Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/1e19cf-c262-4c7c-8fba-0d0e449d09d5/1/qCQC6Nq7rfSOnZv-dJ3hpZXe2X0.roa
File: qCQC6Nq7rfSOnZv-dJ3hpZXe2X0.roa (raw, json)
Hash identifier: bMC+WpWpaZV/pvVYTNIVJ/m8/ttet6thFNaTXcES07w=
Subject key identifier: A8:24:02:E8:DA:BB:AD:F4:8E:9D:9B:FE:74:9D:E1:A5:95:DE:D9:7D
Certificate issuer: /CN=961140100393d2fbab2dc81c199b3506abe4e7d0
Certificate serial: 0148D8B7
Authority key identifier: 96:11:40:10:03:93:D2:FB:AB:2D:C8:1C:19:9B:35:06:AB:E4:E7:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lhFAEAOT0vurLcgcGZs1Bqvk59A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/1e19cf-c262-4c7c-8fba-0d0e449d09d5/1/qCQC6Nq7rfSOnZv-dJ3hpZXe2X0.roa
Signing time: Sat 01 Jan 2022 11:04:50 +0000
ROA not before: Sat 01 Jan 2022 11:04:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29505
IP address blocks: 149.249.127.0/24 maxlen: 24
149.249.64.0/18 maxlen: 18
185.111.68.0/22 maxlen: 22
85.233.0.0/19 maxlen: 19
2a07:6c40:a1a0::/48 maxlen: 48
2a07:6c40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21551287 (0x148d8b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=961140100393d2fbab2dc81c199b3506abe4e7d0
Validity
Not Before: Jan 1 11:04:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a82402e8dabbadf48e9d9bfe749de1a595ded97d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a9:89:9f:42:e2:ac:4a:6a:cf:36:6e:1b:93:
28:b5:17:09:9c:8c:8b:21:27:04:8a:b0:d1:6d:f5:
27:8f:85:e9:e0:ec:97:a3:a3:c8:3d:d7:35:1a:23:
26:34:da:b0:b0:31:6c:69:d9:c3:c6:83:e6:de:87:
16:cd:e3:58:e3:76:5f:f8:27:7d:0e:7e:10:d8:4c:
17:0f:78:0e:48:6a:7d:71:26:b7:6e:35:a6:f7:ab:
7a:99:49:07:cc:c0:eb:4b:ea:43:f6:73:89:44:29:
d6:d4:76:de:64:60:36:3c:28:08:b6:42:5f:0d:a5:
93:85:5d:51:43:5a:47:11:65:ba:e6:77:0b:3c:6c:
2b:84:23:54:5d:12:78:ee:8b:39:ac:72:08:32:ea:
62:93:b7:cb:dd:f8:f2:f7:49:94:b4:61:52:ea:9c:
f1:1c:8f:d0:c1:e1:1c:b2:b6:39:99:e0:c2:93:db:
60:15:84:79:78:00:7d:a0:6c:fa:04:3f:78:fa:c6:
52:99:c3:fa:8e:75:19:f1:af:e0:3b:61:20:3e:3d:
35:d5:40:28:29:0b:f7:0d:c4:5b:ce:4c:35:ac:ec:
01:54:21:ef:06:9c:06:a8:0e:76:f8:43:42:b0:6d:
58:89:bc:42:bc:5d:85:87:f2:67:ff:6a:e2:ad:5e:
af:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:24:02:E8:DA:BB:AD:F4:8E:9D:9B:FE:74:9D:E1:A5:95:DE:D9:7D
X509v3 Authority Key Identifier:
keyid:96:11:40:10:03:93:D2:FB:AB:2D:C8:1C:19:9B:35:06:AB:E4:E7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lhFAEAOT0vurLcgcGZs1Bqvk59A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1e19cf-c262-4c7c-8fba-0d0e449d09d5/1/qCQC6Nq7rfSOnZv-dJ3hpZXe2X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/1e19cf-c262-4c7c-8fba-0d0e449d09d5/1/lhFAEAOT0vurLcgcGZs1Bqvk59A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.233.0.0/19
149.249.64.0/18
185.111.68.0/22
IPv6:
2a07:6c40::/29
Signature Algorithm: sha256WithRSAEncryption
15:99:94:00:8b:66:80:b9:3c:9a:d8:3d:6e:dc:3e:d5:11:04:
d9:29:79:7e:66:d5:45:8c:11:54:11:29:df:0c:fc:58:67:70:
dd:16:b6:ee:7f:35:5c:7d:a5:69:99:79:2b:62:62:f7:c0:e2:
19:68:1c:1c:0e:8f:4f:6f:6f:f3:16:89:8d:aa:69:11:c8:22:
45:d9:93:d1:79:45:5c:e1:f0:5f:28:19:29:c6:58:e9:69:c7:
4e:50:0f:52:08:ea:cd:69:33:4e:36:52:eb:66:1c:ae:b2:9a:
34:30:eb:4c:f9:42:d3:84:e4:e8:09:2b:76:55:f4:4c:b3:8d:
22:29:63:e6:ca:ed:b3:25:13:00:bf:70:2c:2e:3e:f5:08:e8:
67:82:8a:60:8e:25:53:0b:73:b5:96:80:5e:e8:44:3c:c6:88:
f9:cc:2a:13:d3:0a:2b:79:91:62:0e:65:bb:15:90:c3:79:00:
ba:bb:b7:51:92:14:09:3f:65:e7:69:28:7a:01:9a:9e:fc:96:
0e:ff:b2:d2:0f:45:21:a1:5d:f1:3e:da:08:e7:e6:00:78:59:
41:59:b4:d8:67:73:3b:ff:87:d4:73:7c:63:bf:b8:b7:31:c1:
bc:aa:0d:68:2f:c1:26:f6:a8:9f:85:3f:d6:f7:8d:ea:45:86:
45:40:76:12
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sat Apr 19 18:03:56 2025 by rpki-client