Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/SqfaLa-P64VMRzLu45OzZ7O-myU.roa
File: SqfaLa-P64VMRzLu45OzZ7O-myU.roa (raw, json)
Hash identifier: 8RixXJbGYWZA//tOAjP6K4ex9vVhr1Y3178psfUi1TM=
Subject key identifier: 4A:A7:DA:2D:AF:8F:EB:85:4C:47:32:EE:E3:93:B3:67:B3:BE:9B:25
Certificate issuer: /CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Certificate serial: 01941F8C733075C2303AA4ADD228E416DA31
Authority key identifier: 8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/SqfaLa-P64VMRzLu45OzZ7O-myU.roa
Signing time: Wed 01 Jan 2025 01:48:05 +0000
ROA not before: Wed 01 Jan 2025 01:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60574
IP address blocks: 185.28.156.0/22 maxlen: 22
192.162.168.0/22 maxlen: 22
2a00:9e20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:73:30:75:c2:30:3a:a4:ad:d2:28:e4:16:da:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d8f7eb4d2548f9ccbf3cb38e702a190c11742f5
Validity
Not Before: Jan 1 01:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4aa7da2daf8feb854c4732eee393b367b3be9b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:22:dc:52:ef:70:18:7f:85:9d:97:c1:95:79:
fc:23:c2:f3:5d:02:7f:23:f1:df:f3:f0:93:02:ee:
fa:0a:77:7d:bd:72:84:28:42:a1:23:01:15:87:f7:
e4:c8:1a:6e:f3:b1:73:c8:43:4e:24:7f:6d:86:44:
a6:96:6c:58:d2:3f:25:af:e2:cf:27:bb:3f:69:80:
65:91:27:bf:b6:e0:a9:fc:66:9f:9d:14:d2:43:57:
df:15:ff:4d:9e:50:03:a3:fa:86:ea:be:00:55:db:
60:63:25:d5:c6:6c:1f:9d:24:83:4b:57:84:77:86:
2b:ff:29:7c:03:92:b0:8b:53:4b:cc:34:b4:73:53:
27:44:16:6c:fc:2f:a2:1a:0a:26:c4:c3:92:71:16:
f1:cf:f6:49:2d:74:4c:71:26:52:f7:51:0f:3c:1c:
77:a7:2b:d9:98:7d:62:49:f0:13:8d:0a:dc:f6:7a:
4b:4b:c6:c6:ba:69:3d:2c:ee:02:9a:43:1d:4f:57:
53:45:2e:fe:e3:37:81:04:f2:34:cb:57:2a:6d:e7:
0a:95:68:61:a1:6b:eb:f2:18:88:5c:87:c7:5c:9a:
b4:a7:e8:25:6e:6e:23:64:3a:76:db:28:c7:ca:f2:
67:a6:9c:4e:38:a8:bd:25:12:2f:c9:2a:e7:2f:78:
9a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A7:DA:2D:AF:8F:EB:85:4C:47:32:EE:E3:93:B3:67:B3:BE:9B:25
X509v3 Authority Key Identifier:
keyid:8D:8F:7E:B4:D2:54:8F:9C:CB:F3:CB:38:E7:02:A1:90:C1:17:42:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jY9-tNJUj5zL88s45wKhkMEXQvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/SqfaLa-P64VMRzLu45OzZ7O-myU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/c261eb-c7cd-454d-84a6-afd272dd0fb5/1/jY9-tNJUj5zL88s45wKhkMEXQvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.28.156.0/22
192.162.168.0/22
IPv6:
2a00:9e20::/32
Signature Algorithm: sha256WithRSAEncryption
0a:71:b4:6e:0a:76:ca:bc:c8:d4:53:d7:67:91:5c:8a:77:20:
5c:9c:f0:d0:b8:f7:e0:2e:81:35:17:f6:94:f8:38:c7:44:19:
83:09:a1:48:78:a5:3b:6d:93:b1:db:81:bd:bc:d2:0e:a6:5b:
1a:91:7d:92:c4:62:da:bb:96:50:00:49:a3:6c:fa:e1:a6:5f:
ac:0a:c2:e1:fc:e4:7c:57:6a:69:a6:39:c3:79:32:53:06:43:
20:88:85:5e:7e:17:3f:7e:fd:ac:44:81:92:91:88:d1:34:19:
7f:2f:be:af:d0:0f:a4:96:3c:ef:d1:ed:08:c1:13:f6:b6:a6:
ab:80:ae:4e:80:31:6a:e9:21:67:c0:ac:97:ee:84:47:4d:ff:
6a:da:80:0a:28:d8:32:33:bc:19:26:6d:e6:d4:d1:98:af:f8:
50:e7:9e:84:f8:ef:8e:ef:20:d4:4f:59:8e:f8:4a:72:77:46:
f6:45:14:6f:e7:09:3f:f8:10:36:12:50:22:e0:21:2c:9d:d8:
31:8c:8d:85:8d:59:a3:04:33:9e:a7:99:34:5a:a0:b5:f7:85:
28:9f:45:68:65:f9:bd:c2:b6:96:f6:bc:4b:2b:bc:a2:c3:6d:
89:40:4c:5c:cd:7a:4d:a0:69:f6:51:ef:b7:49:29:3b:74:22:
a0:bd:49:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:18:07 2025 by rpki-client