Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/q-7o-VTmQktM6CANooQxHGpfUPs.roa
File: q-7o-VTmQktM6CANooQxHGpfUPs.roa (raw, json)
Hash identifier: nkRO+yCLAt1MadmnWmx2ah2ZlpvxH2J3hDHN33uCuqM=
Subject key identifier: AB:EE:E8:F9:54:E6:42:4B:4C:E8:20:0D:A2:84:31:1C:6A:5F:50:FB
Certificate issuer: /CN=eab9a157e12a2ef717d13231af06fd85454b3151
Certificate serial: 01941FFA3EB73DB61A1B87533B122B0EE6F9
Authority key identifier: EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/q-7o-VTmQktM6CANooQxHGpfUPs.roa
Signing time: Wed 01 Jan 2025 03:48:01 +0000
ROA not before: Wed 01 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198622
IP address blocks: 37.157.0.0/21 maxlen: 24
185.84.60.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:3e:b7:3d:b6:1a:1b:87:53:3b:12:2b:0e:e6:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eab9a157e12a2ef717d13231af06fd85454b3151
Validity
Not Before: Jan 1 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abeee8f954e6424b4ce8200da284311c6a5f50fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:da:29:08:27:27:6c:ac:43:0b:a8:ab:af:79:
97:29:2d:05:dc:47:2e:90:56:59:13:51:48:16:8d:
96:28:85:4d:a1:f1:1d:f0:fa:52:1d:e3:90:e8:a1:
0f:75:d2:b9:f7:58:ca:29:8c:9b:9d:93:be:14:e7:
1b:0d:31:71:c6:cb:3e:46:4a:df:29:42:42:43:ac:
29:54:a3:b8:cc:ca:59:de:0d:1f:ed:a6:a1:cf:9e:
c9:63:d5:3f:a3:67:d8:e6:75:49:fb:8e:be:77:f3:
ff:b5:d9:2d:f3:ad:e7:ab:6f:68:40:36:5b:46:b4:
1e:e4:08:88:de:a1:10:0d:ec:b5:42:6d:b2:53:db:
b1:0a:45:69:e5:98:9c:4b:ff:e5:d6:d9:a4:ee:9b:
13:7d:81:a9:d3:f9:3b:56:28:58:ba:89:49:e4:60:
fc:b8:a6:9f:1c:4c:c0:3f:fa:90:d8:ca:3d:f0:67:
1d:90:98:7c:c1:24:29:b2:5d:27:0f:6e:b7:b2:b2:
b5:19:21:a0:5a:9a:53:5c:6c:e6:6c:d2:a8:2f:e9:
c2:37:65:f4:d5:8f:74:54:3c:cf:77:e2:9d:95:ae:
68:05:ad:d3:4c:1a:a9:62:e6:f1:08:f9:60:f9:fb:
24:f7:05:c3:5f:8b:ba:8a:b1:05:e7:24:cb:d4:ba:
c7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EE:E8:F9:54:E6:42:4B:4C:E8:20:0D:A2:84:31:1C:6A:5F:50:FB
X509v3 Authority Key Identifier:
keyid:EA:B9:A1:57:E1:2A:2E:F7:17:D1:32:31:AF:06:FD:85:45:4B:31:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6rmhV-EqLvcX0TIxrwb9hUVLMVE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/q-7o-VTmQktM6CANooQxHGpfUPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/4db770-d7f5-4bcb-ba44-857712720a35/1/6rmhV-EqLvcX0TIxrwb9hUVLMVE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.0.0/21
185.84.60.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:ea:be:76:c0:ed:3b:be:00:3e:68:74:db:03:6b:32:c0:61:
3b:ef:e7:91:cc:40:1e:ac:e3:11:c2:19:9c:0b:e8:4c:56:91:
a8:4c:92:6d:55:05:ff:d9:86:6a:08:fb:83:ad:60:45:67:48:
a4:6c:7c:19:36:9c:a0:8b:3f:30:a5:09:2d:c6:93:70:3d:71:
0a:23:0e:e6:be:e5:f4:49:5d:e8:11:7a:19:8f:41:48:10:57:
03:ee:74:cd:b4:50:ce:5b:3d:3f:5b:46:4f:34:6c:d8:25:66:
c6:59:11:ca:5f:6b:23:3d:6d:8c:6e:55:b4:54:a7:b0:bc:e2:
a2:b6:8e:4d:bb:20:38:d5:a9:46:d1:e9:56:bd:49:8d:23:ee:
2d:35:c6:bf:00:b3:53:25:0f:1e:47:02:17:32:21:3a:12:eb:
71:bc:82:62:81:7e:30:4a:0f:13:24:cc:6c:37:50:50:87:31:
2d:6a:2d:bf:3a:79:0d:01:63:ff:87:8b:a3:cb:d0:ec:22:1e:
23:5a:ad:ff:30:a6:5b:8d:3b:ca:e7:b8:5e:0a:ea:39:0c:e3:
1d:6d:f2:88:f9:22:7b:d8:af:00:82:b3:3a:a2:1b:73:78:8a:
e9:e6:75:cd:aa:9b:70:5a:36:93:03:5e:e9:46:16:68:9e:a9:
c2:88:27:d7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQf+j63PbYaG4dTOxIrDub5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhYjlhMTU3ZTEyYTJlZjcxN2QxMzIzMWFmMDZmZDg1NDU0
YjMxNTEwHhcNMjUwMTAxMDM0ODAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmVlZThmOTU0ZTY0MjRiNGNlODIwMGRhMjg0MzExYzZhNWY1MGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9opCCcnbKxDC6irr3mXKS0F3Ecu
kFZZE1FIFo2WKIVNofEd8PpSHeOQ6KEPddK591jKKYybnZO+FOcbDTFxxss+Rkrf
KUJCQ6wpVKO4zMpZ3g0f7aahz57JY9U/o2fY5nVJ+46+d/P/tdkt863nq29oQDZb
RrQe5AiI3qEQDey1Qm2yU9uxCkVp5ZicS//l1tmk7psTfYGp0/k7VihYuolJ5GD8
uKafHEzAP/qQ2Mo98GcdkJh8wSQpsl0nD263srK1GSGgWppTXGzmbNKoL+nCN2X0
1Y90VDzPd+Kdla5oBa3TTBqpYubxCPlg+fsk9wXDX4u6irEF5yTL1LrH6wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKvu6PlU5kJLTOggDaKEMRxqX1D7MB8GA1UdIwQY
MBaAFOq5oVfhKi73F9EyMa8G/YVFSzFRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnJtaFYtRXFMdmNYMFRJeHJ3YjloVVZMTVZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80ZGI3NzAtZDdmNS00YmNiLWJhNDQt
ODU3NzEyNzIwYTM1LzEvcS03by1WVG1Ra3RNNkNBTm9vUXhIR3BmVVBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80ZGI3NzAtZDdmNS00YmNiLWJhNDQtODU3NzEyNzIwYTM1
LzEvNnJtaFYtRXFMdmNYMFRJeHJ3YjloVVZMTVZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDJZ0AAwQC
uVQ8MA0GCSqGSIb3DQEBCwUAA4IBAQAK6r52wO07vgA+aHTbA2sywGE77+eRzEAe
rOMRwhmcC+hMVpGoTJJtVQX/2YZqCPuDrWBFZ0ikbHwZNpygiz8wpQktxpNwPXEK
Iw7mvuX0SV3oEXoZj0FIEFcD7nTNtFDOWz0/W0ZPNGzYJWbGWRHKX2sjPW2MblW0
VKewvOKito5NuyA41alG0elWvUmNI+4tNca/ALNTJQ8eRwIXMiE6EutxvIJigX4w
Sg8TJMxsN1BQhzEtai2/OnkNAWP/h4ujy9DsIh4jWq3/MKZbjTvK57heCuo5DOMd
bfKI+SJ72K8AgrM6ohtzeIrp5nXNqptwWjaTA17pRhZonqnCiCfX
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:52:15 2025 by rpki-client