Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QnIWNtb1g6nzLvZc7F363jhlYLw.roa
File: QnIWNtb1g6nzLvZc7F363jhlYLw.roa (raw, json)
Hash identifier: iXSdTqKMzDeRdzaB9kwnGsJ8A9k0gGPkpa8nTPEAzj0=
Subject key identifier: 42:72:16:36:D6:F5:83:A9:F3:2E:F6:5C:EC:5D:FA:DE:38:65:60:BC
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0194282465C36826CFB8175A90D4C4553B60
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QnIWNtb1g6nzLvZc7F363jhlYLw.roa
Signing time: Thu 02 Jan 2025 17:51:01 +0000
ROA not before: Thu 02 Jan 2025 17:51:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21840
IP address blocks: 185.222.161.0/24 maxlen: 24
212.87.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:65:c3:68:26:cf:b8:17:5a:90:d4:c4:55:3b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42721636d6f583a9f32ef65cec5dfade386560bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:da:8b:f3:cb:70:94:7c:8b:8b:3e:1d:b5:e5:
ea:7c:d8:04:f8:84:35:b1:bc:42:4b:28:f8:e5:07:
a6:41:f2:38:46:4d:43:00:d2:0a:10:15:82:a9:23:
9f:43:69:d4:3a:b5:9a:13:93:f5:28:4f:61:48:5d:
ee:48:06:01:ea:30:10:d7:56:f4:b8:aa:79:de:e7:
ea:c0:96:16:21:d7:a6:0f:a0:e6:21:68:e4:69:ad:
f0:aa:92:4a:11:21:ae:c8:ed:fc:b6:c3:fb:46:99:
59:75:a5:e1:b2:66:b4:38:97:cd:86:c3:ad:c3:04:
cd:0b:28:67:cd:e2:4a:33:08:f7:be:f7:e1:fb:fa:
96:0d:32:bd:49:a8:95:8c:b2:de:1b:16:fa:b5:32:
b2:ed:46:74:0b:c3:4f:22:36:79:77:93:2a:e8:26:
2f:a0:da:15:ab:67:3f:3f:dd:e6:8c:e5:69:55:e0:
1a:e7:dd:a9:3d:1f:8e:67:34:3e:28:c6:67:63:e0:
4a:34:9d:bd:02:23:13:28:78:49:af:28:68:ea:15:
fc:1d:d1:25:7e:cb:7d:ac:4c:92:e9:f0:d5:3e:6b:
c2:2c:e8:a8:5a:52:02:ce:99:81:b9:b1:42:c5:c2:
b3:37:87:39:1c:dc:24:f0:dd:0c:19:cb:c2:17:fe:
dc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:72:16:36:D6:F5:83:A9:F3:2E:F6:5C:EC:5D:FA:DE:38:65:60:BC
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QnIWNtb1g6nzLvZc7F363jhlYLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.161.0/24
212.87.204.0/24
Signature Algorithm: sha256WithRSAEncryption
45:cf:10:23:8d:ba:81:23:e9:8d:60:86:df:43:74:39:36:3b:
ba:f8:b8:71:3b:4b:2f:6a:72:07:9a:ac:a5:62:45:4b:10:bc:
ef:1e:55:cd:bb:71:bd:f1:fb:75:6d:3d:43:5a:8c:36:8b:ca:
9a:74:bd:8e:7f:66:7d:a1:21:1d:33:7b:97:a6:64:00:c9:97:
e7:3f:12:55:dc:b2:6a:45:f4:46:a3:ba:0f:b7:f9:1e:92:0a:
75:21:b5:81:4c:e8:f1:3d:05:2c:de:b0:a3:92:1b:ee:d1:cf:
f5:a8:54:ab:13:e9:4c:dd:28:bf:22:c7:21:f7:43:82:85:5e:
34:47:a4:4d:f5:87:71:cc:b6:98:f0:a0:46:25:78:36:36:6e:
10:76:01:93:af:2d:04:f0:94:fe:6e:07:ea:ff:91:cd:e5:51:
f9:a2:f4:f8:68:65:1e:ba:ab:bc:09:bc:e3:0c:94:2d:37:43:
f1:30:2c:7f:13:5d:6c:ac:5a:b8:85:36:33:92:eb:50:c4:8a:
c3:7d:6b:47:2c:49:14:15:82:fc:d4:8b:fd:4f:e6:d9:29:54:
c9:0d:23:eb:d2:00:10:ff:66:cb:39:49:f6:0f:84:50:42:73:
90:59:ac:e0:af:05:e1:c9:4a:a9:65:90:cf:1e:3a:bb:0e:bc:
42:27:a3:03
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQoJGXDaCbPuBdakNTEVTtgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjcyMTYzNmQ2ZjU4M2E5ZjMyZWY2NWNlYzVkZmFkZTM4NjU2MGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptqL88twlHyLiz4dteXqfNgE+IQ1
sbxCSyj45QemQfI4Rk1DANIKEBWCqSOfQ2nUOrWaE5P1KE9hSF3uSAYB6jAQ11b0
uKp53ufqwJYWIdemD6DmIWjkaa3wqpJKESGuyO38tsP7RplZdaXhsma0OJfNhsOt
wwTNCyhnzeJKMwj3vvfh+/qWDTK9SaiVjLLeGxb6tTKy7UZ0C8NPIjZ5d5Mq6CYv
oNoVq2c/P93mjOVpVeAa592pPR+OZzQ+KMZnY+BKNJ29AiMTKHhJryho6hX8HdEl
fst9rEyS6fDVPmvCLOioWlICzpmBubFCxcKzN4c5HNwk8N0MGcvCF/7cxwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEJyFjbW9YOp8y72XOxd+t44ZWC8MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvUW5JV050YjFnNm56THZaYzdGMzYzamhsWUx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAud6hAwQA
1FfMMA0GCSqGSIb3DQEBCwUAA4IBAQBFzxAjjbqBI+mNYIbfQ3Q5Nju6+LhxO0sv
anIHmqylYkVLELzvHlXNu3G98ft1bT1DWow2i8qadL2Of2Z9oSEdM3uXpmQAyZfn
PxJV3LJqRfRGo7oPt/kekgp1IbWBTOjxPQUs3rCjkhvu0c/1qFSrE+lM3Si/Isch
90OChV40R6RN9YdxzLaY8KBGJXg2Nm4QdgGTry0E8JT+bgfq/5HN5VH5ovT4aGUe
uqu8CbzjDJQtN0PxMCx/E11srFq4hTYzkutQxIrDfWtHLEkUFYL81Iv9T+bZKVTJ
DSPr0gAQ/2bLOUn2D4RQQnOQWazgrwXhyUqpZZDPHjq7DrxCJ6MD
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:09:08 2025 by rpki-client