Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/QjpAq_GyR3pqR1OQ_9zkaddgwMM.roa
File: QjpAq_GyR3pqR1OQ_9zkaddgwMM.roa (raw, json)
Hash identifier: 7qcZ7Fi6nhe0ogVONiBAc3CscJVwfWw4EiQ9TI9nag0=
Subject key identifier: 42:3A:40:AB:F1:B2:47:7A:6A:47:53:90:FF:DC:E4:69:D7:60:C0:C3
Certificate issuer: /CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Certificate serial: 019422200484BD048ADDD0777A82593B9289
Authority key identifier: 2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/QjpAq_GyR3pqR1OQ_9zkaddgwMM.roa
Signing time: Wed 01 Jan 2025 13:48:31 +0000
ROA not before: Wed 01 Jan 2025 13:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 138915
IP address blocks: 185.23.180.0/24 maxlen: 24
185.23.181.0/24 maxlen: 24
185.23.182.0/24 maxlen: 24
185.23.183.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:04:84:bd:04:8a:dd:d0:77:7a:82:59:3b:92:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2bd2c37284d84426f05e325b6b047ad5cf3fe4f2
Validity
Not Before: Jan 1 13:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=423a40abf1b2477a6a475390ffdce469d760c0c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:e4:03:b9:db:25:25:e4:83:ef:f5:c1:85:fb:
a8:f5:f7:32:20:82:26:08:43:dd:96:a0:c2:46:0f:
51:e8:42:38:e8:5f:e6:37:df:ab:64:a9:d2:de:15:
4c:ee:78:d6:25:d2:92:0d:18:fd:c8:13:57:0d:b0:
f0:6f:d2:c5:48:32:95:81:df:87:df:93:fe:6f:79:
8a:cc:91:f2:c8:50:8c:ba:eb:c4:8b:dc:23:58:d8:
7d:bd:a2:a8:98:f8:6b:ee:14:79:96:c1:1f:ed:7e:
14:5f:f7:e0:cd:28:9c:81:6b:4a:bc:5b:fd:95:ec:
d2:b5:ce:49:19:97:15:7c:ac:24:ca:8e:69:ed:d5:
4b:5f:96:30:c8:8a:4a:2f:82:fd:21:74:c8:58:15:
12:ad:2d:bc:30:9a:fd:7c:a2:87:64:82:56:86:52:
7f:ea:50:f3:bf:d2:5f:2c:cc:e4:3d:ba:d5:60:81:
28:73:0d:08:e9:7b:e5:b5:eb:7d:d2:09:98:96:27:
c3:85:6a:b8:e0:63:c9:47:2a:a9:f3:e6:cd:af:14:
dd:a2:60:22:74:c9:51:ce:05:d6:1d:3e:e5:db:b5:
5f:79:19:23:6b:26:7b:23:eb:36:54:67:ef:c6:fc:
32:35:7d:a5:6b:6f:ad:10:cf:4a:c5:60:0d:64:c6:
0a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3A:40:AB:F1:B2:47:7A:6A:47:53:90:FF:DC:E4:69:D7:60:C0:C3
X509v3 Authority Key Identifier:
keyid:2B:D2:C3:72:84:D8:44:26:F0:5E:32:5B:6B:04:7A:D5:CF:3F:E4:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K9LDcoTYRCbwXjJbawR61c8_5PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/QjpAq_GyR3pqR1OQ_9zkaddgwMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/c464d6-0cbd-4efd-98ac-53d9d3a44fcf/1/K9LDcoTYRCbwXjJbawR61c8_5PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.23.180.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:a4:17:02:b6:1c:db:28:47:d7:e4:c1:bf:74:eb:31:fd:54:
1e:37:20:c4:c7:7c:41:72:e3:43:08:ef:55:38:22:fd:5f:83:
2c:22:15:05:6c:99:2c:e6:84:a1:cd:5e:c9:b3:28:7a:36:c2:
25:f9:8d:77:bb:72:0a:2d:83:2a:9b:57:29:a1:0f:08:67:a7:
26:e5:93:94:34:ef:b8:0d:66:61:15:d9:47:e4:48:e5:0a:c1:
e0:51:6e:77:af:47:fd:c8:2c:14:ac:b8:7f:e8:d5:9d:0c:35:
ca:b9:15:22:0f:03:09:4b:b6:4b:08:6f:29:63:e1:da:72:92:
78:94:90:90:4d:c0:5c:6e:2f:ab:f0:c2:88:02:99:74:3a:46:
cd:23:91:25:b5:86:b0:d8:45:50:79:db:cc:af:c4:98:63:63:
98:f1:48:f1:1b:dd:eb:4c:16:f5:5a:73:04:56:a1:1f:65:2d:
90:f9:e5:0c:0f:72:6c:1e:01:f7:3d:28:a4:52:04:3f:eb:2c:
9a:6c:81:c1:e2:30:ed:50:56:12:03:38:43:9c:90:e0:16:41:
76:be:bc:23:e4:0f:76:1a:0c:cf:24:9f:cd:10:e6:11:ba:7e:
be:dd:bd:c3:a4:a4:b5:0d:8a:ea:54:c5:83:76:d4:de:05:da:
17:eb:7a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 07:57:28 2025 by rpki-client