Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/qrPDrPXSwyvVn-Qdl0rfUFtGg50.roa
File: qrPDrPXSwyvVn-Qdl0rfUFtGg50.roa (raw, json)
Hash identifier: YwVpe+VwfLyswPBaEHJ3Hi4HwV3yhmlk88pkGuhRl44=
Subject key identifier: AA:B3:C3:AC:F5:D2:C3:2B:D5:9F:E4:1D:97:4A:DF:50:5B:46:83:9D
Certificate issuer: /CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Certificate serial: 019422FB57CF1F76DFB90AB2773D947F89AE
Authority key identifier: EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/qrPDrPXSwyvVn-Qdl0rfUFtGg50.roa
Signing time: Wed 01 Jan 2025 17:48:04 +0000
ROA not before: Wed 01 Jan 2025 17:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200322
IP address blocks: 185.245.248.0/22 maxlen: 24
185.245.250.0/24 maxlen: 24
2a0d:7080::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:57:cf:1f:76:df:b9:0a:b2:77:3d:94:7f:89:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Validity
Not Before: Jan 1 17:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aab3c3acf5d2c32bd59fe41d974adf505b46839d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:36:bb:6d:a7:fc:ac:51:c6:f0:ed:4b:50:cb:
f6:0b:cd:ce:03:24:43:4c:7c:dc:eb:8b:43:9b:85:
ba:ba:09:60:8f:c1:a0:1f:59:b2:b4:0d:28:df:4d:
e0:a2:91:8e:3f:67:8f:21:cd:69:55:c1:7c:a7:ca:
26:c1:eb:86:14:42:0f:65:ab:18:6e:64:f9:87:b2:
ca:3b:a2:1f:10:7b:d5:23:39:0f:b1:67:e1:91:61:
c7:e8:62:1d:37:41:22:86:43:42:55:dd:2e:39:da:
1c:3d:51:83:19:6d:a5:8d:81:82:f6:3d:18:d1:a9:
f1:54:e1:bb:20:b3:dc:49:4b:2e:92:73:57:78:66:
83:47:aa:14:c7:fa:6e:59:04:55:d1:1e:d6:76:57:
20:99:44:e7:88:39:7b:30:93:c6:b4:c5:99:75:ce:
c2:6c:e5:0c:c8:c4:54:fc:51:1e:8b:f1:c8:8e:0a:
97:93:fd:cf:58:c0:62:70:a0:d6:2c:0e:2c:6e:99:
82:34:3a:60:51:a9:ac:61:a9:dd:24:e6:ff:00:5d:
16:29:dc:f5:f9:55:83:ea:8c:8c:31:9f:a2:b5:19:
c3:2d:9f:f0:41:02:2c:a8:6f:4d:d5:52:bc:7f:d8:
51:9c:96:ff:b2:81:71:a7:12:c8:c0:4d:e0:0d:7b:
72:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B3:C3:AC:F5:D2:C3:2B:D5:9F:E4:1D:97:4A:DF:50:5B:46:83:9D
X509v3 Authority Key Identifier:
keyid:EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/qrPDrPXSwyvVn-Qdl0rfUFtGg50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.248.0/22
IPv6:
2a0d:7080::/29
Signature Algorithm: sha256WithRSAEncryption
27:6c:f9:a8:05:c4:79:3c:99:a2:15:6d:4a:cd:24:3d:e8:54:
da:61:9e:6b:be:0f:16:bf:65:cd:b8:d2:6e:1f:62:55:ee:32:
b1:f4:8c:e9:7f:92:b7:c5:33:1e:38:d5:7c:0f:97:f1:1f:06:
ef:21:98:a5:46:c2:83:05:58:6d:2d:3d:7d:79:be:e0:66:70:
77:93:42:31:e7:c6:f8:37:89:b4:0d:cf:7a:fa:87:37:aa:2d:
34:1c:4f:88:f7:b0:1e:73:a3:01:17:a8:1e:69:5a:08:88:78:
46:db:ae:4e:be:e0:e9:96:27:f5:73:01:e6:2d:50:03:a4:53:
e7:a8:85:0b:6f:1d:de:0a:0c:a6:b0:a8:04:36:87:22:65:c2:
7f:94:27:2f:5d:71:88:d6:d7:68:6f:41:00:43:6b:ad:b3:40:
ae:ba:e3:ce:af:72:b4:4e:a5:72:66:9a:bd:20:6f:43:ea:42:
55:5c:d2:a2:84:81:55:50:69:16:0b:f3:13:da:b0:f0:28:d3:
d9:f7:b0:46:65:f9:a4:02:02:ea:2a:33:7e:30:54:1b:1a:d0:
fd:c4:b6:79:64:32:fc:a9:e2:9d:5f:22:f9:17:e4:e4:45:a5:
fa:98:00:b4:55:f6:da:da:01:c8:16:0a:db:9f:b0:1c:c3:6d:
68:95:12:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:00:39 2025 by rpki-client