Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/zqrI9zFEYsh3psqm33-hvpJ3Zeo.roa
File: zqrI9zFEYsh3psqm33-hvpJ3Zeo.roa (raw, json)
Hash identifier: u+uK7Yhm9OY6tW2paZGMVNaIcQPxwSqykT+lN4CLyn8=
Subject key identifier: CE:AA:C8:F7:31:44:62:C8:77:A6:CA:A6:DF:7F:A1:BE:92:77:65:EA
Certificate issuer: /CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Certificate serial: 019424B3CE906BB70238F3D59C7E30D797BE
Authority key identifier: AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/zqrI9zFEYsh3psqm33-hvpJ3Zeo.roa
Signing time: Thu 02 Jan 2025 01:49:11 +0000
ROA not before: Thu 02 Jan 2025 01:49:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 185.55.188.0/24 maxlen: 24
185.55.190.0/24 maxlen: 24
185.55.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ce:90:6b:b7:02:38:f3:d5:9c:7e:30:d7:97:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa9c9c95a58c3811bda95dc83c2e487a200c4c25
Validity
Not Before: Jan 2 01:49:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ceaac8f7314462c877a6caa6df7fa1be927765ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:62:f4:80:e3:5b:21:63:90:e7:fd:46:9a:43:
97:da:04:af:72:b0:4b:f0:11:a6:2c:0e:4f:93:f0:
f3:79:fa:49:65:2d:6f:48:dd:b7:63:32:bb:01:d3:
c5:65:81:c6:09:7f:8a:52:84:a4:ad:4f:ef:c8:d3:
45:66:1d:d3:c0:2d:d7:95:24:e2:2c:e1:37:6e:a4:
e2:a9:d5:45:7c:a5:7c:24:a2:25:e3:14:22:20:1d:
97:4e:62:24:e3:19:f7:97:91:58:ba:58:6a:ce:bc:
4b:9e:5d:51:07:0e:4d:fb:e2:9c:23:da:a5:74:f0:
59:09:74:8c:53:27:8a:6f:88:ce:89:e9:dc:07:31:
29:78:29:12:b3:2e:01:c2:a4:8d:d8:7a:51:ff:85:
ac:43:c6:97:e0:08:94:c4:e0:ab:a5:31:6f:bb:ed:
fc:66:bb:f7:c9:66:64:48:24:6f:f3:57:e0:b7:c8:
ca:aa:0b:1e:50:94:76:69:36:96:68:f8:f2:b5:86:
f5:02:40:7e:18:98:24:52:04:0d:b9:79:78:02:1b:
2c:69:ca:fc:29:be:b7:53:84:76:84:d7:f1:f0:da:
64:3a:cc:67:2d:c8:d4:ea:40:5c:3e:55:82:a7:0a:
7f:ff:d2:24:d1:9f:29:bf:a0:de:bb:a3:1d:b3:36:
e9:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:AA:C8:F7:31:44:62:C8:77:A6:CA:A6:DF:7F:A1:BE:92:77:65:EA
X509v3 Authority Key Identifier:
keyid:AA:9C:9C:95:A5:8C:38:11:BD:A9:5D:C8:3C:2E:48:7A:20:0C:4C:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qpyclaWMOBG9qV3IPC5IeiAMTCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/zqrI9zFEYsh3psqm33-hvpJ3Zeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/75a22e-ae95-4e93-943a-41a0676edd61/1/qpyclaWMOBG9qV3IPC5IeiAMTCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.55.188.0/24
185.55.190.0/23
Signature Algorithm: sha256WithRSAEncryption
a9:41:46:9b:24:fb:9d:bd:c1:91:15:5e:d2:0a:35:3e:f6:23:
21:7d:ed:3b:77:5e:aa:d4:35:98:9f:a5:3f:ca:14:88:de:01:
6e:30:ba:b1:73:1a:11:ea:a2:18:b4:d9:8b:85:39:0e:72:4d:
a4:e3:09:6b:0c:34:62:08:46:9a:48:35:15:28:a0:04:28:98:
8b:34:a2:4f:f8:12:a6:fa:a7:f9:1c:d5:c3:3c:11:cf:fc:6d:
b3:1c:fb:ed:4f:50:92:d8:42:73:73:db:52:be:d9:5d:cb:29:
80:9d:5f:9e:53:38:d1:1b:14:7e:3a:23:09:8a:b5:89:8c:2d:
1a:d5:33:9a:43:30:c7:0c:ec:b5:02:fd:30:fa:25:fc:ea:c2:
a5:9b:72:66:65:ed:43:c3:21:47:cb:c3:8d:66:08:dc:34:b4:
f4:ed:e2:ea:a2:6e:94:7f:87:b2:8c:cc:ce:68:9d:cf:e6:8c:
89:88:62:55:ef:52:32:4e:86:07:09:04:1c:09:dc:2f:ab:e3:
5a:d6:70:d7:af:51:58:28:43:ed:53:63:88:cd:e9:39:02:af:
17:bb:d2:5e:ef:c9:1e:53:94:92:6a:ea:7d:13:df:53:8e:83:
ed:3f:1a:91:10:fc:04:76:b9:2a:14:8f:53:9b:65:79:b9:34:
bf:a5:ee:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:45:12 2025 by rpki-client