Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/qQrVFVU2zYEeKI_c1sPfgRBsdws.roa
File: qQrVFVU2zYEeKI_c1sPfgRBsdws.roa (raw, json)
Hash identifier: Q0Q6+jTPsyoLSIpvRXxP/rur4NZVUawp72Ly9Y4IL/A=
Subject key identifier: A9:0A:D5:15:55:36:CD:81:1E:28:8F:DC:D6:C3:DF:81:10:6C:77:0B
Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad
Certificate serial: 0194282566017BE27AD55888B841B0A1FC90
Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/qQrVFVU2zYEeKI_c1sPfgRBsdws.roa
Signing time: Thu 02 Jan 2025 17:52:07 +0000
ROA not before: Thu 02 Jan 2025 17:52:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42088
IP address blocks: 185.212.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:66:01:7b:e2:7a:d5:58:88:b8:41:b0:a1:fc:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08af091858bb99651764399c6565df7a0834dbad
Validity
Not Before: Jan 2 17:52:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a90ad5155536cd811e288fdcd6c3df81106c770b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:eb:3a:02:e4:e9:e5:98:3f:25:b2:43:2f:ae:
b5:75:70:6b:a4:c3:61:db:fd:2a:bd:8d:45:cd:4b:
a0:2b:ec:13:bb:cb:80:a0:1b:c9:20:f1:83:9c:20:
c8:63:a8:d4:06:9f:f0:e2:41:0d:6d:bd:1a:dc:ee:
df:27:0c:76:4d:71:85:ba:77:fa:5f:aa:fa:fc:f8:
2e:1c:9a:08:9c:97:9a:bb:1c:36:29:fc:84:96:0b:
15:b8:92:a9:e0:a1:1e:65:99:4b:c2:83:f7:5a:29:
bc:65:89:2b:37:bb:aa:da:d4:38:b3:9e:dc:bd:56:
17:ab:f8:6f:0e:89:50:3b:55:af:b0:59:03:fa:42:
da:17:b1:62:7b:1f:f7:c9:4b:8e:ff:22:81:57:85:
48:91:ea:f1:f1:8f:d0:a1:d4:08:d8:e7:00:a8:56:
8d:6e:a1:bc:7b:17:c7:17:f3:f8:50:b5:c7:e7:01:
ec:88:2f:37:cf:38:e0:d0:d2:bf:83:5c:9d:3e:a8:
8b:b0:9d:ea:39:0d:d5:88:b7:1f:f0:58:8e:6c:06:
da:7d:25:27:2c:67:4a:cf:ed:80:99:39:0f:12:1b:
f9:69:28:d9:e8:0a:95:98:c8:29:66:d4:b8:d1:26:
e9:a2:7d:94:dc:5d:89:03:99:58:f4:34:2d:07:67:
03:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0A:D5:15:55:36:CD:81:1E:28:8F:DC:D6:C3:DF:81:10:6C:77:0B
X509v3 Authority Key Identifier:
keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/qQrVFVU2zYEeKI_c1sPfgRBsdws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.249.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:24:fc:77:08:3b:3b:ef:49:d8:64:a1:28:b3:6e:2c:cd:5f:
7b:50:82:33:c4:de:ea:f9:ee:f1:39:3e:79:69:5d:25:c6:28:
83:bb:f9:c0:5b:3c:b3:5b:2d:c0:2c:2f:65:e8:f3:4d:8b:54:
4e:16:d6:2c:e2:0c:9a:74:59:44:22:6b:93:78:06:d9:9f:96:
4b:5e:93:02:fc:af:60:82:c6:83:2d:30:ca:9d:3b:f4:4d:28:
f8:23:40:c9:c4:07:f7:82:6b:6e:55:20:dc:f1:16:c8:91:75:
09:16:23:60:27:27:75:bf:86:a0:cb:0e:68:be:ce:e8:f4:28:
02:0a:42:ea:6e:0e:0d:88:c4:aa:4b:80:90:e0:3a:41:d0:d5:
04:e1:8e:23:25:6a:77:3d:53:7e:0d:19:53:87:78:98:32:76:
9a:50:3a:a0:e4:c0:ef:fd:c6:bf:70:57:9f:a4:e3:74:ba:af:
b3:4c:78:c0:f3:37:19:5d:a1:b6:db:da:4f:68:5a:32:06:30:
74:dc:0e:10:44:3f:39:be:85:e6:52:87:ec:09:90:c8:76:f4:
62:c5:09:64:a4:f2:d8:fe:1f:9b:bc:fa:07:2b:22:ea:47:9b:
33:76:2e:15:3c:d5:9c:c6:45:78:37:01:f9:0e:ae:27:97:51:
ac:d6:e7:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:51:11 2025 by rpki-client