Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/SqFe-cWi6-iuKHUgb_m1Od04B6Y.roa
File: SqFe-cWi6-iuKHUgb_m1Od04B6Y.roa (raw, json)
Hash identifier: QKYfs6L7HU/TNy2t5ocVbl92D+JzHPwHNGR0aW+E4qk=
Subject key identifier: 4A:A1:5E:F9:C5:A2:EB:E8:AE:28:75:20:6F:F9:B5:39:DD:38:07:A6
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 388EC9AB
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/SqFe-cWi6-iuKHUgb_m1Od04B6Y.roa
Signing time: Sat 01 Jan 2022 05:54:24 +0000
ROA not before: Sat 01 Jan 2022 05:54:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200709
IP address blocks: 85.254.72.0/24 maxlen: 24
159.148.186.0/24 maxlen: 24
2a02:610:fffa::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 948881835 (0x388ec9ab)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 05:54:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4aa15ef9c5a2ebe8ae2875206ff9b539dd3807a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:99:5d:be:2c:35:25:dc:e1:4e:0e:3c:53:47:
18:e4:af:ea:c3:c9:ff:cc:fd:45:4a:92:39:f9:16:
10:1c:8c:01:f6:79:86:eb:46:fa:ff:3f:2a:f5:bc:
4d:d4:2e:c6:4b:ba:25:32:d2:82:6b:1c:c7:9b:e7:
cf:3b:a4:0a:a7:a5:b6:0b:e5:e0:3b:dd:f6:e9:e6:
0e:e0:fb:f7:d8:8f:51:a3:fb:b9:07:a5:7d:1e:d3:
14:eb:1a:c3:d3:8e:21:7b:f9:2f:84:94:20:f2:99:
a6:2e:0f:3f:01:90:0b:b8:36:60:12:a6:ee:ec:e8:
df:81:1d:ec:03:24:4a:13:39:ea:b7:3a:38:15:32:
94:b3:9f:4d:86:7c:4b:dd:51:27:11:c7:04:38:c5:
a2:35:77:91:1d:ed:98:80:63:40:ba:6d:06:f4:4b:
4e:b9:9d:9c:c8:9b:6f:3c:c1:c4:f3:75:d6:25:0e:
9d:7b:74:14:a4:b9:66:05:6a:85:d5:2a:70:86:a9:
fe:94:14:da:72:3b:e0:f4:69:5f:19:fb:dc:d9:2d:
66:57:d3:29:6e:d7:b3:48:25:58:d9:6a:11:e2:89:
97:47:d1:36:37:a0:22:8f:ad:17:76:b2:a1:67:19:
59:d2:78:6f:8e:70:83:30:11:32:39:fa:b3:e2:a0:
0f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A1:5E:F9:C5:A2:EB:E8:AE:28:75:20:6F:F9:B5:39:DD:38:07:A6
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/SqFe-cWi6-iuKHUgb_m1Od04B6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.72.0/24
159.148.186.0/24
IPv6:
2a02:610:fffa::/48
Signature Algorithm: sha256WithRSAEncryption
2b:83:3b:99:ad:f5:11:ab:cb:fc:96:39:31:00:a8:95:0d:c2:
9e:b7:cf:3c:22:61:7f:78:e9:5d:65:a5:15:c3:93:da:bf:71:
e4:4c:65:6c:40:55:10:d1:91:14:52:fe:5e:07:fd:3b:03:d3:
8e:4f:9a:67:7b:76:55:db:47:3b:2f:bc:cd:df:ba:c9:a6:d4:
cd:6a:01:38:c4:b3:7f:10:7b:80:bc:eb:4b:f8:2f:5b:8c:fe:
a5:ee:6a:d1:fa:f6:65:66:e9:43:52:e7:d2:3c:6a:e2:de:7c:
83:15:bc:d7:62:96:07:d6:cf:b9:26:f1:3b:53:19:4b:31:8a:
da:e2:2b:90:3f:00:7d:07:e8:d2:48:1e:32:18:d2:b8:5e:51:
c5:fd:da:9c:f3:70:a3:3b:d5:f8:dd:a7:32:0f:01:77:0f:d8:
f4:61:9b:77:cb:df:7f:9d:9c:70:d5:a8:65:6a:b4:f0:af:d6:
3f:2a:27:89:a1:53:33:e5:b8:a1:82:ac:70:bf:70:d4:4e:0d:
74:f6:d1:ef:02:f9:aa:e4:c1:85:a9:95:cc:74:78:12:81:11:
3b:77:f3:fa:cf:d5:ce:80:35:88:08:56:21:59:79:ea:be:6a:
60:15:1a:b4:3c:d5:20:d5:a3:97:05:4b:10:7d:93:a6:d8:ad:
62:c5:70:6c
-----BEGIN CERTIFICATE-----
MIIFBjCCA+6gAwIBAgIEOI7JqzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YjA5NTJjOGJhOGRhZGIxZDM0ZGU2YzZhOTM4NjRhNjA5ZmM0MWVjMB4XDTIyMDEw
MTA1NTQyNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNGFhMTVlZjljNWEy
ZWJlOGFlMjg3NTIwNmZmOWI1MzlkZDM4MDdhNjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKmZXb4sNSXc4U4OPFNHGOSv6sPJ/8z9RUqSOfkWEByMAfZ5
hutG+v8/KvW8TdQuxku6JTLSgmscx5vnzzukCqeltgvl4Dvd9unmDuD799iPUaP7
uQelfR7TFOsaw9OOIXv5L4SUIPKZpi4PPwGQC7g2YBKm7uzo34Ed7AMkShM56rc6
OBUylLOfTYZ8S91RJxHHBDjFojV3kR3tmIBjQLptBvRLTrmdnMibbzzBxPN11iUO
nXt0FKS5ZgVqhdUqcIap/pQU2nI74PRpXxn73NktZlfTKW7Xs0glWNlqEeKJl0fR
NjegIo+tF3ayoWcZWdJ4b45wgzARMjn6s+KgD2UCAwEAAaOCAiAwggIcMB0GA1Ud
DgQWBBRKoV75xaLr6K4odSBv+bU53TgHpjAfBgNVHSMEGDAWgBSrCVLIuo2tsdNN
5sapOGSmCfxB7DAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3F3bFN5THFOcmJIVFRlYkdxVGhrcGduOFFldy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMGUvMzU1NWZlLTEyY2QtNDAyYS1hODEwLTU1NTRkNmUxNjg2Zi8x
L1NxRmUtY1dpNi1pdUtIVWdiX20xT2QwNEI2WS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMGUv
MzU1NWZlLTEyY2QtNDAyYS1hODEwLTU1NTRkNmUxNjg2Zi8xL3F3bFN5THFOcmJI
VFRlYkdxVGhrcGduOFFldy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA2
BggrBgEFBQcBBwEB/wQnMCUwEgQCAAEwDAMEAFX+SAMEAJ+UujAPBAIAAjAJAwcA
KgIGEP/6MA0GCSqGSIb3DQEBCwUAA4IBAQArgzuZrfURq8v8ljkxAKiVDcKet888
ImF/eOldZaUVw5Pav3HkTGVsQFUQ0ZEUUv5eB/07A9OOT5pne3ZV20c7L7zN37rJ
ptTNagE4xLN/EHuAvOtL+C9bjP6l7mrR+vZlZulDUufSPGri3nyDFbzXYpYH1s+5
JvE7UxlLMYra4iuQPwB9B+jSSB4yGNK4XlHF/dqc83CjO9X43acyDwF3D9j0YZt3
y99/nZxw1ahlarTwr9Y/KieJoVMz5bihgqxwv3DUTg109tHvAvmq5MGFqZXMdHgS
gRE7d/P6z9XOgDWICFYhWXnqvmpgFRq0PNUg1aOXBUsQfZOm2K1ixXBs
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:25:36 2025 by rpki-client