Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/jqsja3Ig_Inj8Kr-paXhHO8forw.roa
File: jqsja3Ig_Inj8Kr-paXhHO8forw.roa (raw, json)
Hash identifier: lgk++/8/iHEqAJTqQrY78sNZtOq1z4JSDJP8vNMWH0o=
Subject key identifier: 8E:AB:23:6B:72:20:FC:89:E3:F0:AA:FE:A5:A5:E1:1C:EF:1F:A2:BC
Certificate issuer: /CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Certificate serial: 019420D62933DB829DF44ABBB6CC2130AC3A
Authority key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/jqsja3Ig_Inj8Kr-paXhHO8forw.roa
Signing time: Wed 01 Jan 2025 07:48:13 +0000
ROA not before: Wed 01 Jan 2025 07:48:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43479
IP address blocks: 185.248.92.0/24 maxlen: 24
185.248.93.0/24 maxlen: 24
185.248.94.0/24 maxlen: 24
185.248.95.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:29:33:db:82:9d:f4:4a:bb:b6:cc:21:30:ac:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Validity
Not Before: Jan 1 07:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8eab236b7220fc89e3f0aafea5a5e11cef1fa2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6c:61:2c:bd:83:71:d8:02:70:93:74:3f:42:
f8:0a:16:11:49:f2:64:3d:5f:a5:e2:38:6f:91:bc:
12:3e:cb:0a:42:9b:f0:93:41:34:29:79:9a:25:84:
5b:5e:40:32:50:ad:c7:e1:63:15:d5:1f:0e:d1:ad:
e7:76:16:37:5f:bb:27:cf:bc:8a:f0:54:14:df:9d:
61:5a:b4:63:7d:fc:1f:99:62:12:d8:3c:f0:78:35:
8d:0e:bd:ed:53:90:be:ba:7a:e0:b4:9b:de:bc:0d:
15:b7:25:2c:1f:88:fb:9a:00:aa:cc:1a:68:1b:7d:
59:80:47:30:20:10:74:62:e4:ce:42:d4:88:ed:e1:
47:ba:4a:17:ad:9d:38:c8:f5:03:1b:a7:ee:d6:2d:
dd:d5:8b:07:89:53:0b:42:12:6e:19:57:2f:45:aa:
06:08:31:a4:77:2f:7b:ed:bb:c4:1a:53:78:37:5a:
53:d3:2a:aa:3c:a7:d4:1b:a1:50:dc:a1:3a:e8:c6:
8a:1c:37:3a:6a:37:e2:ea:6b:8a:11:9d:82:98:48:
be:a0:9e:eb:bf:33:33:62:0d:15:30:6c:48:64:35:
43:83:eb:82:3a:f2:a6:51:bb:b9:31:21:1f:3d:a9:
5d:71:d0:21:03:1a:0f:c3:4f:88:3b:b5:c0:18:89:
af:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AB:23:6B:72:20:FC:89:E3:F0:AA:FE:A5:A5:E1:1C:EF:1F:A2:BC
X509v3 Authority Key Identifier:
keyid:5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/jqsja3Ig_Inj8Kr-paXhHO8forw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.92.0/22
Signature Algorithm: sha256WithRSAEncryption
85:d8:35:3a:cc:ea:02:5e:d4:fd:fd:4c:69:c0:3e:db:29:11:
2b:20:be:ae:bc:3a:c7:c1:8c:03:ba:a7:48:5f:0a:80:14:c4:
b6:9a:9a:fc:7f:3f:42:5d:f5:8e:96:dc:38:21:99:a1:5e:53:
c3:54:64:9a:0f:10:04:6f:cd:7c:a8:18:2d:fb:ac:ef:7b:dc:
64:c8:ef:44:08:f9:b4:cd:67:bc:63:a8:e6:cb:84:a4:dc:f4:
c8:f8:6b:9e:9f:0f:4d:1e:eb:ed:6f:7c:8b:13:31:ce:83:de:
6d:5c:28:5e:a2:78:92:94:e1:5f:7d:19:67:d2:12:72:06:04:
29:a2:09:09:8e:8d:18:cc:bd:08:97:fd:34:61:ad:6a:2e:f0:
78:9f:67:cb:44:30:09:7d:e3:ac:b5:5c:d9:f2:3d:14:29:ca:
2d:7f:48:d7:6d:80:e5:2b:d5:70:2c:f2:97:2a:87:4c:97:0e:
ab:7c:ad:0a:7e:53:2f:6c:0f:ef:66:cd:19:5f:b0:3d:a7:4b:
82:35:4a:c3:f4:29:4e:6b:bc:0a:0b:31:9c:2d:7e:e8:dc:fc:
8e:62:71:08:ee:4c:0e:44:91:89:1c:2a:27:2d:75:99:91:29:
2e:23:f0:e2:02:39:75:2f:10:2d:ce:7e:cb:82:57:cf:e3:f8:
01:2c:11:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1ikz24Kd9Eq7tswhMKw6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhNTI5NDVkMjMxZjVmOGE5NzRiZTcxMmU4NzE4YWI1MGYw
NGNmZmEwHhcNMjUwMTAxMDc0ODEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWFiMjM2YjcyMjBmYzg5ZTNmMGFhZmVhNWE1ZTExY2VmMWZhMmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmxhLL2DcdgCcJN0P0L4ChYRSfJk
PV+l4jhvkbwSPssKQpvwk0E0KXmaJYRbXkAyUK3H4WMV1R8O0a3ndhY3X7snz7yK
8FQU351hWrRjffwfmWIS2DzweDWNDr3tU5C+unrgtJvevA0VtyUsH4j7mgCqzBpo
G31ZgEcwIBB0YuTOQtSI7eFHukoXrZ04yPUDG6fu1i3d1YsHiVMLQhJuGVcvRaoG
CDGkdy977bvEGlN4N1pT0yqqPKfUG6FQ3KE66MaKHDc6ajfi6muKEZ2CmEi+oJ7r
vzMzYg0VMGxIZDVDg+uCOvKmUbu5MSEfPaldcdAhAxoPw0+IO7XAGImvyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI6rI2tyIPyJ4/Cq/qWl4RzvH6K8MB8GA1UdIwQY
MBaAFFpSlF0jH1+Kl0vnEuhxirUPBM/6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV2xLVVhTTWZYNHFYUy1jUzZIR0t0UThFel9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mMTA3ZDYtNThmZC00MzIzLThmNTEt
MmU0MWZmM2UwYTZmLzEvanFzamEzSWdfSW5qOEtyLXBhWGhITzhmb3J3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9mMTA3ZDYtNThmZC00MzIzLThmNTEtMmU0MWZmM2UwYTZm
LzEvV2xLVVhTTWZYNHFYUy1jUzZIR0t0UThFel9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCufhcMA0G
CSqGSIb3DQEBCwUAA4IBAQCF2DU6zOoCXtT9/UxpwD7bKRErIL6uvDrHwYwDuqdI
XwqAFMS2mpr8fz9CXfWOltw4IZmhXlPDVGSaDxAEb818qBgt+6zve9xkyO9ECPm0
zWe8Y6jmy4Sk3PTI+Guenw9NHuvtb3yLEzHOg95tXCheoniSlOFffRln0hJyBgQp
ogkJjo0YzL0Il/00Ya1qLvB4n2fLRDAJfeOstVzZ8j0UKcotf0jXbYDlK9VwLPKX
KodMlw6rfK0KflMvbA/vZs0ZX7A9p0uCNUrD9ClOa7wKCzGcLX7o3PyOYnEI7kwO
RJGJHConLXWZkSkuI/DiAjl1LxAtzn7LglfP4/gBLBGZ
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:06:33 2025 by rpki-client