Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/QQ5JdZdcsAoWOsN0lcNfuSR1KXU.roa
File: QQ5JdZdcsAoWOsN0lcNfuSR1KXU.roa (raw, json)
Hash identifier: mOHdApB4PLrH4OsyY1d2WJlEAql5oBZn7Z/33FYWd/s=
Subject key identifier: 41:0E:49:75:97:5C:B0:0A:16:3A:C3:74:95:C3:5F:B9:24:75:29:75
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 01956CC5D781307387C3A6BA83CDAAF17E6E
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/QQ5JdZdcsAoWOsN0lcNfuSR1KXU.roa
Signing time: Thu 06 Mar 2025 18:44:19 +0000
ROA not before: Thu 06 Mar 2025 18:44:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212411
IP address blocks: 188.209.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:6c:c5:d7:81:30:73:87:c3:a6:ba:83:cd:aa:f1:7e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Mar 6 18:44:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=410e4975975cb00a163ac37495c35fb924752975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:27:08:5c:96:75:3d:7a:d0:b0:ad:53:db:05:
31:31:c9:ed:21:44:0c:4f:46:e6:13:8f:e6:d3:3f:
a8:9f:df:ab:c5:84:a1:db:d9:34:39:ff:38:d2:ac:
c5:ff:70:e7:2b:f4:19:2c:0b:53:29:2e:43:5e:2f:
ed:89:7d:35:bb:13:e5:26:de:a9:e2:8b:09:0b:39:
16:70:ef:d5:24:48:f4:4d:2b:c5:14:4c:cb:80:57:
ec:c2:c4:25:e9:31:cd:49:33:ff:cf:0d:37:e0:55:
86:6c:15:1c:a0:10:66:ef:cc:0c:b6:c7:f1:fe:3b:
fe:4e:37:4f:57:7d:b3:c2:e8:f8:c7:c7:65:24:18:
ed:15:1d:60:02:50:12:0e:b9:eb:9a:10:78:fd:47:
93:89:24:08:25:20:75:09:62:49:2d:75:54:cf:77:
ca:64:fa:f2:6a:f4:f4:74:ac:8b:13:f5:c1:8b:0b:
8a:b3:56:db:5f:a2:33:a5:9d:f5:c2:6f:03:9f:75:
65:8b:f4:e6:c9:9c:03:23:aa:6f:46:61:b9:34:fb:
03:14:b1:d7:f1:75:18:fe:f9:f8:7c:eb:c0:0f:56:
71:21:f5:4b:b2:52:af:0f:81:06:58:87:56:13:7f:
da:62:37:12:44:f9:3b:d9:bc:6e:c1:1c:b0:e1:24:
5f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:0E:49:75:97:5C:B0:0A:16:3A:C3:74:95:C3:5F:B9:24:75:29:75
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/QQ5JdZdcsAoWOsN0lcNfuSR1KXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.129.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:d4:87:c2:1a:41:ee:29:36:6f:9d:d0:51:70:3d:9f:1e:3c:
33:cd:a0:94:4e:6c:fd:41:ed:e3:35:cd:d1:84:90:34:fd:a4:
4c:fe:1b:b0:73:e6:7c:f3:d0:cd:10:36:36:23:13:75:31:91:
b3:af:43:b3:ab:d1:c3:84:71:a4:83:61:89:27:fc:69:ba:09:
a4:e2:c2:b6:5c:ec:2a:2f:cf:c6:52:9c:1a:d9:5a:77:8f:e9:
8c:aa:3b:c4:e0:b3:a4:6e:cd:c2:73:66:ba:e8:8d:3b:0f:6d:
04:e9:a5:79:de:ee:a3:b8:49:5d:90:c7:1f:7c:e6:00:71:b7:
bf:4f:9e:f9:b0:39:0b:2d:cb:99:55:74:42:8b:a3:2e:72:18:
a5:c0:25:fb:e3:d9:a4:09:75:12:c2:b0:65:35:f6:24:c8:89:
ee:5c:77:ac:6d:af:5f:fa:e6:66:ff:56:1f:e6:3f:35:5a:b7:
11:3e:fd:48:9b:b0:7b:d4:f4:f8:61:ab:45:db:17:5a:a6:6c:
53:23:7c:07:51:98:72:65:2d:c9:fc:d0:49:00:c2:20:12:03:
a1:d3:1c:fa:6e:48:b8:bb:85:4d:77:39:42:af:72:80:68:b9:
dd:c6:68:68:6e:cb:70:9a:36:6d:54:21:cb:03:f4:fa:60:c2:
e8:7a:48:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVsxdeBMHOHw6a6g82q8X5uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz
ZmUzYWIwHhcNMjUwMzA2MTg0NDE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTBlNDk3NTk3NWNiMDBhMTYzYWMzNzQ5NWMzNWZiOTI0NzUyOTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlScIXJZ1PXrQsK1T2wUxMcntIUQM
T0bmE4/m0z+on9+rxYSh29k0Of840qzF/3DnK/QZLAtTKS5DXi/tiX01uxPlJt6p
4osJCzkWcO/VJEj0TSvFFEzLgFfswsQl6THNSTP/zw034FWGbBUcoBBm78wMtsfx
/jv+TjdPV32zwuj4x8dlJBjtFR1gAlASDrnrmhB4/UeTiSQIJSB1CWJJLXVUz3fK
ZPryavT0dKyLE/XBiwuKs1bbX6IzpZ31wm8Dn3Vli/TmyZwDI6pvRmG5NPsDFLHX
8XUY/vn4fOvAD1ZxIfVLslKvD4EGWIdWE3/aYjcSRPk72bxuwRyw4SRfcwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEEOSXWXXLAKFjrDdJXDX7kkdSl1MB8GA1UdIwQY
MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt
M2Y4YjU1ZGExYWM0LzEvUVE1SmRaZGNzQW9XT3NOMGxjTmZ1U1IxS1hVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0
LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvNGBMA0G
CSqGSIb3DQEBCwUAA4IBAQCw1IfCGkHuKTZvndBRcD2fHjwzzaCUTmz9Qe3jNc3R
hJA0/aRM/huwc+Z889DNEDY2IxN1MZGzr0Ozq9HDhHGkg2GJJ/xpugmk4sK2XOwq
L8/GUpwa2Vp3j+mMqjvE4LOkbs3Cc2a66I07D20E6aV53u6juEldkMcffOYAcbe/
T575sDkLLcuZVXRCi6MuchilwCX749mkCXUSwrBlNfYkyInuXHesba9f+uZm/1Yf
5j81WrcRPv1Im7B71PT4YatF2xdapmxTI3wHUZhyZS3J/NBJAMIgEgOh0xz6bki4
u4VNdzlCr3KAaLndxmhobstwmjZtVCHLA/T6YMLoekgg
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:05:16 2025 by rpki-client