Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/Qtry2kaoKZp9d0kAKEVlWC9a8yA.roa
File: Qtry2kaoKZp9d0kAKEVlWC9a8yA.roa (raw, json)
Hash identifier: 4P/5LEPA+7GLBNpRQSC8l1dlaoBUTtizVxJtdSJCc5Q=
Subject key identifier: 42:DA:F2:DA:46:A8:29:9A:7D:77:49:00:28:45:65:58:2F:5A:F3:20
Certificate issuer: /CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9
Certificate serial: 01942521BDB03CFA4FC4B1FE1A811CA09E33
Authority key identifier: 3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/Qtry2kaoKZp9d0kAKEVlWC9a8yA.roa
Signing time: Thu 02 Jan 2025 03:49:15 +0000
ROA not before: Thu 02 Jan 2025 03:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203343
IP address blocks: 185.120.24.0/22 maxlen: 24
2a0f:a5c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:bd:b0:3c:fa:4f:c4:b1:fe:1a:81:1c:a0:9e:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f1c938bb206a3896d064c0852fa9885ff2cebd9
Validity
Not Before: Jan 2 03:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42daf2da46a8299a7d774900284565582f5af320
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:07:9c:72:89:76:d5:e3:b5:41:a4:29:d4:b6:
b8:d3:74:b7:e4:b9:00:68:b3:70:07:98:43:64:0a:
96:4c:a3:ba:c2:86:74:5d:57:09:ef:e5:f5:9b:57:
71:43:64:18:c6:6a:5e:06:cf:d4:ad:61:61:e3:84:
a0:d8:80:4e:85:4d:60:18:5d:be:65:3b:18:64:e3:
9b:d6:c1:25:66:bb:4a:3c:57:a2:2f:20:7b:96:01:
88:eb:26:dd:11:c3:93:65:b1:32:9a:4d:be:16:20:
34:67:95:7a:f9:b6:e8:ff:a4:2d:04:9c:00:29:ad:
05:67:ae:f1:6f:d3:77:3e:ec:5d:d2:10:2a:6a:73:
dc:ed:de:5c:c9:41:d6:6f:4f:ea:6f:9f:39:a8:f1:
80:c0:56:24:76:32:8f:6c:32:c3:3c:b3:a9:9d:6a:
aa:b3:bc:b9:7a:1b:5e:60:d6:ba:bf:e7:2d:5a:80:
2b:18:52:91:3e:f6:d9:0a:de:97:ac:41:e4:a2:29:
8c:21:b2:02:7c:37:1d:66:fc:7e:90:ef:39:51:8f:
e7:60:36:96:3e:9e:12:51:8c:2f:9e:b4:ca:98:4a:
aa:a1:49:00:e8:56:2c:2b:cc:09:ed:aa:90:80:92:
ba:2f:c2:db:a9:ae:39:2f:fa:9f:d4:85:0d:02:d4:
8e:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DA:F2:DA:46:A8:29:9A:7D:77:49:00:28:45:65:58:2F:5A:F3:20
X509v3 Authority Key Identifier:
keyid:3F:1C:93:8B:B2:06:A3:89:6D:06:4C:08:52:FA:98:85:FF:2C:EB:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PxyTi7IGo4ltBkwIUvqYhf8s69k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/Qtry2kaoKZp9d0kAKEVlWC9a8yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/3b249c-b40e-4fb9-8ff4-e0526033a484/1/PxyTi7IGo4ltBkwIUvqYhf8s69k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.24.0/22
IPv6:
2a0f:a5c0::/32
Signature Algorithm: sha256WithRSAEncryption
0a:19:a1:2a:a2:11:e7:84:fa:19:98:9d:3d:54:81:22:61:d9:
f6:04:af:8b:cd:9c:e4:4f:53:e6:1b:94:c7:ce:f0:25:bc:d2:
9c:b1:06:45:fc:e5:4c:2f:6c:2e:58:98:3e:72:a2:5e:5d:5b:
b5:e7:21:e4:f3:70:61:93:73:92:db:4d:4c:fb:b4:79:28:93:
7d:79:c7:85:ff:e2:30:51:d3:85:64:d5:57:e7:af:6b:0f:3c:
94:a8:43:fd:8c:93:a3:b3:91:c7:f0:06:2a:6b:f5:50:50:2f:
5e:63:f7:b7:57:36:d8:00:4f:9f:f2:d9:ab:ad:08:3b:69:dd:
95:37:1e:e1:e1:11:f0:24:a4:af:38:77:74:9f:be:9a:ef:12:
fc:f9:b2:4d:a1:53:3b:60:c8:3e:0c:c8:16:ac:25:62:96:87:
38:02:c9:7b:1e:d6:7f:23:c7:23:81:19:77:3f:fd:76:ad:32:
d2:4e:ee:dd:61:2d:4c:05:9e:d3:50:29:c3:75:c8:47:48:2f:
bd:99:a9:6c:1f:73:c6:f2:f0:90:be:e6:d8:46:be:fe:4b:93:
97:7f:7f:47:9c:95:e6:91:fe:4b:c7:63:cc:d8:7e:ae:2f:dd:
78:02:d6:4e:f0:c8:41:85:0c:4f:92:ee:83:d8:de:d0:41:92:
52:f6:e3:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:02 2025 by rpki-client