Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/cQexL6krMjfc-1q8FYIof7PMMrw.roa
File: cQexL6krMjfc-1q8FYIof7PMMrw.roa (raw, json)
Hash identifier: C8+OwS0ajCdtALbwYVsZUHXZFfWLyCs4+m/HFUeB+J0=
Subject key identifier: 71:07:B1:2F:A9:2B:32:37:DC:FB:5A:BC:15:82:28:7F:B3:CC:32:BC
Certificate issuer: /CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Certificate serial: 01942444B7D7CD90E2FA92577C75E7A4C593
Authority key identifier: A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/cQexL6krMjfc-1q8FYIof7PMMrw.roa
Signing time: Wed 01 Jan 2025 23:47:50 +0000
ROA not before: Wed 01 Jan 2025 23:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47915
IP address blocks: 85.204.118.0/24 maxlen: 24
86.104.211.0/24 maxlen: 24
89.39.89.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:b7:d7:cd:90:e2:fa:92:57:7c:75:e7:a4:c5:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2ddaeb164e398214a171a0410e6b0232d642f50
Validity
Not Before: Jan 1 23:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7107b12fa92b3237dcfb5abc1582287fb3cc32bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:df:5b:60:bc:ca:da:3e:77:8f:28:12:e9:82:
7b:37:04:ed:b3:52:58:94:d0:04:46:be:d2:96:ff:
7a:87:9a:8b:b9:f8:10:37:bc:d7:1d:8c:6a:60:5e:
12:91:5a:9f:e1:d3:5e:43:1b:be:48:20:00:47:d2:
ea:5e:f3:63:42:30:b0:1c:14:fb:85:17:8a:a5:e4:
76:f9:01:b4:d3:5d:a0:26:3b:a3:a1:28:47:bd:55:
94:17:9f:47:f5:b8:03:d0:64:ab:e0:c9:bf:cc:ef:
1d:07:e3:63:a4:61:88:f5:7f:14:a0:b6:cc:71:89:
7f:eb:80:f3:61:19:34:58:fb:22:e6:75:7e:da:1c:
49:3d:aa:3f:9d:b9:ab:4a:38:04:c7:c8:27:95:61:
a0:89:63:f1:05:6d:ff:75:bf:fc:8b:03:12:a8:36:
35:bb:19:20:07:ec:29:9e:8a:00:22:bc:cb:18:d9:
14:cb:df:06:5d:20:af:54:d3:6b:e3:81:84:c7:05:
35:32:d9:45:1e:17:2b:4b:de:b9:1f:0d:3f:36:83:
b3:47:9e:3c:5a:e0:69:11:e5:9b:f1:26:4a:4e:93:
b2:d2:bf:98:49:2c:06:78:29:38:b1:0f:94:0d:99:
85:94:86:f7:e2:d9:bd:c4:00:98:8c:ce:fc:ed:89:
1c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:07:B1:2F:A9:2B:32:37:DC:FB:5A:BC:15:82:28:7F:B3:CC:32:BC
X509v3 Authority Key Identifier:
keyid:A2:DD:AE:B1:64:E3:98:21:4A:17:1A:04:10:E6:B0:23:2D:64:2F:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ot2usWTjmCFKFxoEEOawIy1kL1A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/cQexL6krMjfc-1q8FYIof7PMMrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/4afda7-829c-4880-a0c9-112e113bb7b7/1/ot2usWTjmCFKFxoEEOawIy1kL1A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.118.0/24
86.104.211.0/24
89.39.89.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:9c:5b:fb:84:2a:ef:80:dc:06:54:ea:21:c7:75:3c:ee:7e:
1c:f5:9d:35:ca:57:5c:67:29:85:2b:6e:5e:32:38:4a:e1:76:
e6:6a:21:24:53:f7:27:42:b5:50:b3:17:dc:d2:ba:09:35:b4:
c2:f5:8a:ed:da:61:5c:dc:a1:40:f3:1f:dd:a2:95:36:95:f1:
cc:33:2f:63:60:bf:d7:44:3d:35:2d:e8:56:ce:64:d8:28:44:
6b:d3:b9:28:e3:83:8d:5d:f9:87:64:d6:26:f3:2f:e4:31:73:
15:ca:8c:d7:43:ba:98:45:a8:e9:2b:5b:3d:db:57:e2:75:79:
cd:68:61:53:16:a9:45:4b:a9:dc:d5:6b:0a:67:9b:1e:80:21:
36:c1:82:44:f0:51:af:3f:52:73:53:26:dc:72:f2:56:ae:9e:
58:d1:a6:68:75:4a:3e:8b:c8:42:6a:b7:1d:12:c0:df:c9:2c:
96:48:b4:b2:0d:05:15:56:b0:65:07:4c:cf:41:91:0d:91:34:
fd:ce:a6:10:df:fb:0e:c4:2a:14:02:2a:ea:7d:7a:d9:1e:6f:
86:0d:f5:62:19:70:da:63:e0:19:27:ab:da:5a:ef:cc:7f:00:
bb:a2:52:b1:e8:fb:c7:ca:66:c8:44:cb:a5:b8:d2:16:2e:18:
24:cb:d3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:28:56 2025 by rpki-client