Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/QeA9h5gc7h5TROkBqdTQKlfxGiI.roa
File: QeA9h5gc7h5TROkBqdTQKlfxGiI.roa (raw, json)
Hash identifier: wvC6P2mkgiV/WDCXbKURUPeQIyZPZgtW7FSvBfEWp/8=
Subject key identifier: 41:E0:3D:87:98:1C:EE:1E:53:44:E9:01:A9:D4:D0:2A:57:F1:1A:22
Certificate issuer: /CN=70847f8221897d6e952e86ea2c339abaacc131f5
Certificate serial: 019427480D78D2628248CA27B205DE55E3AD
Authority key identifier: 70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/QeA9h5gc7h5TROkBqdTQKlfxGiI.roa
Signing time: Thu 02 Jan 2025 13:50:20 +0000
ROA not before: Thu 02 Jan 2025 13:50:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9051
IP address blocks: 185.38.28.0/22 maxlen: 24
185.95.252.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:0d:78:d2:62:82:48:ca:27:b2:05:de:55:e3:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70847f8221897d6e952e86ea2c339abaacc131f5
Validity
Not Before: Jan 2 13:50:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41e03d87981cee1e5344e901a9d4d02a57f11a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bd:66:f2:9e:5a:a5:57:9c:71:ca:a6:c1:44:
65:37:91:f0:12:07:d9:25:0a:5f:5b:5a:1e:dd:61:
13:30:cf:35:76:84:eb:33:a0:c3:1a:a4:21:e3:a8:
24:97:8d:1a:89:5f:7e:1f:d7:3a:ea:08:09:ba:bd:
3a:11:57:21:59:d3:b9:6e:e7:1f:d4:ee:6d:6b:77:
6a:48:8c:9b:96:ce:f7:8d:ef:eb:8c:5c:d2:39:7c:
aa:30:5b:28:1d:ed:fd:b1:0f:0c:7b:03:fe:15:13:
94:d1:05:24:8e:74:8f:34:cf:17:40:0a:3d:ce:69:
8f:a7:42:b0:6f:47:ef:48:b3:f2:41:5e:0c:5d:b1:
ff:28:a9:69:ab:1a:2c:4d:8d:c9:78:0f:00:0d:62:
01:36:69:d2:a8:b4:9c:ea:d7:df:43:84:e5:68:02:
f6:70:c5:eb:0f:bf:78:44:28:12:64:dd:e0:bb:b8:
1c:e6:dc:16:52:c0:a9:7c:5a:ca:74:ee:90:1b:ab:
e4:99:6c:88:ca:54:58:76:34:ca:ea:0c:c2:a7:39:
62:0b:28:c8:d0:4e:25:b0:ff:fa:f6:ae:cd:f1:f4:
0c:5d:83:93:da:f4:cb:30:db:7b:f2:99:cb:b8:b9:
e7:74:a3:1a:c2:03:51:6b:7f:63:fd:f3:bf:ce:f1:
6b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E0:3D:87:98:1C:EE:1E:53:44:E9:01:A9:D4:D0:2A:57:F1:1A:22
X509v3 Authority Key Identifier:
keyid:70:84:7F:82:21:89:7D:6E:95:2E:86:EA:2C:33:9A:BA:AC:C1:31:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cIR_giGJfW6VLobqLDOauqzBMfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/QeA9h5gc7h5TROkBqdTQKlfxGiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/706c03-7d35-4913-8a18-6e8784a7ad09/1/cIR_giGJfW6VLobqLDOauqzBMfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.38.28.0/22
185.95.252.0/22
Signature Algorithm: sha256WithRSAEncryption
41:bb:43:a3:4c:d1:00:3f:67:8a:6a:fb:be:42:6e:8c:2a:3c:
90:cc:64:49:7f:ef:57:22:3b:51:73:b9:9c:3c:3c:d9:c9:99:
df:ce:f0:05:17:d7:92:2d:f5:fa:b1:f9:92:15:7a:6d:e3:0d:
6e:e2:b4:55:32:a9:f4:95:d6:ca:00:bd:a3:3d:bf:58:1f:19:
ce:e1:02:a8:1f:ff:5e:d9:d8:46:6b:d9:ec:d9:5c:2d:59:c2:
df:ea:75:0b:73:66:de:68:f0:c0:83:35:2b:5f:d8:1e:c2:2e:
c1:f6:f6:df:99:1e:66:77:af:d2:ab:71:b5:a2:f1:65:e5:ca:
fa:c4:c9:5d:46:74:52:21:d9:2e:ef:d3:af:d4:7e:8c:e5:2e:
ac:eb:41:43:e6:87:76:18:c6:18:a5:01:a2:9f:0f:5c:9d:cf:
44:c7:dc:d8:86:7c:1a:cb:ec:bf:68:1c:f7:a8:6e:3c:95:33:
1a:0e:99:55:7c:e7:85:27:b0:ae:12:cb:aa:67:dc:27:cf:27:
a1:ff:1f:a0:9a:de:76:83:6c:84:d3:76:8f:a8:f5:84:ca:65:
28:cf:9b:4b:0c:e9:0f:8f:62:a2:74:79:6f:12:86:4e:f1:a5:
37:71:cc:10:b5:3a:96:d1:f4:fe:d1:e2:ae:43:18:18:95:69:
81:5a:81:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:11:42 2025 by rpki-client