Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Q_kkky03wgA6twdmLbyrJzeY0MA.roa
File: Q_kkky03wgA6twdmLbyrJzeY0MA.roa (raw, json)
Hash identifier: 3b4A14LmUSwZ2nIcTMvHSmWFxtD5cKXb9h8bsvjNfpI=
Subject key identifier: 43:F9:24:93:2D:37:C2:00:3A:B7:07:66:2D:BC:AB:27:37:98:D0:C0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01942824751D9952BD0216A5D95ABDC655DA
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Q_kkky03wgA6twdmLbyrJzeY0MA.roa
Signing time: Thu 02 Jan 2025 17:51:05 +0000
ROA not before: Thu 02 Jan 2025 17:51:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39368
IP address blocks: 185.218.139.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:75:1d:99:52:bd:02:16:a5:d9:5a:bd:c6:55:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43f924932d37c2003ab707662dbcab273798d0c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b2:be:13:b1:e8:42:d7:6c:ea:8f:63:23:1e:
67:68:d9:9e:bd:ad:e3:56:e4:94:08:52:21:b0:66:
f6:73:67:29:3c:0c:fc:f1:d9:60:18:31:60:45:bc:
84:73:1a:be:ec:02:ed:0a:fe:f8:97:fd:8b:62:ce:
9c:12:5e:13:4e:17:82:a9:d8:e5:07:86:60:29:48:
22:14:12:a2:48:88:32:e4:92:d4:4f:30:f3:6a:29:
ed:de:b1:e3:ea:46:bd:aa:ec:03:e5:39:1e:86:4b:
e7:e4:5c:24:45:59:e6:72:0a:91:f2:56:9e:ec:44:
13:75:05:df:47:81:c9:b2:bc:30:ce:3e:a4:1d:2c:
5e:84:c4:29:32:f9:7a:39:24:31:d5:69:05:1a:c6:
39:74:45:b3:3b:7c:90:73:e1:2b:f8:71:34:11:7d:
80:7a:3e:f9:11:c6:02:2c:4f:26:16:9b:6b:a8:f8:
12:25:34:ef:d6:b8:85:92:e7:e7:32:fa:0a:56:94:
5d:72:e3:78:66:e3:d4:e8:91:d6:07:eb:e1:d8:d8:
8b:cd:e7:4d:03:1f:17:e6:5e:ab:d3:7d:38:bf:3a:
61:de:0a:71:af:c0:3e:22:c1:33:9d:7a:82:b8:c4:
ee:36:6e:9a:4c:b5:a4:7a:6f:7e:72:2b:57:a7:24:
9b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F9:24:93:2D:37:C2:00:3A:B7:07:66:2D:BC:AB:27:37:98:D0:C0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Q_kkky03wgA6twdmLbyrJzeY0MA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.218.139.0/24
Signature Algorithm: sha256WithRSAEncryption
94:94:20:82:3a:79:fe:7c:2d:70:2f:12:3a:65:17:3b:a7:2f:
2c:7c:60:d9:4e:c3:4b:ff:7c:34:0a:a4:50:58:d5:34:97:26:
e1:c7:82:22:1f:51:d1:56:52:bc:f6:39:f1:e8:2a:51:83:7c:
6b:b8:db:4c:cc:85:b5:83:97:17:48:99:fb:83:f9:c9:f8:0f:
93:c5:b6:4a:72:36:53:ee:f0:be:4e:6e:91:b7:ab:cf:02:15:
cc:b7:6b:4d:fc:61:d9:fd:3c:99:52:8f:f5:74:ec:04:d9:ed:
a0:d8:e7:33:cd:0a:ac:45:7c:2c:67:09:c5:dc:b1:7d:4f:fc:
ad:04:a7:c4:43:b2:b3:09:47:f8:d9:ba:b8:3c:f6:60:00:01:
60:61:ca:f9:53:f7:d1:c6:b2:27:b0:a6:25:2d:51:7c:e7:93:
85:65:c6:a0:28:f9:2e:a5:a6:71:4f:d0:8d:e8:f4:1f:c7:1d:
03:01:7f:12:17:50:78:85:70:b9:5a:ff:2b:f7:fd:e1:1e:b0:
f4:94:9a:9a:54:36:2f:e0:e5:7e:a2:2e:b4:b3:41:81:d0:f7:
e8:08:ca:60:df:c5:f4:2d:a4:6a:8b:b0:47:cd:08:aa:75:c5:
9c:13:ae:7c:bf:5e:88:f9:f9:15:09:35:b1:33:9a:ff:6e:67:
b5:74:63:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:58:39 2025 by rpki-client