Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/q7nNEV5Xjvk4LtZ1ZqHRZsjWZFI.roa
File: q7nNEV5Xjvk4LtZ1ZqHRZsjWZFI.roa (raw, json)
Hash identifier: acnCrGpXIM7lWKiBoJxoUduhJbjnt+3LzoU7dLDO7Fo=
Subject key identifier: AB:B9:CD:11:5E:57:8E:F9:38:2E:D6:75:66:A1:D1:66:C8:D6:64:52
Certificate issuer: /CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Certificate serial: 01942521A201B5C53570A27B14BC0C030DD5
Authority key identifier: 6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/q7nNEV5Xjvk4LtZ1ZqHRZsjWZFI.roa
Signing time: Thu 02 Jan 2025 03:49:08 +0000
ROA not before: Thu 02 Jan 2025 03:49:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207211
IP address blocks: 185.157.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a2:01:b5:c5:35:70:a2:7b:14:bc:0c:03:0d:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aa6f9e3e2622a7815a259e58d552439c255a31b
Validity
Not Before: Jan 2 03:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abb9cd115e578ef9382ed67566a1d166c8d66452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:80:98:d6:72:0d:32:20:da:9b:cb:ca:03:ac:
9b:ab:88:ee:59:f4:bf:68:d3:0e:e5:72:dd:ca:0e:
7b:18:48:31:c6:72:60:62:e2:85:8b:6b:91:b2:bb:
74:21:a6:d9:c3:99:2d:9d:a9:7d:36:be:29:ee:2c:
ff:d3:55:85:8a:7c:0a:38:84:6a:76:b7:ea:16:04:
5a:9d:00:09:d2:94:56:c1:80:fd:9b:18:3c:64:66:
9d:85:cd:e9:f2:64:83:05:6c:8f:02:17:76:bc:fa:
9c:54:c5:8e:65:d0:e1:98:80:81:ec:d6:88:e1:43:
43:bf:b1:8a:d3:24:68:8f:94:be:89:b1:19:ed:cd:
4e:1d:59:fd:c6:86:6d:6c:8c:0b:cb:98:6a:45:68:
a0:a0:30:a1:8f:ce:f4:ba:1c:f6:fe:7b:df:6b:98:
79:6f:81:e2:cc:a2:7f:94:2e:e8:39:fb:4a:51:c2:
50:f7:05:a8:72:f6:07:58:bf:ea:e2:df:ea:e4:49:
e9:2a:9d:7f:cb:6a:78:af:33:0a:b7:77:b3:90:3c:
f7:c7:0b:e1:de:7d:b1:71:04:08:1b:98:d0:21:0b:
50:b1:1f:6d:23:ce:12:dc:7e:a8:dd:a2:9f:7d:11:
41:ea:a7:7a:b8:f9:1f:b1:4a:fe:61:36:cd:af:c7:
49:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:B9:CD:11:5E:57:8E:F9:38:2E:D6:75:66:A1:D1:66:C8:D6:64:52
X509v3 Authority Key Identifier:
keyid:6A:A6:F9:E3:E2:62:2A:78:15:A2:59:E5:8D:55:24:39:C2:55:A3:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aqb54-JiKngVolnljVUkOcJVoxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/q7nNEV5Xjvk4LtZ1ZqHRZsjWZFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/936806-bb6d-45f3-8837-c50734d020f0/1/aqb54-JiKngVolnljVUkOcJVoxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.157.204.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:72:fc:ea:c6:88:15:3f:1f:96:a0:a1:b0:b6:75:00:96:75:
3f:65:42:6d:93:2a:42:5c:48:a1:37:9a:0f:d2:b4:05:49:79:
aa:eb:92:95:a5:e2:da:ac:8a:c7:9c:35:9b:2e:d7:e3:78:d4:
4e:ce:a6:09:52:75:3c:14:f8:2b:d3:5d:db:da:26:72:b4:99:
12:10:d2:cd:b3:f3:f2:4d:24:02:7e:b4:11:23:23:93:b2:40:
0e:87:a6:ab:72:15:5d:c6:23:e2:2f:ce:ec:70:98:86:05:3b:
09:05:8f:b7:9f:b1:6b:6b:d7:aa:73:4e:ca:83:db:49:dc:9c:
59:bb:18:d0:6a:0a:57:01:94:cc:d8:68:64:16:bf:6b:6c:ca:
1e:a1:68:a1:06:5c:3a:37:ea:c2:1f:32:bf:b3:7f:b0:19:dc:
3b:9c:ae:8c:a0:59:45:45:47:30:76:83:71:a2:d1:0e:13:d9:
8d:ee:34:84:be:eb:e3:b3:46:33:ba:49:2c:93:6f:45:2c:c4:
ba:57:86:73:59:b1:3d:03:29:18:37:9f:8f:1f:73:9a:3d:3d:
42:92:1a:16:65:4a:fd:bd:c7:91:e0:38:14:34:c9:76:58:a3:
d6:f0:83:8f:67:17:48:b2:5a:03:9f:f4:aa:27:a7:26:fa:91:
bd:be:be:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIaIBtcU1cKJ7FLwMAw3VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhYTZmOWUzZTI2MjJhNzgxNWEyNTllNThkNTUyNDM5YzI1
NWEzMWIwHhcNMjUwMTAyMDM0OTA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmI5Y2QxMTVlNTc4ZWY5MzgyZWQ2NzU2NmExZDE2NmM4ZDY2NDUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvICY1nINMiDam8vKA6ybq4juWfS/
aNMO5XLdyg57GEgxxnJgYuKFi2uRsrt0IabZw5ktnal9Nr4p7iz/01WFinwKOIRq
drfqFgRanQAJ0pRWwYD9mxg8ZGadhc3p8mSDBWyPAhd2vPqcVMWOZdDhmICB7NaI
4UNDv7GK0yRoj5S+ibEZ7c1OHVn9xoZtbIwLy5hqRWigoDChj870uhz2/nvfa5h5
b4HizKJ/lC7oOftKUcJQ9wWocvYHWL/q4t/q5EnpKp1/y2p4rzMKt3ezkDz3xwvh
3n2xcQQIG5jQIQtQsR9tI84S3H6o3aKffRFB6qd6uPkfsUr+YTbNr8dJRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKu5zRFeV475OC7WdWah0WbI1mRSMB8GA1UdIwQY
MBaAFGqm+ePiYip4FaJZ5Y1VJDnCVaMbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXFiNTQtSmlLbmdWb2xubGpWVWtPY0pWb3hzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS85MzY4MDYtYmI2ZC00NWYzLTg4Mzct
YzUwNzM0ZDAyMGYwLzEvcTduTkVWNVhqdms0THRaMVpxSFJac2pXWkZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS85MzY4MDYtYmI2ZC00NWYzLTg4MzctYzUwNzM0ZDAyMGYw
LzEvYXFiNTQtSmlLbmdWb2xubGpWVWtPY0pWb3hzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuZ3MMA0G
CSqGSIb3DQEBCwUAA4IBAQCjcvzqxogVPx+WoKGwtnUAlnU/ZUJtkypCXEihN5oP
0rQFSXmq65KVpeLarIrHnDWbLtfjeNROzqYJUnU8FPgr013b2iZytJkSENLNs/Py
TSQCfrQRIyOTskAOh6archVdxiPiL87scJiGBTsJBY+3n7Fra9eqc07Kg9tJ3JxZ
uxjQagpXAZTM2GhkFr9rbMoeoWihBlw6N+rCHzK/s3+wGdw7nK6MoFlFRUcwdoNx
otEOE9mN7jSEvuvjs0Yzukksk29FLMS6V4ZzWbE9AykYN5+PH3OaPT1CkhoWZUr9
vceR4DgUNMl2WKPW8IOPZxdIsloDn/SqJ6cm+pG9vr5r
-----END CERTIFICATE-----
Generated at Fri Apr 25 17:04:15 2025 by rpki-client