Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/qhXB5I3L_1gebx9uWPle22yXSzs.roa
File: qhXB5I3L_1gebx9uWPle22yXSzs.roa (raw, json)
Hash identifier: 1Bibbr3y/zyc6e3zTUWDLu/M4E9ABrzuKYe3XtB8cLA=
Subject key identifier: AA:15:C1:E4:8D:CB:FF:58:1E:6F:1F:6E:58:F9:5E:DB:6C:97:4B:3B
Certificate issuer: /CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Certificate serial: 019424B38B89F9335029EEE75F55D1D69A36
Authority key identifier: FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/qhXB5I3L_1gebx9uWPle22yXSzs.roa
Signing time: Thu 02 Jan 2025 01:48:53 +0000
ROA not before: Thu 02 Jan 2025 01:48:53 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215202
IP address blocks: 185.138.214.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:8b:89:f9:33:50:29:ee:e7:5f:55:d1:d6:9a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Validity
Not Before: Jan 2 01:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa15c1e48dcbff581e6f1f6e58f95edb6c974b3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b7:fd:53:fd:fd:8a:08:8c:c2:74:54:21:f6:
81:2c:2d:ac:05:f9:23:15:68:ec:58:0b:6c:40:c1:
f3:b8:18:c5:2a:8c:7a:ee:38:0d:e0:3a:dc:aa:5d:
03:de:e0:ae:6c:d2:c7:78:11:f6:19:16:fe:55:9c:
c5:a4:8c:39:6e:05:6a:03:88:b6:67:59:bf:9f:a7:
0f:03:90:96:2e:13:ac:ba:31:e3:62:af:80:d2:47:
77:5e:39:b0:d8:cb:6d:28:9f:24:53:67:53:79:e3:
76:45:2b:aa:53:be:bf:71:e2:f9:40:18:b8:d5:d9:
87:5d:1a:14:46:33:90:88:bf:45:8c:c4:2e:38:09:
9d:09:1b:ab:b3:91:b0:27:87:1b:b0:73:2c:30:92:
41:3d:4a:b4:c6:f3:b8:9d:58:27:e7:46:cc:ab:c8:
1f:0c:99:3b:c4:f9:77:1e:11:10:a9:51:67:81:c5:
ed:f9:ef:53:d2:32:ac:ef:fd:ed:da:35:a7:71:fa:
31:15:f3:18:ff:f9:fa:38:64:29:67:be:69:d8:8a:
eb:78:49:70:42:c4:cd:dd:91:bf:9c:ab:d8:95:cc:
a3:84:78:a9:f1:ed:3e:01:5c:45:a2:76:e2:53:9a:
82:e8:f5:3d:f1:6a:5f:3b:c4:d5:4b:b3:b9:9c:84:
de:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:15:C1:E4:8D:CB:FF:58:1E:6F:1F:6E:58:F9:5E:DB:6C:97:4B:3B
X509v3 Authority Key Identifier:
keyid:FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/qhXB5I3L_1gebx9uWPle22yXSzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.214.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:cb:68:f2:c7:c4:33:23:db:39:db:16:96:43:1a:a2:fb:6b:
9a:70:6f:e8:d1:94:a7:24:e7:98:6a:91:2f:2f:07:5c:18:dc:
8e:40:95:f9:bd:57:76:ac:fe:1b:da:b0:77:23:79:9f:84:e0:
bd:5e:1a:dc:3b:f3:44:81:ea:81:b7:9f:fc:52:c4:ca:26:5b:
b9:a2:58:f2:75:5f:01:f2:af:6a:76:17:78:be:5d:bc:55:e7:
67:71:4e:9d:58:51:67:6f:17:ca:90:21:7c:da:6c:2e:49:1f:
38:7a:dd:ec:6b:2e:98:2c:90:2c:ea:52:fc:80:d7:ec:2a:ec:
e6:66:26:ba:db:6f:e7:e4:d8:dc:da:d8:e6:d7:c4:16:a1:0d:
de:e7:b0:5b:fc:89:f0:82:fb:09:49:c5:15:74:bb:1b:f7:6d:
35:9d:39:42:92:06:88:c2:ee:02:fc:a8:56:16:4e:ef:08:73:
90:a1:e8:d0:48:fd:29:34:d0:4f:56:90:4d:ab:0c:e5:5a:a2:
a4:34:0e:27:31:39:df:c6:a7:68:a6:5b:13:14:21:a5:8a:1f:
60:17:c6:b6:dc:c9:e2:56:b5:32:de:af:57:e3:cd:e2:5c:08:
7a:b6:c8:33:28:5a:ea:b2:48:60:4c:48:56:aa:26:cc:81:dd:
24:f5:2f:e5
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQks4uJ+TNQKe7nX1XR1po2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiZjhjZDVkMjRhMDhiNWE4YWZiNTdjOWU2MDRkMTkzYmM4
Y2FlMjAwHhcNMjUwMTAyMDE0ODUzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTE1YzFlNDhkY2JmZjU4MWU2ZjFmNmU1OGY5NWVkYjZjOTc0YjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbf9U/39igiMwnRUIfaBLC2sBfkj
FWjsWAtsQMHzuBjFKox67jgN4Drcql0D3uCubNLHeBH2GRb+VZzFpIw5bgVqA4i2
Z1m/n6cPA5CWLhOsujHjYq+A0kd3Xjmw2MttKJ8kU2dTeeN2RSuqU76/ceL5QBi4
1dmHXRoURjOQiL9FjMQuOAmdCRurs5GwJ4cbsHMsMJJBPUq0xvO4nVgn50bMq8gf
DJk7xPl3HhEQqVFngcXt+e9T0jKs7/3t2jWncfoxFfMY//n6OGQpZ75p2IrreElw
QsTN3ZG/nKvYlcyjhHip8e0+AVxFonbiU5qC6PU98WpfO8TVS7O5nITeXQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFKoVweSNy/9YHm8fblj5Xttsl0s7MB8GA1UdIwQY
MBaAFPv4zV0koItaivtXyeYE0ZO8jK4gMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1fak5YU1NnaTFxSy0xZko1Z1RSazd5TXJpQS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYzAvZWIzZTliLTZkYjUtNDZjNi05YWEx
LWViODc4NjliZDFjOS8xL3FoWEI1STNMXzFnZWJ4OXVXUGxlMjJ5WFN6cy5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYzAvZWIzZTliLTZkYjUtNDZjNi05YWExLWViODc4NjliZDFj
OS8xLzEtX2pOWFNTZ2kxcUstMWZKNWdUUms3eU1yaUEuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAG5itYw
DQYJKoZIhvcNAQELBQADggEBADzLaPLHxDMj2znbFpZDGqL7a5pwb+jRlKck55hq
kS8vB1wY3I5Alfm9V3as/hvasHcjeZ+E4L1eGtw780SB6oG3n/xSxMomW7miWPJ1
XwHyr2p2F3i+XbxV52dxTp1YUWdvF8qQIXzabC5JHzh63exrLpgskCzqUvyA1+wq
7OZmJrrbb+fk2Nza2ObXxBahDd7nsFv8ifCC+wlJxRV0uxv3bTWdOUKSBojC7gL8
qFYWTu8Ic5Ch6NBI/Sk00E9WkE2rDOVaoqQ0DicxOd/Gp2imWxMUIaWKH2AXxrbc
yeJWtTLer1fjzeJcCHq2yDMoWuqySGBMSFaqJsyB3ST1L+U=
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:33:27 2025 by rpki-client