Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/QRHTKN_AxXjbmDKFt4ozafbZWOw.roa
File: QRHTKN_AxXjbmDKFt4ozafbZWOw.roa (raw, json)
Hash identifier: vK+wvCTtBc+xdfzjCzcAglHcT6Ag6mWapdojkB+Av7Q=
Subject key identifier: 41:11:D3:28:DF:C0:C5:78:DB:98:32:85:B7:8A:33:69:F6:D9:58:EC
Certificate issuer: /CN=a85310f503137ae8b35d4f329f46f069dd703815
Certificate serial: 0194221FA762E27841EE42D1143DA9D788F6
Authority key identifier: A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/QRHTKN_AxXjbmDKFt4ozafbZWOw.roa
Signing time: Wed 01 Jan 2025 13:48:07 +0000
ROA not before: Wed 01 Jan 2025 13:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 206150
IP address blocks: 92.42.20.0/24 maxlen: 24
92.42.21.0/24 maxlen: 24
92.42.22.0/24 maxlen: 24
92.42.23.0/24 maxlen: 24
185.187.46.0/23 maxlen: 23
185.187.46.0/24 maxlen: 24
185.187.47.0/24 maxlen: 24
194.50.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:a7:62:e2:78:41:ee:42:d1:14:3d:a9:d7:88:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a85310f503137ae8b35d4f329f46f069dd703815
Validity
Not Before: Jan 1 13:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4111d328dfc0c578db983285b78a3369f6d958ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:7e:4d:9b:f7:a4:3a:b0:ca:ee:a2:4c:82:79:
b9:8d:35:08:a4:be:1f:57:f0:85:aa:6d:1e:20:c3:
ba:fa:b6:9e:30:74:e7:40:31:93:0a:f0:86:0a:87:
0f:5d:05:b8:eb:a8:61:b0:90:45:e0:3f:e8:ba:4a:
1b:5e:f2:e5:85:fc:24:98:32:0d:11:ae:38:ec:42:
a3:af:f3:f0:ed:70:27:bd:b8:b8:64:c1:e5:b6:00:
d3:e2:1d:dd:00:89:31:5f:72:b9:b8:f2:69:ea:92:
19:ff:dd:0c:0c:92:7d:a4:e5:64:46:ca:a2:3c:58:
7d:a9:33:09:13:d2:e1:44:cc:4c:48:6c:d9:03:82:
e5:58:fa:1d:6e:fd:40:aa:ac:45:85:cf:32:1a:c2:
05:7c:3e:7f:c8:76:cf:46:13:0e:3d:47:bd:50:f5:
d9:0f:a9:14:a6:84:6f:73:4f:20:d1:64:56:3f:89:
40:f4:21:93:12:02:4b:f1:b8:74:99:34:9d:71:f4:
5f:ac:9d:a6:42:e0:9e:23:3f:95:3a:d7:a3:37:0a:
d7:74:6d:ba:ea:a4:ee:de:a1:29:13:5d:7a:4b:32:
c0:d7:ba:74:7b:22:c4:07:d2:fc:9f:6a:ed:19:c6:
15:bd:7a:23:9c:d6:19:7d:df:f9:f7:32:fd:79:26:
6a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:11:D3:28:DF:C0:C5:78:DB:98:32:85:B7:8A:33:69:F6:D9:58:EC
X509v3 Authority Key Identifier:
keyid:A8:53:10:F5:03:13:7A:E8:B3:5D:4F:32:9F:46:F0:69:DD:70:38:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qFMQ9QMTeuizXU8yn0bwad1wOBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/QRHTKN_AxXjbmDKFt4ozafbZWOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/b42949-ee0a-4123-87bf-30189a5a4eba/1/qFMQ9QMTeuizXU8yn0bwad1wOBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.42.20.0/22
185.187.46.0/23
194.50.59.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:2b:52:2f:4e:d8:32:bb:94:73:86:db:72:fb:93:17:ee:55:
cd:5c:d2:4a:a8:a4:e8:8c:31:ca:b6:71:cb:63:ba:bb:dd:09:
1e:43:7e:75:4b:ad:c3:d2:5a:31:e0:43:0f:63:1e:ac:98:3d:
e5:67:36:cf:97:17:64:56:d2:7d:ef:e5:89:3b:6a:68:ce:c8:
cb:cc:2c:4e:9c:0a:35:95:06:f2:06:7d:c0:61:3b:d8:a4:4c:
a1:7b:62:fa:b7:92:1d:d3:de:79:43:de:0d:86:26:36:d5:73:
aa:f4:99:69:4c:fb:08:3f:cc:4e:69:a6:e3:b3:6a:50:b3:9d:
ba:2b:ee:e0:05:eb:45:f6:18:d7:de:96:30:b6:02:93:f2:59:
98:ed:ff:9d:f0:41:46:83:e8:27:8f:46:b1:d7:23:e5:cd:00:
7f:a3:2d:6a:a5:5e:37:88:46:e5:91:b8:3b:37:8c:11:2b:ec:
7d:14:29:38:25:a4:d0:1a:cd:38:fc:4f:88:c5:2c:bc:b8:5f:
0c:08:dd:55:ef:0c:8b:eb:40:53:a9:00:39:f4:69:15:28:b9:
69:6e:f5:66:d2:4f:75:cb:0b:c4:19:63:aa:99:87:7e:c8:5f:
09:f3:35:76:c1:95:95:cf:45:0f:23:2a:59:c8:1e:46:db:4b:
fc:47:ba:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:59:31 2025 by rpki-client