Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/QzQ8wIBgU1aTUox8R_wcScM_b0Q.roa
File: QzQ8wIBgU1aTUox8R_wcScM_b0Q.roa (raw, json)
Hash identifier: 8kADp8joUQ1YjF42xth+rMM2p06xtZRY82nKAhTzqY8=
Subject key identifier: 43:34:3C:C0:80:60:53:56:93:52:8C:7C:47:FC:1C:49:C3:3F:6F:44
Certificate issuer: /CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7
Certificate serial: 019420D5CF5612F59982EF7D16B2752ADA3F
Authority key identifier: FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/QzQ8wIBgU1aTUox8R_wcScM_b0Q.roa
Signing time: Wed 01 Jan 2025 07:47:50 +0000
ROA not before: Wed 01 Jan 2025 07:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 136162
IP address blocks: 185.175.100.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:cf:56:12:f5:99:82:ef:7d:16:b2:75:2a:da:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff4f06bff3a5b85151b65705b4308e9afb1fd8f7
Validity
Not Before: Jan 1 07:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43343cc08060535693528c7c47fc1c49c33f6f44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:6c:93:5d:3e:6c:40:3f:33:18:32:3b:b9:
48:53:5d:bc:00:26:66:19:f9:72:35:09:90:3e:29:
c0:5d:5e:99:41:86:3c:18:74:4d:23:71:eb:aa:99:
5c:8e:ae:f0:e8:9a:7e:1d:cb:75:17:21:5f:e8:8c:
43:82:7c:f1:63:3d:22:2f:ec:d0:c6:03:51:75:4d:
09:d0:5e:9e:bb:b9:f0:5e:4a:e4:11:66:3d:cc:2e:
79:e7:dd:4c:4e:98:b6:b1:5d:c3:eb:01:40:70:2b:
f1:c4:b2:fd:14:ca:04:22:91:0a:bc:c2:a6:ca:7b:
2b:a3:f3:50:0e:43:c2:dd:97:ea:b7:5b:b7:67:d8:
41:cb:ae:8d:dc:78:ac:b3:8d:4f:19:81:78:99:89:
ce:c8:ca:eb:99:5f:7d:1b:77:74:b6:31:7e:07:62:
a8:93:fb:e7:e7:ed:fa:95:44:3b:18:66:2d:cd:2f:
ca:97:73:5e:9a:b9:59:e2:3d:c0:4c:f6:16:a8:42:
fc:8b:ea:55:64:4c:7c:f8:f6:ef:d8:88:9b:f4:3c:
f8:1c:a7:53:ef:1e:e5:89:d7:53:f6:ad:08:83:bf:
de:be:71:bc:ad:4b:a6:aa:ec:f8:90:9d:52:1e:8f:
99:0f:a7:49:48:2e:3d:80:97:c3:1c:14:f9:da:eb:
fe:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:34:3C:C0:80:60:53:56:93:52:8C:7C:47:FC:1C:49:C3:3F:6F:44
X509v3 Authority Key Identifier:
keyid:FF:4F:06:BF:F3:A5:B8:51:51:B6:57:05:B4:30:8E:9A:FB:1F:D8:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_08Gv_OluFFRtlcFtDCOmvsf2Pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/QzQ8wIBgU1aTUox8R_wcScM_b0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/2fb8bd-e1a0-454c-8bca-25effdd796dc/1/_08Gv_OluFFRtlcFtDCOmvsf2Pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.100.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:21:5e:ac:9b:10:ba:e0:fd:f1:b1:30:be:83:7d:43:58:b3:
0a:b8:e4:a5:b3:fe:e0:bd:e0:2f:b2:88:00:4a:52:d6:a5:1d:
74:f6:68:89:26:6a:3a:d6:ec:1a:e2:8a:6e:8f:4a:53:70:1e:
07:77:01:71:d3:d8:86:36:ea:15:c8:65:cd:b6:55:d8:e0:25:
2d:59:b0:9a:1c:5b:ff:1e:80:3d:8d:23:94:1d:16:a7:88:25:
f2:00:a6:4e:91:30:20:20:e0:6e:1a:dd:af:02:23:65:44:a2:
ee:8b:f1:0d:27:79:dc:35:91:ec:29:0c:0c:a6:19:74:8a:8d:
f4:6f:d1:03:ae:7a:f2:dc:3a:18:11:40:52:01:30:ac:8b:67:
c2:97:c0:56:53:65:f9:92:c0:d1:ee:ee:b4:56:38:0e:44:78:
53:87:00:e8:e1:43:35:d3:b4:b8:7d:54:33:aa:76:09:de:7a:
5c:86:35:c6:28:e1:c8:4c:86:96:00:6f:83:1b:26:07:09:93:
7c:78:a4:6a:9e:40:3e:38:21:c4:b1:a1:e3:38:21:a0:f2:f9:
30:3c:3a:d3:5b:9d:8b:ea:eb:e5:bb:9c:35:72:41:1e:05:a8:
e4:fe:82:97:4a:3e:a9:62:ec:9b:b0:78:bd:d5:40:ae:7e:02:
75:0b:1b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:46:31 2025 by rpki-client