Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/q0-APqUgLoVBnQT3evg6Aceprho.roa
File: q0-APqUgLoVBnQT3evg6Aceprho.roa (raw, json)
Hash identifier: KMteyALPNSGK6aYd0jfyse26wJY3UaZc/RXyizAS5do=
Subject key identifier: AB:4F:80:3E:A5:20:2E:85:41:9D:04:F7:7A:F8:3A:01:C7:A9:AE:1A
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC2224967A6EA6985CABEE4CD42D39
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/q0-APqUgLoVBnQT3evg6Aceprho.roa
Signing time: Wed 01 Jan 2025 17:48:56 +0000
ROA not before: Wed 01 Jan 2025 17:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209945
IP address blocks: 5.182.28.0/22 maxlen: 22
91.201.107.0/24 maxlen: 24
92.118.108.0/24 maxlen: 24
185.255.98.0/23 maxlen: 23
195.149.127.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:22:24:96:7a:6e:a6:98:5c:ab:ee:4c:d4:2d:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab4f803ea5202e85419d04f77af83a01c7a9ae1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f6:f9:41:2e:66:23:0c:c3:da:19:0a:bf:b1:
e2:f9:9c:c6:09:3d:f3:7f:a8:55:a9:7b:e1:49:e0:
86:f6:8e:5f:96:11:1a:e2:01:73:bd:68:96:b7:2b:
93:92:1e:0e:c8:44:88:14:c5:c4:5b:84:63:46:65:
f8:17:b0:88:3d:c8:14:ee:05:65:c2:de:c2:a8:75:
3f:4f:53:bb:9e:8e:de:b9:38:4b:b8:d1:38:5d:69:
94:8f:74:a5:b3:9f:db:44:97:56:49:63:14:8a:59:
68:4f:cc:68:59:9a:79:75:dc:53:35:ca:a5:39:39:
0a:33:90:83:05:50:b5:fb:58:f7:61:02:50:dc:b5:
89:a3:3b:b9:ff:ed:79:5d:5d:7e:98:bd:c0:fa:2b:
e3:50:8d:4a:a3:95:2d:18:7d:8c:74:9c:34:dc:f4:
a3:61:4d:c0:40:18:39:03:d0:65:b9:5b:96:9d:e7:
62:d6:57:82:23:c9:dd:aa:74:b6:34:4c:4b:b0:f1:
18:3d:dc:3e:23:61:02:54:8a:3f:db:49:0a:0f:b0:
b0:c5:86:7e:a2:29:b0:82:f4:9b:81:e5:2f:39:ca:
bd:fd:db:60:99:cd:64:d1:7a:83:3e:8d:a5:51:62:
ec:2d:72:70:b3:38:7e:7a:6c:89:65:f4:89:e8:e7:
95:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:4F:80:3E:A5:20:2E:85:41:9D:04:F7:7A:F8:3A:01:C7:A9:AE:1A
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/q0-APqUgLoVBnQT3evg6Aceprho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.28.0/22
91.201.107.0/24
92.118.108.0/24
185.255.98.0/23
195.149.127.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ba:8b:50:24:d9:fb:bf:31:61:36:23:ed:ec:8c:f4:f1:e3:
0b:38:d2:98:92:c9:dd:38:11:44:36:a3:0f:03:f9:2f:f8:51:
4b:c3:07:01:6d:b7:d1:bf:a1:f9:6c:23:e4:7a:ef:bc:d6:26:
9c:df:f5:30:73:61:87:21:8c:08:6b:09:47:1d:52:0d:38:dd:
10:32:c9:45:bf:78:a8:2b:e6:76:b3:b4:d7:33:21:68:39:2e:
e0:e4:9f:f6:24:d5:00:7d:d3:74:82:8d:a4:54:82:4f:14:e1:
e2:ae:76:6d:69:af:08:54:65:52:ef:fa:07:2e:1c:b2:74:fc:
c0:1e:0e:0c:0c:42:2a:1c:f2:49:08:e9:81:b6:77:be:cc:d0:
fb:b1:54:a8:db:4d:09:8d:84:a2:5c:e1:ca:9a:b4:13:ca:93:
7f:30:5e:45:1e:7a:39:04:28:3c:6d:63:10:66:23:37:51:82:
2b:7b:d6:4c:44:2d:c1:19:2c:4b:7c:13:49:79:96:43:c7:21:
0a:7c:a9:16:65:2c:52:26:2a:34:76:84:1e:fd:a4:de:d6:46:
a6:5c:e2:30:43:a6:a2:b0:88:d2:a7:0f:f1:c2:cc:52:36:fc:
3b:51:f3:91:d2:2d:69:85:86:29:36:44:8a:1e:ca:6b:09:fe:
5e:4d:61:7f
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQi/CIklnpupphcq+5M1C05MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYWIzMDY4Mzg1OWVjN2UwMjA2ZmU5MjY1MzYzZThlMzk3
MWE5YTgwHhcNMjUwMTAxMTc0ODU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjRmODAzZWE1MjAyZTg1NDE5ZDA0Zjc3YWY4M2EwMWM3YTlhZTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvb5QS5mIwzD2hkKv7Hi+ZzGCT3z
f6hVqXvhSeCG9o5flhEa4gFzvWiWtyuTkh4OyESIFMXEW4RjRmX4F7CIPcgU7gVl
wt7CqHU/T1O7no7euThLuNE4XWmUj3Sls5/bRJdWSWMUilloT8xoWZp5ddxTNcql
OTkKM5CDBVC1+1j3YQJQ3LWJozu5/+15XV1+mL3A+ivjUI1Ko5UtGH2MdJw03PSj
YU3AQBg5A9BluVuWnedi1leCI8ndqnS2NExLsPEYPdw+I2ECVIo/20kKD7CwxYZ+
oimwgvSbgeUvOcq9/dtgmc1k0XqDPo2lUWLsLXJwszh+emyJZfSJ6OeVhwIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFKtPgD6lIC6FQZ0E93r4OgHHqa4aMB8GA1UdIwQY
MBaAFIurMGg4Wex+Agb+kmU2Po45camoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQt
M2FjOWU1NmMzMDg5LzEvcTAtQVBxVWdMb1ZCblFUM2V2ZzZBY2VwcmhvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi84MWZkMWEtNDdhNy00NWQ4LWJlNzQtM2FjOWU1NmMzMDg5
LzEvaTZzd2FEaFo3SDRDQnY2U1pUWS1qamx4cWFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCBbYcAwQA
W8lrAwQAXHZsAwQBuf9iAwQAw5V/MA0GCSqGSIb3DQEBCwUAA4IBAQB2uotQJNn7
vzFhNiPt7Iz08eMLONKYksndOBFENqMPA/kv+FFLwwcBbbfRv6H5bCPkeu+81iac
3/Uwc2GHIYwIawlHHVINON0QMslFv3ioK+Z2s7TXMyFoOS7g5J/2JNUAfdN0go2k
VIJPFOHirnZtaa8IVGVS7/oHLhyydPzAHg4MDEIqHPJJCOmBtne+zND7sVSo200J
jYSiXOHKmrQTypN/MF5FHno5BCg8bWMQZiM3UYIre9ZMRC3BGSxLfBNJeZZDxyEK
fKkWZSxSJio0doQe/aTe1kamXOIwQ6aisIjSpw/xwsxSNvw7UfOR0i1phYYpNkSK
HsprCf5eTWF/
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:14:40 2025 by rpki-client