Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/sqRuaOuMQX3R1WIGqfpVctwkhJ8.roa
File: sqRuaOuMQX3R1WIGqfpVctwkhJ8.roa (raw, json)
Hash identifier: loBYQirh8lkvIv9erRgwocGGTfmyqUm/xdb6wlg+KII=
Subject key identifier: B2:A4:6E:68:EB:8C:41:7D:D1:D5:62:06:A9:FA:55:72:DC:24:84:9F
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 0181FC9593FD821D868260D439BD75980F0A
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/sqRuaOuMQX3R1WIGqfpVctwkhJ8.roa
Signing time: Thu 14 Jul 2022 12:01:10 +0000
ROA not before: Thu 14 Jul 2022 12:01:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208485
IP address blocks: 109.74.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fc:95:93:fd:82:1d:86:82:60:d4:39:bd:75:98:0f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jul 14 12:01:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b2a46e68eb8c417dd1d56206a9fa5572dc24849f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:64:53:89:b8:c8:9c:af:ee:bd:5d:58:f5:93:
44:de:1d:43:01:3e:3f:ff:6c:69:c4:ca:34:a8:ca:
f5:7b:78:92:57:82:e8:45:db:fc:15:5f:9c:ed:e9:
cf:d7:19:17:53:20:a4:68:ca:53:e9:03:eb:1a:a9:
d2:31:f0:e6:d2:2a:c8:61:e8:45:21:d5:46:3a:22:
c7:2a:e5:99:b7:c5:a9:b4:0a:5c:fe:99:24:91:b1:
40:9c:85:1a:55:38:d4:c7:e9:5c:30:ea:65:2e:5e:
dc:35:db:48:0e:e0:74:f0:f9:e9:55:75:25:33:d4:
68:30:8e:42:d7:53:06:f9:29:d9:5e:e7:73:15:4c:
1e:f4:ee:0f:8b:e4:e9:cf:a6:29:8d:9d:44:57:0a:
cb:c9:1f:43:8c:ab:3b:eb:96:f1:d3:cb:86:ae:0f:
e8:76:72:19:6c:72:12:cd:f4:fd:ad:35:b0:af:92:
9e:3d:2f:fe:5b:77:fa:fa:ad:52:a0:d8:21:62:b3:
4f:cd:26:8d:6e:ee:63:44:f2:b2:df:b0:5f:8a:fd:
c7:f4:5a:5f:c2:57:74:e4:01:7d:0d:71:97:a2:ad:
25:a8:18:c6:f4:0c:74:b1:d6:76:b2:3f:10:8e:15:
58:a2:df:27:0e:c9:39:df:dc:0b:de:cc:c3:a8:6d:
2c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A4:6E:68:EB:8C:41:7D:D1:D5:62:06:A9:FA:55:72:DC:24:84:9F
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/sqRuaOuMQX3R1WIGqfpVctwkhJ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.74.30.0/24
Signature Algorithm: sha256WithRSAEncryption
23:55:c0:41:42:5d:48:3a:3f:ae:13:e4:76:83:43:1b:c0:4f:
61:2b:75:c6:46:3b:6c:70:ff:c2:39:2f:f3:79:42:d4:e1:75:
ae:22:a6:54:30:33:40:7a:20:c0:26:7f:ab:f3:1f:56:66:9c:
89:78:ac:ac:95:18:93:aa:6a:36:75:34:e7:1a:c8:23:86:2f:
7c:7e:86:92:d6:14:d3:c6:d8:a8:f1:ba:bd:bb:0b:d6:54:95:
74:8c:47:f3:e1:84:52:7d:6e:9b:3a:23:b7:37:8a:e8:0e:7b:
12:af:a7:f0:6b:cc:33:30:97:a9:4d:e4:41:af:97:36:2e:34:
02:8f:fc:3f:e0:ee:66:9b:0b:0d:11:75:91:72:57:9c:a0:5e:
8f:dd:67:1a:6e:3e:19:95:15:b0:50:2e:4b:8e:c5:b4:5b:0d:
63:a5:4c:49:84:8b:8c:4c:7e:e4:d5:93:e4:81:bc:ee:98:f6:
d1:91:d6:8c:e7:83:87:47:db:81:1b:e4:57:cc:89:a0:7e:5a:
dc:01:a6:53:a4:db:22:4c:85:27:6d:81:30:ea:ee:32:2d:c2:
5d:cd:a3:10:b5:de:7f:a9:65:41:ae:23:b3:5b:1a:0e:0b:d3:
23:81:e1:42:5d:af:e4:4e:07:5c:98:bb:0d:ee:4a:73:b4:f3:
1b:61:5f:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYH8lZP9gh2GgmDUOb11mA8KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYyNGFkNDUzNWFjODhkZDUzNDE5OWYyYTcyNjA5NWFmNzFh
ZmU0NGUwHhcNMjIwNzE0MTIwMTEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMmE0NmU2OGViOGM0MTdkZDFkNTYyMDZhOWZhNTU3MmRjMjQ4NDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGRTibjInK/uvV1Y9ZNE3h1DAT4/
/2xpxMo0qMr1e3iSV4LoRdv8FV+c7enP1xkXUyCkaMpT6QPrGqnSMfDm0irIYehF
IdVGOiLHKuWZt8WptApc/pkkkbFAnIUaVTjUx+lcMOplLl7cNdtIDuB08PnpVXUl
M9RoMI5C11MG+SnZXudzFUwe9O4Pi+Tpz6YpjZ1EVwrLyR9DjKs765bx08uGrg/o
dnIZbHISzfT9rTWwr5KePS/+W3f6+q1SoNghYrNPzSaNbu5jRPKy37Bfiv3H9Fpf
wld05AF9DXGXoq0lqBjG9Ax0sdZ2sj8QjhVYot8nDsk539wL3szDqG0srwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLKkbmjrjEF90dViBqn6VXLcJISfMB8GA1UdIwQY
MBaAFGJK1FNayI3VNBmfKnJgla9xr+ROMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTct
ZmI1OTQ5ODA4ZGRjLzEvc3FSdWFPdU1RWDNSMVdJR3FmcFZjdHdraEo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9hYTEwMTktNTY0Zi00YzQ2LWEyMTctZmI1OTQ5ODA4ZGRj
LzEvWWtyVVUxcklqZFUwR1o4cWNtQ1ZyM0d2NUU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUoeMA0G
CSqGSIb3DQEBCwUAA4IBAQAjVcBBQl1IOj+uE+R2g0MbwE9hK3XGRjtscP/COS/z
eULU4XWuIqZUMDNAeiDAJn+r8x9WZpyJeKyslRiTqmo2dTTnGsgjhi98foaS1hTT
xtio8bq9uwvWVJV0jEfz4YRSfW6bOiO3N4roDnsSr6fwa8wzMJepTeRBr5c2LjQC
j/w/4O5mmwsNEXWRclecoF6P3Wcabj4ZlRWwUC5LjsW0Ww1jpUxJhIuMTH7k1ZPk
gbzumPbRkdaM54OHR9uBG+RXzImgflrcAaZTpNsiTIUnbYEw6u4yLcJdzaMQtd5/
qWVBriOzWxoOC9MjgeFCXa/kTgdcmLsN7kpztPMbYV9d
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:49 2025 by rpki-client