Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/cqleo2TkA-Dax9YzlbPC4oCeXks.roa
File: cqleo2TkA-Dax9YzlbPC4oCeXks.roa (raw, json)
Hash identifier: WDLbfAf8uLhRV57uZSklRDXJ7tKTUOclgtS0od1R4M4=
Subject key identifier: 72:A9:5E:A3:64:E4:03:E0:DA:C7:D6:33:95:B3:C2:E2:80:9E:5E:4B
Certificate issuer: /CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Certificate serial: 01941FFA29EF41D533D7C6D9908DA1ECD7D7
Authority key identifier: 19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/cqleo2TkA-Dax9YzlbPC4oCeXks.roa
Signing time: Wed 01 Jan 2025 03:47:55 +0000
ROA not before: Wed 01 Jan 2025 03:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47110
IP address blocks: 77.223.216.0/21 maxlen: 21
92.62.124.0/22 maxlen: 22
185.10.84.0/22 maxlen: 22
212.6.38.0/24 maxlen: 24
2a03:5e40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:29:ef:41:d5:33:d7:c6:d9:90:8d:a1:ec:d7:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19001d557a0698dad77c4b3eddf2a7d36b72ab00
Validity
Not Before: Jan 1 03:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72a95ea364e403e0dac7d63395b3c2e2809e5e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:2f:80:4b:d4:85:f2:98:f3:76:70:42:ef:56:
6e:40:5e:0d:a8:20:9f:ff:3e:12:c8:1a:71:73:99:
f1:81:26:53:4c:24:47:8f:81:31:59:2c:12:33:10:
d3:46:08:94:ee:99:2a:42:8f:cd:08:8e:b9:1f:d6:
f7:e2:a8:71:05:54:d2:01:c8:78:9e:52:b4:ac:0b:
74:7a:fe:cd:36:c2:fb:d5:94:27:4d:6e:b1:f1:04:
1d:2f:5d:b2:cf:0a:db:c7:9a:36:4d:ce:52:da:b5:
2d:ed:08:1a:ec:27:09:a1:6f:f6:0b:67:30:a0:29:
03:59:96:b2:4e:36:31:ed:4b:bf:8c:62:de:90:80:
20:0f:39:69:ec:ef:5b:52:6b:26:5e:31:86:ea:88:
8d:e1:e8:d9:52:29:0a:25:e1:89:1d:f7:08:66:09:
21:a7:7e:cf:ce:9c:6b:78:08:de:1f:03:d6:2e:2f:
dd:36:eb:c7:08:2f:5f:fb:7c:7f:82:4e:8f:06:25:
53:4e:62:8f:12:4e:89:c3:9a:e9:e3:03:a5:5e:d9:
d1:4c:b4:b3:c7:84:06:d7:54:4b:c3:5a:94:bc:04:
f0:98:13:ba:2d:96:5d:1d:2e:bf:86:48:a9:a3:e9:
65:0f:2d:2e:10:0f:b8:a5:c2:42:ad:5b:88:d1:79:
a2:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A9:5E:A3:64:E4:03:E0:DA:C7:D6:33:95:B3:C2:E2:80:9E:5E:4B
X509v3 Authority Key Identifier:
keyid:19:00:1D:55:7A:06:98:DA:D7:7C:4B:3E:DD:F2:A7:D3:6B:72:AB:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQAdVXoGmNrXfEs-3fKn02tyqwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/cqleo2TkA-Dax9YzlbPC4oCeXks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/bcdecd-6689-4cd8-a109-20de6972609b/1/GQAdVXoGmNrXfEs-3fKn02tyqwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.216.0/21
92.62.124.0/22
185.10.84.0/22
212.6.38.0/24
IPv6:
2a03:5e40::/32
Signature Algorithm: sha256WithRSAEncryption
30:cd:66:87:65:4d:15:ac:1c:d3:ae:d9:9e:72:3a:69:e9:a5:
41:65:4f:3c:ca:cc:6a:b8:c4:8a:a4:cd:3c:09:2c:0e:ff:2b:
d0:92:f0:98:55:ef:d6:b1:d7:16:f2:58:a6:fd:d6:31:3c:52:
26:94:49:02:6b:82:12:b4:92:53:7a:7e:72:ed:1e:7d:02:81:
28:67:39:30:6e:1e:2a:7d:fd:17:72:a8:64:ec:35:49:5c:80:
e5:6e:f8:7e:9d:b8:24:6e:57:0d:1c:74:3f:8d:ed:8a:f8:17:
ba:0f:87:16:de:89:ca:4d:5e:21:b1:f5:b3:52:01:07:13:62:
bc:60:bf:87:86:71:f5:98:db:09:0e:0b:2c:ec:ac:13:9e:83:
f0:b6:8d:8b:23:11:10:a3:97:54:26:7e:24:50:b2:16:45:ec:
f3:4b:7b:82:fb:0d:d4:80:53:05:78:29:b7:de:45:47:5e:fa:
44:e7:b1:8a:0a:1e:e3:3c:bb:1c:e2:d0:b5:f5:a6:67:42:23:
36:95:90:0d:f0:30:0d:64:92:68:a0:ea:6d:bb:67:25:ca:f2:
6f:9f:1f:3b:ec:2a:f8:72:43:f1:88:8b:8d:27:5a:c6:89:a6:
45:dd:16:e4:2c:23:5c:18:d5:14:c8:6f:17:08:9f:72:98:cd:
91:bd:31:90
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZQf+invQdUz18bZkI2h7NfXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE5MDAxZDU1N2EwNjk4ZGFkNzdjNGIzZWRkZjJhN2QzNmI3
MmFiMDAwHhcNMjUwMTAxMDM0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MmE5NWVhMzY0ZTQwM2UwZGFjN2Q2MzM5NWIzYzJlMjgwOWU1ZTRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmi+AS9SF8pjzdnBC71ZuQF4NqCCf
/z4SyBpxc5nxgSZTTCRHj4ExWSwSMxDTRgiU7pkqQo/NCI65H9b34qhxBVTSAch4
nlK0rAt0ev7NNsL71ZQnTW6x8QQdL12yzwrbx5o2Tc5S2rUt7Qga7CcJoW/2C2cw
oCkDWZayTjYx7Uu/jGLekIAgDzlp7O9bUmsmXjGG6oiN4ejZUikKJeGJHfcIZgkh
p37PzpxreAjeHwPWLi/dNuvHCC9f+3x/gk6PBiVTTmKPEk6Jw5rp4wOlXtnRTLSz
x4QG11RLw1qUvATwmBO6LZZdHS6/hkipo+llDy0uEA+4pcJCrVuI0Xmi7wIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFHKpXqNk5APg2sfWM5WzwuKAnl5LMB8GA1UdIwQY
MBaAFBkAHVV6Bpja13xLPt3yp9NrcqsAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR1FBZFZYb0dtTnJYZkVzLTNmS24wMnR5cXdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9iY2RlY2QtNjY4OS00Y2Q4LWExMDkt
MjBkZTY5NzI2MDliLzEvY3FsZW8yVGtBLURheDlZemxiUEM0b0NlWGtzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy9iY2RlY2QtNjY4OS00Y2Q4LWExMDktMjBkZTY5NzI2MDli
LzEvR1FBZFZYb0dtTnJYZkVzLTNmS24wMnR5cXdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQDTd/YAwQC
XD58AwQCuQpUAwQA1AYmMA0EAgACMAcDBQAqA15AMA0GCSqGSIb3DQEBCwUAA4IB
AQAwzWaHZU0VrBzTrtmecjpp6aVBZU88ysxquMSKpM08CSwO/yvQkvCYVe/WsdcW
8lim/dYxPFImlEkCa4IStJJTen5y7R59AoEoZzkwbh4qff0Xcqhk7DVJXIDlbvh+
nbgkblcNHHQ/je2K+Be6D4cW3onKTV4hsfWzUgEHE2K8YL+HhnH1mNsJDgss7KwT
noPwto2LIxEQo5dUJn4kULIWRezzS3uC+w3UgFMFeCm33kVHXvpE57GKCh7jPLsc
4tC19aZnQiM2lZAN8DANZJJooOptu2clyvJvnx877Cr4ckPxiIuNJ1rGiaZF3Rbk
LCNcGNUUyG8XCJ9ymM2RvTGQ
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:28:52 2025 by rpki-client