Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/qehwZ-5ZPLbGxsJ5dw18WkoK3Zk.roa
File: qehwZ-5ZPLbGxsJ5dw18WkoK3Zk.roa (raw, json)
Hash identifier: 8gjFPbJW7dVwtI9fHswSjjysn5cF6HSMFKylRSUUDrw=
Subject key identifier: A9:E8:70:67:EE:59:3C:B6:C6:C6:C2:79:77:0D:7C:5A:4A:0A:DD:99
Certificate issuer: /CN=99ea05fe601cb6801af83793e063f79e3940f030
Certificate serial: 0194221FEFB00C0B9792F6C00936165FE3A7
Authority key identifier: 99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/qehwZ-5ZPLbGxsJ5dw18WkoK3Zk.roa
Signing time: Wed 01 Jan 2025 13:48:25 +0000
ROA not before: Wed 01 Jan 2025 13:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58010
IP address blocks: 185.98.184.0/24 maxlen: 24
185.98.185.0/24 maxlen: 24
185.98.186.0/24 maxlen: 24
185.98.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ef:b0:0c:0b:97:92:f6:c0:09:36:16:5f:e3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ea05fe601cb6801af83793e063f79e3940f030
Validity
Not Before: Jan 1 13:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9e87067ee593cb6c6c6c279770d7c5a4a0add99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:5b:fb:77:0f:9b:61:00:93:9a:f5:5c:37:c2:
5d:b9:16:7d:c5:ac:35:18:62:73:d1:9a:f0:af:a5:
33:93:f1:f5:6c:15:c6:1f:c6:1d:08:9d:1b:df:84:
a6:e5:21:c1:23:99:1b:3b:d5:f1:a8:cb:10:87:63:
d9:cc:95:31:83:9a:b5:f6:34:10:ef:b3:12:8a:3e:
8e:f9:40:86:b1:e5:ff:3c:32:40:0b:99:39:05:d4:
59:d9:df:0e:57:ab:e7:8f:9a:dc:86:0f:80:cc:9c:
b3:0a:27:29:10:06:2f:b7:ad:e0:40:66:87:c4:3f:
c3:15:6a:4d:db:55:30:09:25:2f:fe:18:a8:25:e4:
25:71:7e:be:e2:43:b7:48:e3:98:a2:69:a1:eb:5d:
3f:fe:f6:74:eb:01:6d:be:e1:72:98:26:be:14:17:
1d:01:57:c9:19:77:53:97:b3:3d:3f:50:06:05:a9:
09:45:da:c9:45:4d:73:82:e0:ed:cc:ff:67:63:dd:
4d:ee:32:72:d2:03:a5:eb:e6:f8:7f:b4:5b:74:f4:
1d:0f:29:95:11:a8:62:7f:51:23:f5:82:d2:2e:b3:
38:a2:82:c0:d5:ff:c8:95:99:da:f3:43:1b:59:27:
fd:3a:a0:da:b0:63:23:35:7f:23:b6:c8:90:bd:be:
c8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E8:70:67:EE:59:3C:B6:C6:C6:C2:79:77:0D:7C:5A:4A:0A:DD:99
X509v3 Authority Key Identifier:
keyid:99:EA:05:FE:60:1C:B6:80:1A:F8:37:93:E0:63:F7:9E:39:40:F0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/meoF_mActoAa-DeT4GP3njlA8DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/qehwZ-5ZPLbGxsJ5dw18WkoK3Zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/9c0a69-e44c-48da-b763-37cfd4a64ff1/1/meoF_mActoAa-DeT4GP3njlA8DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.184.0/22
Signature Algorithm: sha256WithRSAEncryption
a9:9e:9a:7f:37:7c:01:61:b8:04:04:9e:7f:8a:48:c7:8f:38:
4c:1e:50:75:52:62:f2:55:3d:87:f6:ce:41:8c:65:4b:a9:4c:
13:44:51:6f:c8:1b:c0:90:b2:50:da:78:7e:37:4d:24:7e:5d:
04:11:01:21:de:6c:77:1a:db:fb:26:5e:fc:3a:e4:37:b7:c8:
06:57:31:e7:0a:f2:87:4d:00:55:63:cd:a0:bf:16:ab:f4:6f:
35:8b:28:79:29:0d:82:e1:c5:18:e0:3e:42:d4:49:1d:cd:47:
c9:f4:6c:ab:42:13:a3:fe:e4:40:db:40:e7:83:58:27:b4:70:
11:8c:86:41:89:02:cf:df:a5:92:95:1a:af:a8:49:08:56:2d:
93:8b:d3:6d:38:9a:c7:7c:9d:ec:e3:45:a2:a0:23:7c:ba:2a:
00:89:be:dd:d2:13:39:97:eb:87:9b:8f:0a:68:fd:28:c6:05:
dc:7e:c6:cd:8d:eb:fd:ad:e2:da:74:a9:45:39:29:6d:49:0b:
80:fb:ef:49:03:06:a7:87:56:84:c4:9a:eb:5a:c4:e8:2a:52:
86:74:f5:a2:ca:8d:94:39:27:a4:05:00:5d:32:45:55:e1:7c:
8e:62:a2:e8:a5:81:ff:b0:ea:0f:18:fc:89:fe:2b:72:f3:65:
10:6d:fb:40
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH++wDAuXkvbACTYWX+OnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZWEwNWZlNjAxY2I2ODAxYWY4Mzc5M2UwNjNmNzllMzk0
MGYwMzAwHhcNMjUwMTAxMTM0ODI1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWU4NzA2N2VlNTkzY2I2YzZjNmMyNzk3NzBkN2M1YTRhMGFkZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1v7dw+bYQCTmvVcN8JduRZ9xaw1
GGJz0Zrwr6Uzk/H1bBXGH8YdCJ0b34Sm5SHBI5kbO9XxqMsQh2PZzJUxg5q19jQQ
77MSij6O+UCGseX/PDJAC5k5BdRZ2d8OV6vnj5rchg+AzJyzCicpEAYvt63gQGaH
xD/DFWpN21UwCSUv/hioJeQlcX6+4kO3SOOYommh610//vZ06wFtvuFymCa+FBcd
AVfJGXdTl7M9P1AGBakJRdrJRU1zguDtzP9nY91N7jJy0gOl6+b4f7RbdPQdDymV
Eahif1Ej9YLSLrM4ooLA1f/IlZna80MbWSf9OqDasGMjNX8jtsiQvb7IWwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKnocGfuWTy2xsbCeXcNfFpKCt2ZMB8GA1UdIwQY
MBaAFJnqBf5gHLaAGvg3k+Bj9545QPAwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWVvRl9tQWN0b0FhLURlVDRHUDNuamxBOERBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC85YzBhNjktZTQ0Yy00OGRhLWI3NjMt
MzdjZmQ0YTY0ZmYxLzEvcWVod1otNVpQTGJHeHNKNWR3MThXa29LM1prLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC85YzBhNjktZTQ0Yy00OGRhLWI3NjMtMzdjZmQ0YTY0ZmYx
LzEvbWVvRl9tQWN0b0FhLURlVDRHUDNuamxBOERBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuWK4MA0G
CSqGSIb3DQEBCwUAA4IBAQCpnpp/N3wBYbgEBJ5/ikjHjzhMHlB1UmLyVT2H9s5B
jGVLqUwTRFFvyBvAkLJQ2nh+N00kfl0EEQEh3mx3Gtv7Jl78OuQ3t8gGVzHnCvKH
TQBVY82gvxar9G81iyh5KQ2C4cUY4D5C1EkdzUfJ9GyrQhOj/uRA20Dng1gntHAR
jIZBiQLP36WSlRqvqEkIVi2Ti9NtOJrHfJ3s40WioCN8uioAib7d0hM5l+uHm48K
aP0oxgXcfsbNjev9reLadKlFOSltSQuA++9JAwanh1aExJrrWsToKlKGdPWiyo2U
OSekBQBdMkVV4XyOYqLopYH/sOoPGPyJ/ity82UQbftA
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:49:55 2025 by rpki-client