Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/qxyxQlVHUvofNzmf_XqptKckrdE.roa
File: qxyxQlVHUvofNzmf_XqptKckrdE.roa (raw, json)
Hash identifier: cKnrJAob0FIV4Kpod3nX7eoqdSn57f3LQGAcTD4ltHg=
Subject key identifier: AB:1C:B1:42:55:47:52:FA:1F:37:39:9F:FD:7A:A9:B4:A7:24:AD:D1
Certificate issuer: /CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Certificate serial: 0194221F65D983BF75EE01E51CFD501B9BFF
Authority key identifier: 2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/qxyxQlVHUvofNzmf_XqptKckrdE.roa
Signing time: Wed 01 Jan 2025 13:47:50 +0000
ROA not before: Wed 01 Jan 2025 13:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201832
IP address blocks: 185.62.148.0/24 maxlen: 24
185.62.149.0/24 maxlen: 24
2a03:560::/48 maxlen: 48
2a03:560:1::/48 maxlen: 48
2a03:560:148::/48 maxlen: 48
2a03:560:149::/48 maxlen: 48
2a03:561::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:65:d9:83:bf:75:ee:01:e5:1c:fd:50:1b:9b:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f75bc7379f115b0671552c9baf2bed85bde8189
Validity
Not Before: Jan 1 13:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab1cb142554752fa1f37399ffd7aa9b4a724add1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:f6:c4:7b:c9:c0:86:22:9a:b5:a4:7a:81:
1a:fc:c0:c4:10:c7:16:f5:e1:7d:76:dd:32:1d:71:
0c:85:c6:52:76:ce:56:3e:f9:9d:2d:3c:ae:b6:ee:
84:87:da:63:1f:d8:83:f7:0d:55:3d:37:2b:c7:40:
73:8d:87:24:b8:88:5c:61:2f:74:c9:ca:d1:7a:7c:
19:5a:18:50:0b:00:3d:95:11:d4:db:d7:c6:52:2f:
bf:ba:05:7f:75:60:0d:2f:cc:ed:0a:78:77:77:52:
af:2f:36:ce:7a:88:fb:32:94:a8:58:2c:06:c1:b4:
f6:f1:a7:74:15:a2:aa:2b:67:18:4f:f9:b6:cc:91:
c3:5e:7b:d6:91:f5:59:35:6a:f2:a8:99:5b:2c:84:
c5:fa:c8:70:86:3a:c0:5b:4c:04:6f:6a:b8:31:6e:
fd:f9:2c:b4:b8:04:3e:2d:05:03:76:22:87:12:97:
58:01:12:76:06:c2:7a:df:15:35:06:a1:6b:e5:99:
ae:6a:08:01:72:23:0e:4b:6b:e9:58:40:70:c4:a1:
98:76:a9:5c:2e:3b:ee:9c:70:aa:fc:c4:c5:be:36:
10:ca:c1:3f:ce:94:69:57:5a:5f:57:67:8f:0d:a1:
18:1c:d6:c2:66:d6:7b:99:3a:66:3d:5b:f0:bf:a1:
f9:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1C:B1:42:55:47:52:FA:1F:37:39:9F:FD:7A:A9:B4:A7:24:AD:D1
X509v3 Authority Key Identifier:
keyid:2F:75:BC:73:79:F1:15:B0:67:15:52:C9:BA:F2:BE:D8:5B:DE:81:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3W8c3nxFbBnFVLJuvK-2FvegYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/qxyxQlVHUvofNzmf_XqptKckrdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/810d29-0c85-4057-b626-af0e417d4c3a/1/L3W8c3nxFbBnFVLJuvK-2FvegYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.62.148.0/23
IPv6:
2a03:560::/47
2a03:560:148::/47
2a03:561::/32
Signature Algorithm: sha256WithRSAEncryption
29:17:44:3b:b2:75:7f:3c:b1:9c:de:40:3f:a6:71:47:6d:dd:
9d:f0:f4:56:57:72:cd:de:e6:75:0e:0e:75:b6:45:fd:66:e5:
7b:10:90:52:b2:e6:0a:20:d3:5b:84:3f:49:94:1c:52:ad:bd:
dd:f7:a7:c3:ba:7d:44:8d:9c:ba:6e:e9:15:a8:bf:26:de:50:
75:51:49:97:9b:68:2f:a3:5a:7d:bb:57:d1:41:96:74:ba:a5:
50:34:a1:0f:bb:dc:d5:7e:30:7e:b0:ca:aa:d7:c4:e0:c4:95:
2e:3e:b7:07:89:25:54:b3:4c:6d:8b:26:17:e9:61:8a:7f:f9:
02:86:52:ee:06:52:0e:4a:e8:6e:5f:50:82:20:28:10:5b:52:
17:98:2c:3e:99:dd:21:fc:21:c0:6d:5a:c1:34:3a:66:6c:05:
53:6c:bb:8a:63:80:5e:ce:f8:6b:c9:98:21:79:45:95:e5:58:
d4:a6:1a:8b:c4:b4:93:9d:77:55:ba:94:c4:f8:aa:c0:4e:29:
8e:a3:0c:75:c7:64:44:f3:4e:ad:06:b8:9c:b3:8b:6b:ad:70:
a4:9c:f2:c4:33:08:10:47:6c:5a:c0:25:e2:b9:74:38:0c:08:
d1:37:d2:58:57:fe:82:c9:6c:78:b3:bf:13:27:62:57:4b:9b:
a2:8b:49:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 10:15:37 2025 by rpki-client