Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Q8bzxqfL9riQ0r4sLaG5_WA3KVA.roa
File: Q8bzxqfL9riQ0r4sLaG5_WA3KVA.roa (raw, json)
Hash identifier: FMoM8vmAiJoQiCyS9ONch1ThZ7gMc02jSpD8vyuSSiM=
Subject key identifier: 43:C6:F3:C6:A7:CB:F6:B8:90:D2:BE:2C:2D:A1:B9:FD:60:37:29:50
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01942747325AA246CB9C6D9FCC3BC45DC94E
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Q8bzxqfL9riQ0r4sLaG5_WA3KVA.roa
Signing time: Thu 02 Jan 2025 13:49:24 +0000
ROA not before: Thu 02 Jan 2025 13:49:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211327
IP address blocks: 185.249.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:32:5a:a2:46:cb:9c:6d:9f:cc:3b:c4:5d:c9:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 2 13:49:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43c6f3c6a7cbf6b890d2be2c2da1b9fd60372950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e9:cd:49:8c:3b:c1:bd:e7:57:06:1e:c8:ea:
ab:32:42:84:c3:70:af:28:ea:70:fe:d8:12:f7:7e:
88:4f:a7:99:bf:68:27:56:3c:9c:6d:99:5a:4a:9d:
43:38:c0:bf:b2:fa:97:41:44:65:f4:dd:f7:6b:ee:
a5:22:eb:04:e0:bd:5d:a3:a2:ae:9f:04:a8:fc:cf:
6d:30:d9:46:fd:98:f9:48:79:65:80:04:2e:79:3c:
94:d0:ce:81:73:55:48:3c:9c:04:2d:ed:69:3f:9c:
11:11:55:d7:b0:38:f8:13:af:ef:74:cd:b7:19:b2:
89:7b:61:e2:3e:30:e3:50:34:bd:8d:7c:50:3a:a1:
84:b7:c2:74:ed:9e:80:eb:09:e6:4e:1f:be:4c:e3:
69:0c:b5:aa:e4:7d:d7:63:c0:00:2a:a1:c7:d5:0d:
3f:9a:2a:64:b9:e2:61:9d:77:8c:f7:2a:67:79:2e:
90:8b:e3:7f:ec:9e:b1:fc:7a:79:9e:43:23:14:49:
90:07:14:56:78:fd:d0:7e:c4:e6:56:56:55:92:e4:
66:9f:55:be:31:27:13:fc:fd:1d:95:b2:2f:23:e3:
14:72:93:5b:01:2a:ae:08:ad:f4:04:79:71:66:e7:
c8:a0:f6:44:27:7b:d7:b4:52:64:e2:b5:18:be:b7:
0d:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:C6:F3:C6:A7:CB:F6:B8:90:D2:BE:2C:2D:A1:B9:FD:60:37:29:50
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/Q8bzxqfL9riQ0r4sLaG5_WA3KVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.202.0/24
Signature Algorithm: sha256WithRSAEncryption
52:96:43:0e:1f:31:1d:c2:93:d6:bc:54:79:5c:3a:dc:3f:75:
de:af:16:8e:45:ea:f8:d4:99:6c:38:64:47:70:38:d1:ac:71:
d6:ad:b7:fc:46:23:84:a4:c5:47:eb:2f:32:80:bb:f0:7a:2a:
f5:5e:4f:f7:2b:88:e0:ce:56:6d:2f:62:3c:ab:bc:d6:f9:5a:
75:ea:46:3b:a0:85:4a:38:be:aa:9e:37:48:18:9d:4f:45:3e:
f6:e4:b0:fe:8c:74:17:cf:9c:d4:3f:9a:63:1e:79:f6:91:29:
22:49:c0:08:61:7c:59:24:2d:6c:32:3a:fe:fb:ed:6f:83:a1:
12:1e:4f:65:2c:cb:44:33:86:bb:65:b3:79:45:8e:f8:6c:ae:
c9:1d:80:3f:78:4d:77:83:08:8b:61:e0:57:58:b1:98:55:55:
2f:5d:1b:bd:69:b9:d5:47:79:db:a2:43:36:3e:2c:56:08:c6:
e9:ed:d0:90:1b:6b:b6:7e:ce:53:c9:44:7e:01:ce:b9:31:d0:
1f:0b:e3:4f:b1:14:10:fa:51:ad:99:35:77:a6:4d:81:bc:d7:
7c:87:64:7c:a5:cd:95:cc:77:ac:71:5a:b3:ba:b9:67:09:88:
0b:86:58:d3:4d:ab:7d:82:b0:b2:dd:f2:d7:a2:a3:f7:4b:19:
47:c3:22:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:16:22 2025 by rpki-client