Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/sQzNar_4JseiL9UNqmWgBSd_A68.roa
File: sQzNar_4JseiL9UNqmWgBSd_A68.roa (raw, json)
Hash identifier: 6EjRuBumMEH87fOFnzWurdMoQt/hXzQEoZOF6qbEThc=
Subject key identifier: B1:0C:CD:6A:BF:F8:26:C7:A2:2F:D5:0D:AA:65:A0:05:27:7F:03:AF
Certificate issuer: /CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748
Certificate serial: 01942143FCBDB6DAE23A940FF91308AD99EA
Authority key identifier: 1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/sQzNar_4JseiL9UNqmWgBSd_A68.roa
Signing time: Wed 01 Jan 2025 09:48:11 +0000
ROA not before: Wed 01 Jan 2025 09:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29316
IP address blocks: 185.49.76.0/22 maxlen: 22
2a01:9fa0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:fc:bd:b6:da:e2:3a:94:0f:f9:13:08:ad:99:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ac2456c70f8aaa53bd8940fe23f13cfa270e748
Validity
Not Before: Jan 1 09:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b10ccd6abff826c7a22fd50daa65a005277f03af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:72:c1:ec:e6:04:be:4b:6d:05:bd:4a:bc:e7:
b5:b4:4f:66:3b:a2:5b:0c:3d:3b:2c:ad:d4:f7:1a:
d1:a2:8b:18:7d:46:7e:bf:9a:3f:8b:84:6b:1e:6e:
55:1c:a0:3f:97:f3:35:96:7a:9c:ee:eb:14:ae:a3:
38:24:ce:60:be:9e:28:00:f6:1a:55:50:e4:c1:14:
fd:35:8d:57:5a:56:a2:f1:6c:72:2a:3a:4f:9e:b1:
32:b8:ce:05:5c:6d:83:c4:d2:3f:12:25:7e:72:bd:
c2:8c:8c:0f:c8:61:36:58:25:d8:72:ac:57:bf:9e:
ea:3d:a9:79:3f:75:ba:b3:7c:d5:37:38:19:ac:b0:
e0:29:42:f4:c7:9c:7f:b8:88:dd:84:94:b3:97:da:
81:e8:8f:40:b7:b5:7d:0a:b7:37:a5:b6:05:65:60:
2a:92:5b:79:6f:98:14:90:86:30:46:bf:81:0e:e2:
78:12:de:f9:8f:1e:03:39:b7:8e:5f:7f:d5:d3:63:
bf:87:72:fb:29:10:79:5c:8c:ec:0f:12:83:fd:d6:
e2:26:d1:c3:b7:37:9e:62:77:ef:8d:39:fb:c0:64:
96:2d:c1:80:09:62:9f:93:a1:57:a6:a4:3c:6e:e1:
3c:f8:f2:aa:c8:2a:e1:20:b1:60:e1:be:40:3a:b8:
f0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0C:CD:6A:BF:F8:26:C7:A2:2F:D5:0D:AA:65:A0:05:27:7F:03:AF
X509v3 Authority Key Identifier:
keyid:1A:C2:45:6C:70:F8:AA:A5:3B:D8:94:0F:E2:3F:13:CF:A2:70:E7:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GsJFbHD4qqU72JQP4j8Tz6Jw50g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/sQzNar_4JseiL9UNqmWgBSd_A68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/ff5b83-9c20-4d97-97c7-5a1d5584378d/1/GsJFbHD4qqU72JQP4j8Tz6Jw50g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.76.0/22
IPv6:
2a01:9fa0::/32
Signature Algorithm: sha256WithRSAEncryption
06:6b:61:73:14:29:5e:9d:22:b8:ba:aa:e7:7c:e0:0d:9f:ed:
55:43:80:bd:28:e4:7e:e7:f8:72:f1:aa:ad:50:41:25:84:26:
7b:8a:85:35:a9:12:94:18:f4:f8:4b:7e:7e:ee:11:b3:75:34:
cf:31:cb:30:1e:21:f4:53:0b:8f:41:a5:88:58:09:18:f1:eb:
6f:40:76:d1:1f:cc:31:2f:80:3e:d9:1e:02:0d:f0:1e:f2:d4:
18:b3:4b:89:36:24:6b:64:a1:c1:49:df:a2:0b:88:18:78:85:
dd:9c:da:88:3b:59:60:ad:9e:92:d2:51:59:ee:7d:ac:33:f2:
0f:c6:49:76:35:3c:35:6e:b0:b5:9a:31:60:f1:68:14:6d:ed:
72:77:72:0f:b4:c0:8d:c3:2a:30:3e:e2:6a:e9:50:b5:c2:4c:
3e:47:1e:23:c8:e2:13:f0:19:e4:77:a6:69:31:87:85:ae:22:
db:aa:db:06:e8:56:bd:ae:d8:ac:6a:b0:ab:dd:09:72:12:e9:
d4:b1:61:20:15:a1:bd:75:dc:4c:4e:cb:ad:40:36:6e:80:d9:
17:de:e2:ee:50:e8:6b:73:91:1c:a1:bd:3f:e1:65:95:5a:89:
13:7e:74:ad:fe:1b:75:95:66:87:42:dd:bb:26:a5:e5:01:d1:
34:5c:54:0e
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQhQ/y9ttriOpQP+RMIrZnqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhYzI0NTZjNzBmOGFhYTUzYmQ4OTQwZmUyM2YxM2NmYTI3
MGU3NDgwHhcNMjUwMTAxMDk0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTBjY2Q2YWJmZjgyNmM3YTIyZmQ1MGRhYTY1YTAwNTI3N2YwM2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3LB7OYEvkttBb1KvOe1tE9mO6Jb
DD07LK3U9xrRoosYfUZ+v5o/i4RrHm5VHKA/l/M1lnqc7usUrqM4JM5gvp4oAPYa
VVDkwRT9NY1XWlai8WxyKjpPnrEyuM4FXG2DxNI/EiV+cr3CjIwPyGE2WCXYcqxX
v57qPal5P3W6s3zVNzgZrLDgKUL0x5x/uIjdhJSzl9qB6I9At7V9Crc3pbYFZWAq
klt5b5gUkIYwRr+BDuJ4Et75jx4DObeOX3/V02O/h3L7KRB5XIzsDxKD/dbiJtHD
tzeeYnfvjTn7wGSWLcGACWKfk6FXpqQ8buE8+PKqyCrhILFg4b5AOrjwwQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLEMzWq/+CbHoi/VDaploAUnfwOvMB8GA1UdIwQY
MBaAFBrCRWxw+KqlO9iUD+I/E8+icOdIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3NKRmJIRDRxcVU3MkpRUDRqOFR6Nkp3NTBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mZjViODMtOWMyMC00ZDk3LTk3Yzct
NWExZDU1ODQzNzhkLzEvc1F6TmFyXzRKc2VpTDlVTnFtV2dCU2RfQTY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mZjViODMtOWMyMC00ZDk3LTk3YzctNWExZDU1ODQzNzhk
LzEvR3NKRmJIRDRxcVU3MkpRUDRqOFR6Nkp3NTBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuTFMMA0E
AgACMAcDBQAqAZ+gMA0GCSqGSIb3DQEBCwUAA4IBAQAGa2FzFClenSK4uqrnfOAN
n+1VQ4C9KOR+5/hy8aqtUEElhCZ7ioU1qRKUGPT4S35+7hGzdTTPMcswHiH0UwuP
QaWIWAkY8etvQHbRH8wxL4A+2R4CDfAe8tQYs0uJNiRrZKHBSd+iC4gYeIXdnNqI
O1lgrZ6S0lFZ7n2sM/IPxkl2NTw1brC1mjFg8WgUbe1yd3IPtMCNwyowPuJq6VC1
wkw+Rx4jyOIT8Bnkd6ZpMYeFriLbqtsG6Fa9rtisarCr3QlyEunUsWEgFaG9ddxM
TsutQDZugNkX3uLuUOhrc5Ecob0/4WWVWokTfnSt/ht1lWaHQt27JqXlAdE0XFQO
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:33:46 2025 by rpki-client