Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/CqEnPa0b4387Yb8gdu7piqZKu5s.roa
File: CqEnPa0b4387Yb8gdu7piqZKu5s.roa (raw, json)
Hash identifier: 7FXFrw8ym051yYy3atG+YQp+VQXGW2aiyGL+xx2k/Xk=
Subject key identifier: 0A:A1:27:3D:AD:1B:E3:7F:3B:61:BF:20:76:EE:E9:8A:A6:4A:BB:9B
Certificate issuer: /CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Certificate serial: 019422FB11791395E12B6DD7DC38E661E7D4
Authority key identifier: 92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/CqEnPa0b4387Yb8gdu7piqZKu5s.roa
Signing time: Wed 01 Jan 2025 17:47:46 +0000
ROA not before: Wed 01 Jan 2025 17:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203759
IP address blocks: 45.142.7.0/24 maxlen: 24
185.86.188.0/22 maxlen: 24
185.124.192.0/22 maxlen: 24
193.19.128.0/22 maxlen: 24
193.148.160.0/19 maxlen: 24
2a05:b540::/29 maxlen: 48
2a06:b500::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:11:79:13:95:e1:2b:6d:d7:dc:38:e6:61:e7:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92660b23fe3b8642d6bf475f8eb7fcad9d13c413
Validity
Not Before: Jan 1 17:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0aa1273dad1be37f3b61bf2076eee98aa64abb9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:7d:90:92:97:8d:b1:c7:6d:06:28:17:b4:
ef:c6:d7:e5:9a:84:6a:df:86:4e:70:f9:43:f1:1d:
1d:0b:1d:17:e1:2a:56:c2:ee:f4:ea:90:d3:89:56:
4c:0c:80:c7:dd:0f:89:a5:3e:d2:e3:f5:6e:5f:d6:
1c:c5:5a:8c:fe:5c:50:18:20:46:80:eb:02:fc:62:
1b:2e:f6:f3:d6:6a:b0:60:cb:ba:b0:e1:e6:3c:5e:
ba:f5:6a:45:1c:b3:db:27:10:17:db:9b:52:20:04:
1d:65:cf:65:38:5d:63:e1:ed:c8:8b:0b:1f:0a:c5:
d7:3a:03:aa:cc:b2:82:8b:d9:87:0f:dd:c5:b1:0c:
19:9c:a5:04:89:09:e4:ed:2d:c2:56:02:dd:7d:e8:
06:2b:1a:cf:42:5d:cf:48:fd:cd:89:14:85:f4:51:
e5:5c:58:ff:9b:b1:76:82:32:33:ed:d4:1f:fe:0b:
70:9e:05:90:a2:8d:b0:79:64:af:7d:06:fe:e7:a5:
54:ce:4e:65:06:c7:4a:ca:f8:a7:dd:67:d6:dc:05:
1c:5e:a6:22:dc:e8:c5:75:66:f2:dc:13:dd:6a:c3:
d7:dd:e9:53:89:6f:76:89:00:e5:d1:7e:65:f3:16:
0f:96:4a:61:f8:03:c6:a2:6d:3b:cf:e0:8c:15:f1:
49:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A1:27:3D:AD:1B:E3:7F:3B:61:BF:20:76:EE:E9:8A:A6:4A:BB:9B
X509v3 Authority Key Identifier:
keyid:92:66:0B:23:FE:3B:86:42:D6:BF:47:5F:8E:B7:FC:AD:9D:13:C4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmYLI_47hkLWv0dfjrf8rZ0TxBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/CqEnPa0b4387Yb8gdu7piqZKu5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/ae3bac-3da2-4e49-bdab-13ef1c455cc4/1/kmYLI_47hkLWv0dfjrf8rZ0TxBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.142.7.0/24
185.86.188.0/22
185.124.192.0/22
193.19.128.0/22
193.148.160.0/19
IPv6:
2a05:b540::/29
2a06:b500::/29
Signature Algorithm: sha256WithRSAEncryption
2e:d4:ab:9f:d6:1b:c0:7c:34:5a:c0:7a:0f:a7:e3:07:8c:d2:
be:e4:78:18:01:8d:67:b2:04:a1:63:63:99:ef:d2:b5:f6:b5:
57:6f:f1:fa:bd:60:1d:0e:a8:1c:4a:5b:e6:d0:6d:bc:b5:8c:
32:3b:d1:10:fc:f7:54:a3:aa:83:c0:25:4f:79:f1:f0:e4:6e:
5d:cc:cb:20:51:6a:6b:78:b9:88:b0:8c:11:87:85:b6:9d:c4:
6c:1a:07:8b:ec:42:cb:c3:06:37:77:d4:33:a5:d7:ce:ce:ff:
fb:97:57:1a:7a:6b:6d:1c:a0:34:2c:f9:60:e1:a1:5e:ec:1a:
b7:7d:c5:13:b2:bd:19:b2:49:ae:e6:d0:4c:59:2f:b4:2d:cb:
fc:94:08:4f:a9:40:0a:e4:00:28:3d:79:30:71:d4:91:9f:9e:
4c:db:72:7f:2a:7e:a2:5a:5d:1f:2b:d7:a1:e8:bd:5f:d9:c9:
56:c6:46:66:b8:57:80:4c:9d:ce:83:8f:0e:4a:8d:06:31:c4:
80:c2:22:bf:69:0d:eb:fe:4a:86:af:92:7d:2d:8a:fc:31:54:
3e:be:0c:6a:79:8d:fe:fb:1e:07:95:ef:07:07:02:cb:2f:3f:
51:a1:58:1c:06:e0:47:b0:32:ab:d0:fc:7d:ab:8e:b5:97:63:
f9:58:25:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:37:18 2025 by rpki-client