Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/Zq2Gqix4-qvuYOb17f6YN_l9GEA.roa
File: Zq2Gqix4-qvuYOb17f6YN_l9GEA.roa (raw, json)
Hash identifier: Wf/420eSD8VWWCAKz9KngjlA14TpkC9t4fqu9jJME/k=
Subject key identifier: 66:AD:86:AA:2C:78:FA:AB:EE:60:E6:F5:ED:FE:98:37:F9:7D:18:40
Certificate issuer: /CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Certificate serial: 019424454A317BD3CE1FED8C750EFF5BE914
Authority key identifier: 0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/Zq2Gqix4-qvuYOb17f6YN_l9GEA.roa
Signing time: Wed 01 Jan 2025 23:48:28 +0000
ROA not before: Wed 01 Jan 2025 23:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39826
IP address blocks: 185.84.144.0/22 maxlen: 22
185.84.144.0/24 maxlen: 24
185.84.145.0/24 maxlen: 24
185.84.146.0/24 maxlen: 24
185.84.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:4a:31:7b:d3:ce:1f:ed:8c:75:0e:ff:5b:e9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c9a402ec90b5b475ecc9bf4b1c66b238213214e
Validity
Not Before: Jan 1 23:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66ad86aa2c78faabee60e6f5edfe9837f97d1840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5a:01:f6:0e:37:18:4b:d0:08:67:4c:4c:1f:
be:59:d8:e0:ee:94:9f:b9:e1:9b:f3:b2:07:0f:54:
a3:6a:1b:67:08:73:59:f7:57:31:8f:1f:f0:de:d5:
dc:ac:e5:01:b5:a7:54:c8:23:95:8d:3c:8a:91:61:
57:83:71:26:a5:ed:89:19:6f:f5:b1:8e:e4:48:8f:
ec:a7:db:fb:21:63:80:32:ea:51:b2:a0:4a:75:3e:
c9:de:58:cf:d5:5f:05:78:2e:b7:b9:e7:f2:f7:b3:
6d:67:df:ad:38:8a:06:9b:03:cd:f4:45:7a:25:dc:
e2:73:d1:5c:6a:f8:39:57:14:71:bc:90:47:18:a8:
9b:69:46:e7:e1:a7:7a:5c:84:27:51:3b:85:dc:ec:
32:c1:64:9c:be:bb:3c:81:4e:df:9d:ac:f6:ad:b5:
5a:b5:f4:03:91:6c:97:98:08:fd:d6:db:a4:04:a2:
97:7e:60:b6:4a:9f:8c:15:f7:58:0e:39:64:61:43:
23:e9:c8:db:7d:f7:1e:f4:5b:92:81:9b:ca:55:69:
39:97:1b:e0:27:76:c4:14:8a:60:6a:b1:6a:70:7c:
3d:2f:86:6d:85:74:94:41:9f:c7:20:cf:24:49:b3:
61:99:94:ac:3f:4d:9d:4b:37:9b:fd:f4:b3:fe:bb:
5f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AD:86:AA:2C:78:FA:AB:EE:60:E6:F5:ED:FE:98:37:F9:7D:18:40
X509v3 Authority Key Identifier:
keyid:0C:9A:40:2E:C9:0B:5B:47:5E:CC:9B:F4:B1:C6:6B:23:82:13:21:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJpALskLW0dezJv0scZrI4ITIU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/Zq2Gqix4-qvuYOb17f6YN_l9GEA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/b0f7bf-6844-4ba4-b33d-77869a6bfe54/1/DJpALskLW0dezJv0scZrI4ITIU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.144.0/22
Signature Algorithm: sha256WithRSAEncryption
82:20:d9:73:76:f1:21:10:98:52:f5:0b:9e:d9:65:4a:ed:a4:
a1:f4:9b:11:ab:84:f1:63:80:9e:57:26:33:17:77:bb:ab:42:
fb:ce:eb:a0:63:f7:4e:41:7e:ef:08:98:36:f1:70:47:1f:6e:
e7:94:55:24:00:f4:d3:00:0f:87:6a:bc:e7:2b:84:36:3f:9a:
c7:f0:0b:4b:27:71:bd:d2:f3:e4:7e:17:f0:95:ed:3e:56:c7:
d3:c0:82:8e:83:f0:a2:3f:af:19:3f:70:dc:37:2f:42:cb:a8:
a2:c8:47:07:c7:ba:b9:2b:f1:6c:d9:12:85:04:f2:83:3d:4b:
46:a5:56:a4:6e:63:ca:9b:c3:e3:84:4e:5d:bd:94:9b:22:c1:
8c:f6:75:5a:19:b8:c0:73:a5:ed:3b:9f:3e:0f:1c:03:97:3b:
02:f0:b1:1e:fe:f4:1a:34:20:da:a3:c1:90:17:c0:ca:de:8d:
c7:f1:a6:c6:f5:54:b5:b9:bd:c0:05:5d:8a:62:77:b2:b1:f3:
74:74:40:6d:06:ee:ec:0c:57:e0:18:c7:e7:18:3e:1b:5a:03:
e3:b5:a4:f8:71:02:fb:64:d3:67:7e:50:19:94:cb:76:cc:37:
bf:44:18:27:e3:81:b1:f8:9f:a7:28:d7:da:47:87:7a:80:36:
6c:eb:d7:f8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRUoxe9POH+2MdQ7/W+kUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOWE0MDJlYzkwYjViNDc1ZWNjOWJmNGIxYzY2YjIzODIx
MzIxNGUwHhcNMjUwMTAxMjM0ODI4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2NmFkODZhYTJjNzhmYWFiZWU2MGU2ZjVlZGZlOTgzN2Y5N2QxODQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFoB9g43GEvQCGdMTB++Wdjg7pSf
ueGb87IHD1SjahtnCHNZ91cxjx/w3tXcrOUBtadUyCOVjTyKkWFXg3Empe2JGW/1
sY7kSI/sp9v7IWOAMupRsqBKdT7J3ljP1V8FeC63uefy97NtZ9+tOIoGmwPN9EV6
Jdzic9Fcavg5VxRxvJBHGKibaUbn4ad6XIQnUTuF3OwywWScvrs8gU7fnaz2rbVa
tfQDkWyXmAj91tukBKKXfmC2Sp+MFfdYDjlkYUMj6cjbffce9FuSgZvKVWk5lxvg
J3bEFIpgarFqcHw9L4ZthXSUQZ/HIM8kSbNhmZSsP02dSzeb/fSz/rtf3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGathqosePqr7mDm9e3+mDf5fRhAMB8GA1UdIwQY
MBaAFAyaQC7JC1tHXsyb9LHGayOCEyFOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iMGY3YmYtNjg0NC00YmE0LWIzM2Qt
Nzc4NjlhNmJmZTU0LzEvWnEyR3FpeDQtcXZ1WU9iMTdmNllOX2w5R0VBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9iMGY3YmYtNjg0NC00YmE0LWIzM2QtNzc4NjlhNmJmZTU0
LzEvREpwQUxza0xXMGRlekp2MHNjWnJJNElUSVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuVSQMA0G
CSqGSIb3DQEBCwUAA4IBAQCCINlzdvEhEJhS9Que2WVK7aSh9JsRq4TxY4CeVyYz
F3e7q0L7zuugY/dOQX7vCJg28XBHH27nlFUkAPTTAA+HarznK4Q2P5rH8AtLJ3G9
0vPkfhfwle0+VsfTwIKOg/CiP68ZP3DcNy9Cy6iiyEcHx7q5K/Fs2RKFBPKDPUtG
pVakbmPKm8PjhE5dvZSbIsGM9nVaGbjAc6XtO58+DxwDlzsC8LEe/vQaNCDao8GQ
F8DK3o3H8abG9VS1ub3ABV2KYneysfN0dEBtBu7sDFfgGMfnGD4bWgPjtaT4cQL7
ZNNnflAZlMt2zDe/RBgn44Gx+J+nKNfaR4d6gDZs69f4
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:57:01 2025 by rpki-client