Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/qBbXPlomssD9zrP_xFljqdR0LbI.roa
File: qBbXPlomssD9zrP_xFljqdR0LbI.roa (raw, json)
Hash identifier: Gow+NF8w68xqHQfvdIHVUtAvsOi+ZzLSZN8/SeU/9ok=
Subject key identifier: A8:16:D7:3E:5A:26:B2:C0:FD:CE:B3:FF:C4:59:63:A9:D4:74:2D:B2
Certificate issuer: /CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Certificate serial: 019422201C31FAC43E3A8E012314015BFD46
Authority key identifier: 1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/qBbXPlomssD9zrP_xFljqdR0LbI.roa
Signing time: Wed 01 Jan 2025 13:48:37 +0000
ROA not before: Wed 01 Jan 2025 13:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8448
IP address blocks: 84.225.192.0/18 maxlen: 18
188.44.128.0/17 maxlen: 17
217.79.128.0/20 maxlen: 20
2a00:1878::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:1c:31:fa:c4:3e:3a:8e:01:23:14:01:5b:fd:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f1293cbbe2f692540d3cc5a6e823660494c4063
Validity
Not Before: Jan 1 13:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a816d73e5a26b2c0fdceb3ffc45963a9d4742db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:aa:8f:8e:8f:f3:eb:42:94:8c:2c:07:06:f7:
ac:0f:3e:08:20:30:d4:10:52:d1:41:6b:ae:0a:30:
45:dd:ce:0d:fb:0d:96:19:88:a9:b3:3c:53:b9:23:
95:3d:ee:e7:e7:c1:c8:e2:fd:f5:83:a5:e5:3e:40:
6e:95:db:20:68:c6:0f:c8:46:54:4b:99:31:2b:96:
e9:30:89:f4:e4:1e:ca:80:48:d9:3a:04:9f:45:7c:
f8:47:60:d1:fc:6b:08:6e:25:5a:0a:3a:98:7c:8e:
51:9a:f8:0d:7f:d9:9b:5f:17:3d:56:fd:9f:e9:a0:
46:3c:3e:07:54:9e:44:33:43:20:93:e0:fb:68:5d:
49:8b:6a:09:d9:8b:32:65:d6:23:95:4d:99:de:ac:
69:e2:0b:c0:d1:52:7b:2a:0c:0a:af:86:c3:4d:26:
a1:2e:b5:b1:be:99:18:05:4a:0b:01:41:62:a5:f5:
c1:5f:b9:4d:81:66:b9:cd:4b:e0:4a:0e:0c:f6:3a:
d0:a0:ae:3b:3c:cf:34:d7:5f:40:8f:97:23:c4:30:
7a:50:98:01:43:4b:d7:73:c6:f9:41:e9:95:a3:2c:
fc:81:cd:40:43:ba:8a:d3:ae:c6:4d:ab:6d:5e:17:
82:e9:22:61:71:b0:f8:16:db:5e:99:74:f0:7c:2e:
43:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:16:D7:3E:5A:26:B2:C0:FD:CE:B3:FF:C4:59:63:A9:D4:74:2D:B2
X509v3 Authority Key Identifier:
keyid:1F:12:93:CB:BE:2F:69:25:40:D3:CC:5A:6E:82:36:60:49:4C:40:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HxKTy74vaSVA08xaboI2YElMQGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/qBbXPlomssD9zrP_xFljqdR0LbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/3f5e3c-ac7b-4f0f-a874-26971599a554/1/HxKTy74vaSVA08xaboI2YElMQGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.225.192.0/18
188.44.128.0/17
217.79.128.0/20
IPv6:
2a00:1878::/29
Signature Algorithm: sha256WithRSAEncryption
57:00:af:1e:bf:25:61:81:43:2c:c9:20:03:fa:2b:26:6e:3e:
b7:d6:7f:c7:62:8c:41:89:15:28:36:8e:d2:fa:49:b0:79:0a:
d7:74:e6:47:ab:c5:fa:15:c9:bf:39:63:34:56:63:8f:19:82:
54:d8:4f:4e:29:86:59:0e:7b:68:77:ff:2f:40:2a:4b:92:90:
e2:ba:27:8c:72:7b:82:04:27:5e:35:6e:d8:47:0f:e1:0b:b2:
3c:3f:da:c0:0c:8b:15:ec:9d:61:7a:f5:a3:c7:9a:08:76:a6:
a2:22:6c:6a:95:49:b6:28:af:52:82:4b:dd:d5:e5:15:61:6f:
72:a7:3f:7d:30:22:cf:17:8c:4e:e6:5d:56:b0:c9:37:9c:b2:
26:42:43:3d:b5:ef:7a:ae:02:68:04:4b:32:14:1f:6c:14:5a:
34:6a:91:4d:18:c8:fe:e9:f4:4b:6c:2b:8f:90:b4:8b:11:55:
c7:65:20:1a:c4:9c:0d:2b:76:4b:e7:fe:06:00:c9:28:51:d4:
20:6c:49:4f:c6:95:90:1b:c3:5b:00:b1:34:0e:2b:a4:6c:d3:
b9:7a:3a:69:39:45:b4:6a:9a:be:ea:4b:f9:6b:00:a2:ca:39:
97:92:3e:d3:ef:1d:ea:4d:47:c9:78:9f:07:32:b6:1c:c0:ea:
2e:0e:67:1f
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAZQiIBwx+sQ+Oo4BIxQBW/1GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmMTI5M2NiYmUyZjY5MjU0MGQzY2M1YTZlODIzNjYwNDk0
YzQwNjMwHhcNMjUwMTAxMTM0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODE2ZDczZTVhMjZiMmMwZmRjZWIzZmZjNDU5NjNhOWQ0NzQyZGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKqPjo/z60KUjCwHBvesDz4IIDDU
EFLRQWuuCjBF3c4N+w2WGYipszxTuSOVPe7n58HI4v31g6XlPkBuldsgaMYPyEZU
S5kxK5bpMIn05B7KgEjZOgSfRXz4R2DR/GsIbiVaCjqYfI5RmvgNf9mbXxc9Vv2f
6aBGPD4HVJ5EM0Mgk+D7aF1Ji2oJ2YsyZdYjlU2Z3qxp4gvA0VJ7KgwKr4bDTSah
LrWxvpkYBUoLAUFipfXBX7lNgWa5zUvgSg4M9jrQoK47PM80119Aj5cjxDB6UJgB
Q0vXc8b5QemVoyz8gc1AQ7qK067GTattXheC6SJhcbD4FttemXTwfC5DjQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFKgW1z5aJrLA/c6z/8RZY6nUdC2yMB8GA1UdIwQY
MBaAFB8Sk8u+L2klQNPMWm6CNmBJTEBjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8zZjVlM2MtYWM3Yi00ZjBmLWE4NzQt
MjY5NzE1OTlhNTU0LzEvcUJiWFBsb21zc0Q5enJQX3hGbGpxZFIwTGJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8zZjVlM2MtYWM3Yi00ZjBmLWE4NzQtMjY5NzE1OTlhNTU0
LzEvSHhLVHk3NHZhU1ZBMDh4YWJvSTJZRWxNUUdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQGVOHAAwQH
vCyAAwQE2U+AMA0EAgACMAcDBQMqABh4MA0GCSqGSIb3DQEBCwUAA4IBAQBXAK8e
vyVhgUMsySAD+ismbj631n/HYoxBiRUoNo7S+kmweQrXdOZHq8X6Fcm/OWM0VmOP
GYJU2E9OKYZZDntod/8vQCpLkpDiuieMcnuCBCdeNW7YRw/hC7I8P9rADIsV7J1h
evWjx5oIdqaiImxqlUm2KK9Sgkvd1eUVYW9ypz99MCLPF4xO5l1WsMk3nLImQkM9
te96rgJoBEsyFB9sFFo0apFNGMj+6fRLbCuPkLSLEVXHZSAaxJwNK3ZL5/4GAMko
UdQgbElPxpWQG8NbALE0DiukbNO5ejppOUW0apq+6kv5awCiyjmXkj7T7x3qTUfJ
eJ8HMrYcwOouDmcf
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:37:47 2025 by rpki-client