpCah/YJCr/OdwhbhGPFhbKFtUFp84Tf1ipPQSlTSOHbi/piOwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKsFRo6i9JuRvbrLTqT2eRUtkRWwMB8GA1UdIwQY
MBaAFI7DO44TVvzPyDRm7tioZVEqfQDxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanNNN2poTldfTV9JTkdidTJLaGxVU3A5QVBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi9iNzI4MDYtNDllOC00MTEyLWEyMzUt
MWMxZTg1MzJkNWIwLzEvcXdWR2pxTDBtNUc5dXN0T3BQWjVGUzJSRmJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi9iNzI4MDYtNDllOC00MTEyLWEyMzUtMWMxZTg1MzJkNWIw
LzEvanNNN2poTldfTV9JTkdidTJLaGxVU3A5QVBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuf9EMA0G
CSqGSIb3DQEBCwUAA4IBAQBFtzB53CZU1ezv7/l1K/7wHgyikBy2hj84gYrfU+Jq
c3aTkzCCWjRSXLq84AEIPLqLPcRf1/t5xzAPJcXBscccea4RBK7utJsV5toLriXn
EJFqvXh4GC5xmj/SYCpuC0tBU09W73bVr+nc2Q2STKMiel6YzKy0P73/AuwhKK4F
XBitPenEeIMujDzxvdqBP2YF4Al008RSMVyvEnqOVVjRwW1tDIQb359o2m83tXLA
SEzINRzfuz/4qDNrx/ZGm1xUjlmSrHW0RoqTZbvKEagh5Ra/Q1XG5yDQBfk7U2T4
I9nfoHS+kU/CtsNT841tXwLa5fpOo/Oo3YmYOTu/NG7I
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:30:17 2025 by rpki-client