Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/qLyAKu_2PDAXrscrHieNXa-2Fks.roa
File: qLyAKu_2PDAXrscrHieNXa-2Fks.roa (raw, json)
Hash identifier: sx29e0ryPNtNIWgM8krgPuDCpK/7fZ2C/FcnTspPL0E=
Subject key identifier: A8:BC:80:2A:EF:F6:3C:30:17:AE:C7:2B:1E:27:8D:5D:AF:B6:16:4B
Certificate issuer: /CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Certificate serial: 019422FB77672ED1F8E8AB4E6A5F888A14F3
Authority key identifier: D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/qLyAKu_2PDAXrscrHieNXa-2Fks.roa
Signing time: Wed 01 Jan 2025 17:48:12 +0000
ROA not before: Wed 01 Jan 2025 17:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207354
IP address blocks: 185.108.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:77:67:2e:d1:f8:e8:ab:4e:6a:5f:88:8a:14:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Validity
Not Before: Jan 1 17:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8bc802aeff63c3017aec72b1e278d5dafb6164b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3c:3e:e9:a8:07:7b:f5:17:f9:d3:a9:49:5a:
88:80:db:7f:b9:6d:de:4c:83:cc:02:b4:46:b6:10:
ab:63:af:4e:bb:22:38:7f:a2:f6:bd:36:70:2d:83:
fd:10:e6:ed:21:6d:26:69:d8:11:e5:da:f5:19:82:
65:c0:11:d8:5a:7b:96:ca:bc:2e:bc:91:e6:2f:67:
98:e2:70:77:33:37:4e:ee:7b:75:18:a1:8c:0d:4c:
2b:04:0d:b2:7a:63:8a:54:78:f6:3a:8e:05:4d:03:
64:a0:f5:e0:cd:da:57:12:69:ea:10:4b:55:e4:e0:
98:98:9d:dc:3c:b5:bd:cb:93:ee:a9:93:4b:fd:88:
8a:96:9d:44:b6:4a:38:e7:d3:65:9a:37:cd:5e:c4:
53:f9:64:61:b2:4b:7e:01:f8:7e:9a:6d:3c:69:80:
4d:66:21:d2:48:80:6a:c6:1e:59:1e:8e:83:42:95:
b8:bd:36:d7:39:60:70:59:e3:fd:b0:19:36:a3:4e:
f7:bc:7c:5c:de:30:a9:2d:cc:6c:07:a6:35:11:4e:
d9:a8:e3:19:fc:89:50:74:bf:38:76:29:17:1b:2b:
31:ae:0f:46:1c:09:00:47:4c:52:20:1d:8c:e7:07:
66:b5:72:79:cc:4d:2d:e0:03:7f:82:9b:18:f3:71:
01:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BC:80:2A:EF:F6:3C:30:17:AE:C7:2B:1E:27:8D:5D:AF:B6:16:4B
X509v3 Authority Key Identifier:
keyid:D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/qLyAKu_2PDAXrscrHieNXa-2Fks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.108.126.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:86:ad:f4:46:ca:0a:80:37:f4:8e:9c:f7:51:5a:11:6d:85:
7e:39:0f:b3:12:6a:9c:78:c3:69:39:f3:73:f6:91:2c:3f:e7:
a9:00:f8:e1:8b:71:48:30:50:e3:73:e8:9c:1e:cc:2e:61:94:
1d:52:dc:b4:4e:64:65:86:6d:f4:35:ef:c9:72:72:10:27:0f:
ca:b3:f8:df:44:cf:31:f2:2b:80:77:3a:2c:0a:92:55:55:21:
28:e1:1a:03:72:25:6f:af:6c:5b:a4:8e:ed:f5:f9:67:2f:b4:
57:0f:88:9e:d7:c4:12:3e:78:6f:a4:f2:f7:c6:26:6a:66:57:
0c:a0:4a:41:ab:d0:6d:e3:88:dc:07:4c:c7:53:21:c7:a5:c7:
61:29:a3:5c:9d:e4:66:f4:59:64:16:c7:e8:9f:d7:4b:0e:c1:
5d:9f:4e:40:6c:7b:47:cc:1a:9f:c0:c7:e9:d7:47:e2:87:cb:
45:7e:6e:54:d5:d3:50:a2:0e:5c:14:3a:c5:f2:c6:63:49:5c:
98:00:aa:ce:ce:ce:44:3a:f3:6a:02:68:c8:b3:95:8e:3e:0b:
8b:f4:51:d2:1f:2b:73:d8:09:3c:8c:bc:40:6b:42:51:78:eb:
61:2d:45:fe:e0:d3:81:7c:4d:28:62:2d:b9:e8:3a:94:72:07:
ab:18:de:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi+3dnLtH46KtOal+IihTzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1MmFkNDA2ODk0ODgzMGQ5ZTllNThhY2U1ZTFmMTcwMzQ4
ZTQwMjQwHhcNMjUwMTAxMTc0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGJjODAyYWVmZjYzYzMwMTdhZWM3MmIxZTI3OGQ1ZGFmYjYxNjRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTw+6agHe/UX+dOpSVqIgNt/uW3e
TIPMArRGthCrY69OuyI4f6L2vTZwLYP9EObtIW0madgR5dr1GYJlwBHYWnuWyrwu
vJHmL2eY4nB3MzdO7nt1GKGMDUwrBA2yemOKVHj2Oo4FTQNkoPXgzdpXEmnqEEtV
5OCYmJ3cPLW9y5PuqZNL/YiKlp1Etko459NlmjfNXsRT+WRhskt+Afh+mm08aYBN
ZiHSSIBqxh5ZHo6DQpW4vTbXOWBwWeP9sBk2o073vHxc3jCpLcxsB6Y1EU7ZqOMZ
/IlQdL84dikXGysxrg9GHAkAR0xSIB2M5wdmtXJ5zE0t4AN/gpsY83EBSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKi8gCrv9jwwF67HKx4njV2vthZLMB8GA1UdIwQY
MBaAFNUq1AaJSIMNnp5YrOXh8XA0jkAkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVNyVUJvbElndzJlbmxpczVlSHhjRFNPUUNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82ZGI4ZTAtMTc4MC00MDFhLTljYjct
YjhjZjA0YjU0MjUxLzEvcUx5QUt1XzJQREFYcnNjckhpZU5YYS0yRmtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82ZGI4ZTAtMTc4MC00MDFhLTljYjctYjhjZjA0YjU0MjUx
LzEvMVNyVUJvbElndzJlbmxpczVlSHhjRFNPUUNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWx+MA0G
CSqGSIb3DQEBCwUAA4IBAQCchq30RsoKgDf0jpz3UVoRbYV+OQ+zEmqceMNpOfNz
9pEsP+epAPjhi3FIMFDjc+icHswuYZQdUty0TmRlhm30Ne/JcnIQJw/Ks/jfRM8x
8iuAdzosCpJVVSEo4RoDciVvr2xbpI7t9flnL7RXD4ie18QSPnhvpPL3xiZqZlcM
oEpBq9Bt44jcB0zHUyHHpcdhKaNcneRm9FlkFsfon9dLDsFdn05AbHtHzBqfwMfp
10fih8tFfm5U1dNQog5cFDrF8sZjSVyYAKrOzs5EOvNqAmjIs5WOPguL9FHSHytz
2Ak8jLxAa0JReOthLUX+4NOBfE0oYi256DqUcgerGN6b
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:15:04 2025 by rpki-client