Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qA-1NLfD74MlGWxt7HaBJLFKBNo.roa
File: qA-1NLfD74MlGWxt7HaBJLFKBNo.roa (raw, json)
Hash identifier: JC7YNkJkuzUTMklBDuK3N08xN7nTeL6CTAl8GpDXbHE=
Subject key identifier: A8:0F:B5:34:B7:C3:EF:83:25:19:6C:6D:EC:76:81:24:B1:4A:04:DA
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 3878E5C7
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qA-1NLfD74MlGWxt7HaBJLFKBNo.roa
Signing time: Sat 01 Jan 2022 05:54:13 +0000
ROA not before: Sat 01 Jan 2022 05:54:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 15899
IP address blocks: 85.254.140.0/24 maxlen: 24
159.148.123.0/24 maxlen: 24
159.148.239.0/24 maxlen: 24
85.254.9.0/24 maxlen: 24
85.254.10.0/24 maxlen: 24
85.254.8.0/24 maxlen: 24
85.254.11.0/24 maxlen: 24
85.254.13.0/24 maxlen: 24
85.254.12.0/24 maxlen: 24
85.254.14.0/24 maxlen: 24
85.254.15.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 947447239 (0x3878e5c7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 05:54:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a80fb534b7c3ef8325196c6dec768124b14a04da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:d6:38:44:a9:b7:0e:e9:dd:78:96:f4:56:ef:
5f:82:20:0f:c4:81:9c:46:82:a6:51:1c:30:a4:72:
05:0d:a0:03:e8:9e:4e:18:80:e2:75:0e:f2:d4:d4:
3b:20:71:8f:5a:6f:4a:36:3c:0b:56:12:6a:a8:89:
63:75:c2:59:d1:9b:8e:0f:56:aa:81:bb:9a:75:c8:
42:d7:e5:01:5d:98:19:7e:48:b9:2d:d4:d7:4d:93:
3d:80:13:fb:3d:b9:0d:53:27:8f:b3:55:68:ae:d2:
19:4e:d6:b0:ce:12:53:df:70:fe:0a:b4:bf:12:b2:
aa:04:75:82:03:7e:67:64:da:b2:36:2f:09:cf:6f:
1c:b2:71:80:0c:d1:91:03:c5:86:bf:1f:39:ee:46:
c9:c7:62:a5:7e:ab:0a:3a:18:52:fd:02:54:91:0f:
d3:9a:ca:68:f1:2e:c2:c5:63:0d:0a:14:92:b0:c0:
61:11:2d:03:60:10:46:75:bf:50:9b:7e:18:c1:a0:
ee:44:da:ff:41:28:17:7b:10:a5:27:3d:89:3c:ec:
16:89:fc:77:75:1a:df:b7:eb:63:52:b5:22:14:ad:
d9:08:5e:39:cc:66:00:ab:6a:f0:92:2b:5c:ec:32:
a7:26:59:c5:d2:6d:4e:bb:72:75:bc:bf:b9:ff:71:
6d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0F:B5:34:B7:C3:EF:83:25:19:6C:6D:EC:76:81:24:B1:4A:04:DA
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qA-1NLfD74MlGWxt7HaBJLFKBNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.8.0/21
85.254.140.0/24
159.148.123.0/24
159.148.239.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:33:ce:db:78:8d:76:53:ff:61:e4:e0:72:8a:4f:1f:5b:ef:
86:86:7c:f2:0c:ed:d2:b3:8e:ba:75:b1:ff:fe:7b:cd:8b:35:
63:17:e5:19:ea:28:86:fe:aa:31:39:f1:20:fe:22:98:69:fb:
6c:5c:58:14:3d:69:c4:bc:e6:e4:5e:67:7f:10:8f:7a:b3:e9:
12:3d:54:1e:0e:e2:43:3d:69:34:df:e9:f8:99:46:03:f7:d8:
a1:1a:40:df:ae:84:6e:09:7e:31:ad:b8:9e:f5:d7:9a:e6:a7:
99:98:db:0b:8d:5f:99:5e:28:35:bf:73:68:cc:2c:4d:02:84:
12:f7:74:93:ac:1b:92:30:f9:64:5a:ca:c2:f2:fa:5b:f4:90:
4a:98:9f:66:00:9f:a4:8f:50:15:f7:93:82:70:e5:25:77:68:
ca:19:df:4e:65:4c:af:0b:be:29:bc:ad:50:a9:f6:ea:b0:c3:
b3:92:78:9e:08:6d:e7:d7:60:1d:78:e4:4a:a7:1d:27:b8:d7:
c3:d4:35:da:84:9f:c7:c0:eb:41:f0:3d:20:47:09:a2:4e:27:
37:06:2f:98:87:ff:ed:92:0a:6c:f8:34:38:6e:ae:2e:5b:dd:
1c:93:b3:76:eb:83:68:47:0a:df:95:2e:75:d4:53:f6:31:a7:
15:39:4b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:26:29 2025 by rpki-client