Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/Q_kLSJOWLJDEhyzkodJRQWJEfMU.roa
File: Q_kLSJOWLJDEhyzkodJRQWJEfMU.roa (raw, json)
Hash identifier: 2p8AahImaC704aSN2Sau8pFCrbFVUG9Dz60aJg9x1m8=
Subject key identifier: 43:F9:0B:48:93:96:2C:90:C4:87:2C:E4:A1:D2:51:41:62:44:7C:C5
Certificate issuer: /CN=87ed9cb8340ac2095a4cb0528e5ea2f738cea672
Certificate serial: 019420D62E025B0E823F62AF1223449B97E2
Authority key identifier: 87:ED:9C:B8:34:0A:C2:09:5A:4C:B0:52:8E:5E:A2:F7:38:CE:A6:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h-2cuDQKwglaTLBSjl6i9zjOpnI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/Q_kLSJOWLJDEhyzkodJRQWJEfMU.roa
Signing time: Wed 01 Jan 2025 07:48:14 +0000
ROA not before: Wed 01 Jan 2025 07:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 396982
IP address blocks: 185.197.213.0/24 maxlen: 24
185.197.215.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:2e:02:5b:0e:82:3f:62:af:12:23:44:9b:97:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87ed9cb8340ac2095a4cb0528e5ea2f738cea672
Validity
Not Before: Jan 1 07:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43f90b4893962c90c4872ce4a1d2514162447cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:65:b2:3d:ad:a8:4c:65:bf:01:8a:32:b9:ec:
56:92:db:24:ed:9e:be:99:96:f3:57:e6:7c:f2:b1:
23:e8:e5:25:f6:8b:82:5a:f7:48:ff:0e:0f:71:41:
87:51:e2:e9:9b:d2:18:18:a9:ec:32:cd:89:e1:b7:
cc:8d:a2:d2:62:7d:bc:6c:f6:42:c2:1c:8c:21:67:
3d:8f:f3:2e:ed:ff:f8:44:62:bd:0a:6f:07:4f:36:
9b:ee:20:6c:0d:1d:98:2a:93:9f:13:f8:40:56:e6:
96:14:ef:5b:7d:de:e8:15:f7:0d:e9:f3:e4:e0:0d:
1e:b5:8c:b4:a8:f3:ae:d5:d7:36:09:08:92:48:f0:
dc:fd:51:52:0b:f2:dc:ee:ca:3b:0b:e7:c9:95:0e:
bd:07:bc:11:7a:43:ca:10:85:23:96:35:99:41:b9:
9e:b2:db:0c:a2:fa:4a:e8:a2:54:67:df:e1:f8:f9:
9c:2c:1a:b6:75:84:7a:ab:d3:9b:fd:6e:1c:a5:be:
ca:a9:7e:d3:bf:02:56:7f:f2:e2:18:e5:0d:8b:74:
fe:88:2c:ff:de:8d:30:f6:8e:51:52:ec:d5:a9:4d:
31:01:7e:bb:c3:71:3a:0c:73:9e:ea:44:62:20:c9:
e6:2b:c9:b7:d7:80:23:e9:52:e8:43:05:12:e5:82:
43:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F9:0B:48:93:96:2C:90:C4:87:2C:E4:A1:D2:51:41:62:44:7C:C5
X509v3 Authority Key Identifier:
keyid:87:ED:9C:B8:34:0A:C2:09:5A:4C:B0:52:8E:5E:A2:F7:38:CE:A6:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h-2cuDQKwglaTLBSjl6i9zjOpnI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/Q_kLSJOWLJDEhyzkodJRQWJEfMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/6381d3-5d01-4abc-bed7-7b21bf303ccc/1/h-2cuDQKwglaTLBSjl6i9zjOpnI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.197.213.0/24
185.197.215.0/24
Signature Algorithm: sha256WithRSAEncryption
81:34:7c:4f:8e:10:9d:70:7f:78:77:39:88:57:2f:2c:de:97:
8f:53:63:b3:60:33:f2:b7:5d:ff:e3:70:4d:eb:dc:c1:10:9a:
dc:49:fa:d9:76:79:ae:5c:6f:bd:e1:04:63:14:73:35:04:02:
53:10:7b:d4:8f:fd:cc:db:df:f8:d7:1e:af:7c:18:b1:06:39:
1f:3a:14:87:f8:88:a8:da:0f:03:89:ca:ee:49:b5:37:df:4e:
6d:35:54:31:07:52:df:b1:a8:c0:b8:de:ab:68:be:b1:9d:08:
4c:06:32:12:7b:05:a6:9a:d2:2a:7c:25:30:21:77:a9:c0:4c:
0d:1a:1f:40:af:b8:0c:49:58:69:1d:f8:8e:7e:5b:38:02:ae:
14:b8:8b:cc:e2:af:6e:ab:75:db:95:8a:75:0e:86:ac:80:b8:
d9:2d:12:7d:f6:d3:ef:4a:5c:5a:63:cc:a2:48:de:a7:23:6d:
06:d4:1e:ca:32:6a:e5:60:56:92:8a:1a:48:d6:1c:46:11:60:
f0:25:2a:c7:59:13:43:0e:19:6d:8e:d0:7f:65:d6:97:36:61:
96:a2:51:91:b9:f2:20:28:4e:ea:66:25:dc:67:6e:fc:fa:93:
2a:59:0c:40:a7:1f:53:20:7b:12:43:d8:c8:d2:ce:04:a2:59:
35:5a:92:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 22:01:04 2025 by rpki-client