Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/SCQLL9FrRwZS3_4QAQMFwFWEnMU.roa
File: SCQLL9FrRwZS3_4QAQMFwFWEnMU.roa (raw, json)
Hash identifier: hA+a1SinlIIzAIvLt/cO3Kjqq6i5Xzb+bDE4vvr8VPM=
Subject key identifier: 48:24:0B:2F:D1:6B:47:06:52:DF:FE:10:01:03:05:C0:55:84:9C:C5
Certificate issuer: /CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Certificate serial: 01942067CF99D8763471E07F73E19982C502
Authority key identifier: 71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/SCQLL9FrRwZS3_4QAQMFwFWEnMU.roa
Signing time: Wed 01 Jan 2025 05:47:41 +0000
ROA not before: Wed 01 Jan 2025 05:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60129
IP address blocks: 185.56.24.0/22 maxlen: 22
185.249.240.0/22 maxlen: 22
2a02:4fe0::/32 maxlen: 32
2a0b:4780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:cf:99:d8:76:34:71:e0:7f:73:e1:99:82:c5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7178700f1619ec1cd34d9700392153ec4b6231fc
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=48240b2fd16b470652dffe10010305c055849cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:4c:8d:4e:75:02:32:7d:b5:3d:d1:18:c3:
00:e1:c4:44:60:e4:f7:6b:04:b2:06:9c:eb:6e:d2:
d1:de:8f:3f:88:e4:20:d6:7b:d6:0c:78:29:39:d6:
8b:e0:8b:f9:0d:8c:5d:cc:3c:5b:15:03:46:dc:e8:
c8:be:8b:13:6c:6d:4b:e5:2a:61:d1:83:0d:81:f9:
d2:8f:8e:29:ae:22:bb:d7:a6:61:28:aa:70:90:dc:
6f:84:88:5f:dc:4e:4e:42:ca:3f:90:86:54:bb:93:
63:2d:76:5e:7e:92:33:1e:1d:06:f0:0a:15:cf:eb:
e6:93:ba:e2:e4:7e:44:c0:57:c7:13:a1:44:78:e3:
47:6b:eb:00:65:0d:68:49:de:41:86:e2:25:83:31:
36:65:83:1c:c0:1a:18:a4:6b:83:7d:a0:1a:02:34:
18:8b:82:a3:f2:fc:f0:0c:de:e9:1d:7b:90:ac:27:
60:61:50:32:a7:81:84:23:cb:3a:01:60:73:84:e6:
1e:5e:7b:86:76:9f:a0:03:e8:99:fe:31:ed:11:13:
c7:e2:e5:b1:a9:2e:7c:b8:fe:7c:00:0a:38:2d:b3:
c9:77:c5:1b:f6:b6:aa:47:e4:b3:e1:af:eb:64:7f:
97:b8:a9:68:52:a6:e4:db:18:85:77:43:12:6f:9c:
75:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:24:0B:2F:D1:6B:47:06:52:DF:FE:10:01:03:05:C0:55:84:9C:C5
X509v3 Authority Key Identifier:
keyid:71:78:70:0F:16:19:EC:1C:D3:4D:97:00:39:21:53:EC:4B:62:31:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/SCQLL9FrRwZS3_4QAQMFwFWEnMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b585ac-8618-415a-87ec-d1d8db148ec2/1/cXhwDxYZ7BzTTZcAOSFT7EtiMfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.24.0/22
185.249.240.0/22
IPv6:
2a02:4fe0::/32
2a0b:4780::/29
Signature Algorithm: sha256WithRSAEncryption
1e:95:70:33:1d:5f:1f:a1:e8:9d:18:62:6f:2e:eb:74:06:78:
1d:f9:0f:3e:28:69:0f:b9:24:54:bb:20:d3:56:f2:d0:93:63:
74:58:bb:01:c5:b5:f3:be:f6:e7:48:68:89:2f:1d:ed:cb:0d:
50:fa:15:a8:f9:df:36:e7:18:2d:9e:15:4d:fd:71:e6:90:a9:
1b:5d:3e:93:6d:52:d0:db:f6:bd:ba:72:a1:8e:0f:8d:ac:23:
59:54:11:d2:4a:46:35:25:e5:a1:9f:ba:98:6d:31:59:be:b3:
be:ca:f9:ce:6e:7b:31:da:2a:89:77:97:a5:0d:4e:d4:1c:0a:
21:38:fd:2c:e3:7b:bc:da:bd:21:ed:ef:11:36:dd:ac:aa:6c:
2d:c0:9b:00:21:64:3a:46:4b:d8:62:ae:78:9c:68:79:71:4b:
f4:99:99:4d:a1:9d:ae:88:45:d7:34:ab:12:09:ec:ee:6e:48:
c5:99:fc:2d:84:00:66:02:ed:f5:ce:cc:e0:ce:ac:b9:be:ca:
45:e0:ad:42:cc:e9:86:b1:9b:07:0f:e0:48:72:af:40:de:d8:
85:2e:18:5b:92:a2:dc:26:87:8d:95:a5:04:29:4c:2a:d6:46:
fb:6a:7d:fc:e1:b2:46:d0:8e:3a:14:46:64:48:f1:62:03:95:
95:14:1c:92
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZQgZ8+Z2HY0ceB/c+GZgsUCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNzg3MDBmMTYxOWVjMWNkMzRkOTcwMDM5MjE1M2VjNGI2
MjMxZmMwHhcNMjUwMTAxMDU0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODI0MGIyZmQxNmI0NzA2NTJkZmZlMTAwMTAzMDVjMDU1ODQ5Y2M1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5ZMjU51AjJ9tT3RGMMA4cREYOT3
awSyBpzrbtLR3o8/iOQg1nvWDHgpOdaL4Iv5DYxdzDxbFQNG3OjIvosTbG1L5Sph
0YMNgfnSj44priK716ZhKKpwkNxvhIhf3E5OQso/kIZUu5NjLXZefpIzHh0G8AoV
z+vmk7ri5H5EwFfHE6FEeONHa+sAZQ1oSd5BhuIlgzE2ZYMcwBoYpGuDfaAaAjQY
i4Kj8vzwDN7pHXuQrCdgYVAyp4GEI8s6AWBzhOYeXnuGdp+gA+iZ/jHtERPH4uWx
qS58uP58AAo4LbPJd8Ub9raqR+Sz4a/rZH+XuKloUqbk2xiFd0MSb5x1aQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFEgkCy/Ra0cGUt/+EAEDBcBVhJzFMB8GA1UdIwQY
MBaAFHF4cA8WGewc002XADkhU+xLYjH8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iNTg1YWMtODYxOC00MTVhLTg3ZWMt
ZDFkOGRiMTQ4ZWMyLzEvU0NRTEw5RnJSd1pTM180UUFRTUZ3RldFbk1VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iNTg1YWMtODYxOC00MTVhLTg3ZWMtZDFkOGRiMTQ4ZWMy
LzEvY1hod0R4WVo3QnpUVFpjQU9TRlQ3RXRpTWZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQCuTgYAwQC
ufnwMBQEAgACMA4DBQAqAk/gAwUDKgtHgDANBgkqhkiG9w0BAQsFAAOCAQEAHpVw
Mx1fH6HonRhiby7rdAZ4HfkPPihpD7kkVLsg01by0JNjdFi7AcW1877250hoiS8d
7csNUPoVqPnfNucYLZ4VTf1x5pCpG10+k21S0Nv2vbpyoY4PjawjWVQR0kpGNSXl
oZ+6mG0xWb6zvsr5zm57MdoqiXeXpQ1O1BwKITj9LON7vNq9Ie3vETbdrKpsLcCb
ACFkOkZL2GKueJxoeXFL9JmZTaGdrohF1zSrEgns7m5IxZn8LYQAZgLt9c7M4M6s
ub7KReCtQszphrGbBw/gSHKvQN7YhS4YW5Ki3CaHjZWlBClMKtZG+2p9/OGyRtCO
OhRGZEjxYgOVlRQckg==
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:49:00 2025 by rpki-client