Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/Qy3Q7lh00t0205L0nhmAvt2uoOs.roa
File: Qy3Q7lh00t0205L0nhmAvt2uoOs.roa (raw, json)
Hash identifier: a4ie5/FL3GVO5YHgzPjyXYH6PIkYqfX1mb+x+F8lR9c=
Subject key identifier: 43:2D:D0:EE:58:74:D2:DD:36:D3:92:F4:9E:19:80:BE:DD:AE:A0:EB
Certificate issuer: /CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Certificate serial: 019424449448A1B109F22139436B9C6E4A6E
Authority key identifier: 2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/Qy3Q7lh00t0205L0nhmAvt2uoOs.roa
Signing time: Wed 01 Jan 2025 23:47:41 +0000
ROA not before: Wed 01 Jan 2025 23:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209324
IP address blocks: 185.107.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:94:48:a1:b1:09:f2:21:39:43:6b:9c:6e:4a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b237c5affe93543ae2fe6e1ffed182396eb9bb3
Validity
Not Before: Jan 1 23:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=432dd0ee5874d2dd36d392f49e1980beddaea0eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e3:46:68:c8:71:98:b7:a4:1e:99:fa:69:e8:
d8:96:fb:ba:54:03:98:1b:04:b7:79:50:58:93:93:
95:a0:7d:4b:2a:8d:8f:f9:8b:95:81:4e:ac:9a:c3:
f2:2e:68:e6:c4:e1:10:8b:4b:37:6f:d6:fe:b6:a1:
a0:33:5f:ec:2a:44:c7:cd:8a:55:f5:a8:40:48:76:
42:92:b0:6a:f4:3d:1c:52:e6:8e:90:b5:a2:1f:92:
b0:a9:7f:00:98:cf:38:5b:8d:44:07:45:98:22:ef:
f0:6a:72:85:6b:92:74:d6:27:33:b9:c2:46:ca:05:
2e:6c:f2:9a:eb:1a:86:14:bc:0b:05:e8:af:c9:0f:
72:88:ef:36:1f:d4:46:73:d1:af:e7:56:3a:fd:f1:
a5:18:99:39:60:2b:49:e9:fa:85:8d:f9:1f:59:1a:
77:24:03:4b:9d:0f:9d:58:a2:2e:31:6b:59:30:4a:
98:90:1f:0a:48:4f:2e:b1:55:62:a9:c9:07:2b:8f:
25:93:6b:a4:a6:63:7f:39:88:f7:94:46:84:c6:0c:
71:d2:65:80:14:16:30:3f:77:16:75:4e:d0:63:c1:
fd:a3:35:2d:1d:6b:08:e4:fa:79:67:2a:8a:9e:c3:
20:f3:66:24:a5:43:52:89:fa:87:63:75:f3:5f:cd:
80:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2D:D0:EE:58:74:D2:DD:36:D3:92:F4:9E:19:80:BE:DD:AE:A0:EB
X509v3 Authority Key Identifier:
keyid:2B:23:7C:5A:FF:E9:35:43:AE:2F:E6:E1:FF:ED:18:23:96:EB:9B:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KyN8Wv_pNUOuL-bh_-0YI5brm7M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/Qy3Q7lh00t0205L0nhmAvt2uoOs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/64a053-26ff-48a6-aeda-14702a4d2660/1/KyN8Wv_pNUOuL-bh_-0YI5brm7M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.107.199.0/24
Signature Algorithm: sha256WithRSAEncryption
34:d4:ee:32:60:a5:c5:a2:a5:49:b2:5a:a5:a9:14:b7:36:24:
e5:cf:c4:c5:9f:28:36:dc:83:60:ed:05:26:1d:e6:2d:8b:bd:
3e:35:ec:59:77:c5:14:8e:ce:1e:70:ce:10:5c:22:a7:73:82:
1d:0b:63:ac:d6:9a:f5:13:ad:e6:bd:6e:63:99:b1:a8:6c:92:
30:cd:53:29:f7:48:2c:c5:4b:a7:06:27:96:3c:72:d8:f6:21:
b3:fd:55:61:3e:39:e4:4d:f9:0b:34:7b:33:5a:42:cc:91:ca:
08:78:62:67:ec:5c:14:5f:73:e7:db:15:b3:0a:52:d7:f7:2d:
21:a1:2b:71:06:b1:21:12:eb:35:96:e9:a2:4e:a1:6d:3f:ba:
eb:f9:62:80:13:0e:80:7b:e3:74:f6:88:b9:4d:d8:4d:50:eb:
ee:12:9f:ad:eb:30:66:48:92:28:61:fc:7a:c4:75:3f:74:4e:
78:62:d3:8d:ae:b3:94:f6:50:86:bf:a1:63:d1:f0:c1:0f:a4:
3a:30:42:47:a2:b3:e5:c7:bc:d0:31:6d:e3:af:b3:10:de:17:
27:f4:54:8f:84:dd:c8:43:9d:58:1c:fd:5b:71:d0:dd:97:b1:
d2:48:7a:c0:67:6b:b9:e0:6c:3e:13:5b:b9:96:86:2a:e6:a1:
9f:fd:86:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRJRIobEJ8iE5Q2ucbkpuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJiMjM3YzVhZmZlOTM1NDNhZTJmZTZlMWZmZWQxODIzOTZl
YjliYjMwHhcNMjUwMTAxMjM0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzJkZDBlZTU4NzRkMmRkMzZkMzkyZjQ5ZTE5ODBiZWRkYWVhMGViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweNGaMhxmLekHpn6aejYlvu6VAOY
GwS3eVBYk5OVoH1LKo2P+YuVgU6smsPyLmjmxOEQi0s3b9b+tqGgM1/sKkTHzYpV
9ahASHZCkrBq9D0cUuaOkLWiH5KwqX8AmM84W41EB0WYIu/wanKFa5J01iczucJG
ygUubPKa6xqGFLwLBeivyQ9yiO82H9RGc9Gv51Y6/fGlGJk5YCtJ6fqFjfkfWRp3
JANLnQ+dWKIuMWtZMEqYkB8KSE8usVViqckHK48lk2ukpmN/OYj3lEaExgxx0mWA
FBYwP3cWdU7QY8H9ozUtHWsI5Pp5ZyqKnsMg82YkpUNSifqHY3XzX82AzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEMt0O5YdNLdNtOS9J4ZgL7drqDrMB8GA1UdIwQY
MBaAFCsjfFr/6TVDri/m4f/tGCOW65uzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi82NGEwNTMtMjZmZi00OGE2LWFlZGEt
MTQ3MDJhNGQyNjYwLzEvUXkzUTdsaDAwdDAyMDVMMG5obUF2dDJ1b09zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi82NGEwNTMtMjZmZi00OGE2LWFlZGEtMTQ3MDJhNGQyNjYw
LzEvS3lOOFd2X3BOVU91TC1iaF8tMFlJNWJybTdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWvHMA0G
CSqGSIb3DQEBCwUAA4IBAQA01O4yYKXFoqVJslqlqRS3NiTlz8TFnyg23INg7QUm
HeYti70+NexZd8UUjs4ecM4QXCKnc4IdC2Os1pr1E63mvW5jmbGobJIwzVMp90gs
xUunBieWPHLY9iGz/VVhPjnkTfkLNHszWkLMkcoIeGJn7FwUX3Pn2xWzClLX9y0h
oStxBrEhEus1lumiTqFtP7rr+WKAEw6Ae+N09oi5TdhNUOvuEp+t6zBmSJIoYfx6
xHU/dE54YtONrrOU9lCGv6Fj0fDBD6Q6MEJHorPlx7zQMW3jr7MQ3hcn9FSPhN3I
Q51YHP1bcdDdl7HSSHrAZ2u54Gw+E1u5loYq5qGf/YYk
-----END CERTIFICATE-----
Generated at Sun Apr 6 06:23:28 2025 by rpki-client