Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/qoE5vRhVOR8bmi1fj4V8xsxJVVU.roa
File: qoE5vRhVOR8bmi1fj4V8xsxJVVU.roa (raw, json)
Hash identifier: OxgWBiFLszYpiPd1r9svRtI7919M0gEvC+i3wC1jk18=
Subject key identifier: AA:81:39:BD:18:55:39:1F:1B:9A:2D:5F:8F:85:7C:C6:CC:49:55:55
Certificate issuer: /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Certificate serial: 019422FC4D7496918CC095EDC19F6638A111
Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/qoE5vRhVOR8bmi1fj4V8xsxJVVU.roa
Signing time: Wed 01 Jan 2025 17:49:07 +0000
ROA not before: Wed 01 Jan 2025 17:49:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206774
IP address blocks: 185.176.246.0/23 maxlen: 23
2a0a:2784::/32 maxlen: 32
2a0a:2787::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:4d:74:96:91:8c:c0:95:ed:c1:9f:66:38:a1:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Validity
Not Before: Jan 1 17:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa8139bd1855391f1b9a2d5f8f857cc6cc495555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3b:2c:2e:c4:c4:44:cb:3d:75:ba:51:0f:dc:
0e:73:4b:21:b3:c6:06:d0:95:ca:3e:4e:fc:f7:e4:
69:78:b7:1e:92:40:af:6c:9d:84:f8:a6:ae:74:53:
5e:c4:f0:79:00:46:4e:88:10:6c:71:7a:fc:c4:86:
f2:62:fc:35:a7:59:54:5b:a2:14:20:9c:13:c7:c7:
ec:28:f7:d3:7d:53:44:cb:be:31:14:b3:1b:6b:b7:
c7:0f:00:aa:65:47:00:f6:28:40:26:13:ff:86:69:
e7:90:bc:a2:58:4f:13:fc:eb:9a:88:b4:18:ef:61:
92:62:62:be:23:94:de:5e:42:ad:bd:6e:5d:a9:7f:
d4:8a:80:6d:00:da:74:32:07:cb:39:85:b6:2c:8c:
ec:f3:da:12:88:91:e4:e9:4e:ae:9d:01:bb:9f:ed:
78:53:35:c8:10:77:b2:67:58:f4:dd:63:d6:97:81:
31:3f:c1:e1:e6:a7:72:3c:75:b7:d2:50:58:67:28:
c2:be:1a:8b:82:41:66:ed:c6:ea:a8:e5:a7:ab:35:
7d:8d:39:7a:05:27:e6:0f:32:f9:b5:c0:55:d4:58:
ee:5f:d7:c3:ee:9e:f5:d3:2d:50:a6:9a:ec:57:68:
31:c9:72:26:2c:c4:32:88:a3:63:09:e0:ee:f0:89:
bb:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:81:39:BD:18:55:39:1F:1B:9A:2D:5F:8F:85:7C:C6:CC:49:55:55
X509v3 Authority Key Identifier:
keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/qoE5vRhVOR8bmi1fj4V8xsxJVVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.176.246.0/23
IPv6:
2a0a:2784::/32
2a0a:2787::/32
Signature Algorithm: sha256WithRSAEncryption
62:57:c7:91:6c:05:98:63:4c:6d:ec:87:aa:0b:82:a4:25:74:
79:f8:11:85:ab:9b:4a:12:02:b3:9d:04:c3:c9:c3:9d:f5:fa:
39:28:29:aa:ac:e0:44:00:85:71:ae:5a:34:51:87:4f:72:4b:
b2:a9:49:af:8c:7a:5d:07:23:76:cb:ac:7a:03:77:a7:30:93:
05:b9:a0:b3:5f:68:b4:4d:ce:6e:05:8f:e6:46:3b:06:0c:03:
77:aa:cf:36:80:06:8a:1f:33:46:06:03:1a:b9:03:80:e8:a3:
29:cf:55:87:ad:bf:30:98:56:9a:f6:9c:e4:f6:21:ef:90:f9:
d0:9c:aa:fc:c9:81:2b:2d:57:fd:c7:18:29:b1:c4:36:49:88:
c8:59:0f:2e:53:5b:28:b0:60:f3:0d:0f:6a:57:f3:27:9b:1c:
1d:37:56:c2:80:9b:2b:98:d1:df:dd:0c:e6:df:00:51:96:06:
d5:3a:b8:db:ed:ee:55:4e:e8:b0:3d:4f:6e:76:d3:f8:a4:9e:
01:89:22:d8:c4:6d:d2:38:aa:6f:e0:c5:b5:e2:df:ec:e2:05:
32:e0:2a:10:c1:da:d7:a5:35:15:b6:e9:87:87:37:90:cc:bc:
30:8d:d7:2e:0c:89:bf:86:fb:72:fd:da:da:df:0e:73:82:ac:
bf:e7:78:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:03:34 2025 by rpki-client