Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/0QJCOt-53tnbei-BBNpPRqd93lA.roa
File: 0QJCOt-53tnbei-BBNpPRqd93lA.roa (raw, json)
Hash identifier: SxpfZus2XMCNBzDteZgXEjPeCC02JP1wgshR4fmnE74=
Subject key identifier: D1:02:42:3A:DF:B9:DE:D9:DB:7A:2F:81:04:DA:4F:46:A7:7D:DE:50
Certificate issuer: /CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Certificate serial: 01942444E0111B4B13362982C98669EF53B5
Authority key identifier: 28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/0QJCOt-53tnbei-BBNpPRqd93lA.roa
Signing time: Wed 01 Jan 2025 23:48:00 +0000
ROA not before: Wed 01 Jan 2025 23:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43298
IP address blocks: 185.113.135.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:e0:11:1b:4b:13:36:29:82:c9:86:69:ef:53:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28855852a4bcd1bf1ec813f3c13b0f1f372f3971
Validity
Not Before: Jan 1 23:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d102423adfb9ded9db7a2f8104da4f46a77dde50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:21:93:2b:2c:3a:30:76:c7:b9:23:4a:ed:87:
da:b1:59:fb:7b:26:02:ed:b9:35:2d:19:e3:46:1a:
98:dd:cc:5d:2f:dc:6b:05:b3:d6:dd:26:fb:5c:a4:
e3:93:00:8a:df:5b:db:f4:ba:2f:cd:02:29:ba:8a:
44:d5:da:2d:40:6b:51:87:13:6f:63:8c:c6:cd:ef:
dd:a0:d6:3a:8a:d5:a1:6d:2c:78:f1:8a:ee:bc:93:
4c:d2:c4:ac:48:14:09:41:04:d1:24:51:76:73:18:
c8:60:87:7f:97:b6:4b:87:c6:27:ed:90:54:f8:64:
0e:98:68:7e:3e:f0:1d:43:02:3d:d0:8a:77:fb:30:
e5:4b:e7:0e:41:37:4d:be:ef:6a:3a:ac:2f:e1:0b:
d5:12:8e:ad:69:a7:52:24:1e:a7:9c:e0:d2:54:8c:
38:fd:dd:1e:43:3d:63:dd:3c:6e:20:c8:b3:d6:36:
8e:40:40:03:b4:13:0b:35:c8:89:9b:f1:b8:af:34:
95:87:03:06:f3:e1:b9:61:b2:69:7b:5d:d1:ff:05:
94:96:9a:54:72:30:b4:5a:81:fe:3d:e9:a7:3d:7a:
32:ee:e9:14:81:0d:54:9a:f2:83:cf:96:bd:aa:4e:
4d:b6:28:44:20:8c:79:2d:ff:7a:d7:1e:9b:bf:80:
79:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:02:42:3A:DF:B9:DE:D9:DB:7A:2F:81:04:DA:4F:46:A7:7D:DE:50
X509v3 Authority Key Identifier:
keyid:28:85:58:52:A4:BC:D1:BF:1E:C8:13:F3:C1:3B:0F:1F:37:2F:39:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KIVYUqS80b8eyBPzwTsPHzcvOXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/0QJCOt-53tnbei-BBNpPRqd93lA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0e36fc-ba0b-4ce6-af6a-704463ebad36/1/KIVYUqS80b8eyBPzwTsPHzcvOXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.135.0/24
Signature Algorithm: sha256WithRSAEncryption
48:d1:75:65:25:59:0e:d5:71:f6:1d:09:6e:e0:07:2e:17:a2:
c1:d4:de:97:a5:1f:c3:ad:18:cb:29:8f:03:19:04:3c:ec:93:
c5:7c:16:2a:e7:bd:3c:6a:88:12:d7:d4:c0:04:e2:2e:ec:e1:
4f:aa:a3:65:88:09:61:4f:ed:4d:18:4a:1e:e5:c0:40:a7:b2:
73:86:c7:86:8f:25:06:7b:45:f6:43:b9:13:9c:26:43:1e:48:
a5:3c:5b:64:02:c1:5d:6c:dd:76:df:cf:7a:6c:90:e8:0d:6a:
3a:f2:32:d3:0d:39:27:7d:1d:7a:8f:31:a8:e8:1f:9c:57:f3:
52:c8:cf:39:43:14:fd:84:c3:bd:10:76:13:c4:60:6d:b6:1d:
cf:90:13:e6:56:55:a9:ed:dd:fa:c2:ba:90:1a:f5:4a:2e:51:
94:0a:a9:77:a2:50:f8:97:10:5e:75:c5:3a:73:7b:e5:bb:45:
65:06:61:d8:84:45:92:9c:e3:15:c9:7b:8c:71:4a:f2:49:29:
b9:8b:67:32:b0:87:3a:9a:0d:73:fb:8a:b5:4f:9e:e0:48:6f:
a5:3b:8d:3a:4a:8d:3e:be:e8:b3:53:85:77:f2:fc:63:4a:0d:
53:ce:bb:d2:46:af:3b:21:d7:18:a7:0f:1c:4b:f5:7e:c7:68:
e3:23:5d:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkROARG0sTNimCyYZp71O1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4ODU1ODUyYTRiY2QxYmYxZWM4MTNmM2MxM2IwZjFmMzcy
ZjM5NzEwHhcNMjUwMTAxMjM0ODAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMTAyNDIzYWRmYjlkZWQ5ZGI3YTJmODEwNGRhNGY0NmE3N2RkZTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiGTKyw6MHbHuSNK7YfasVn7eyYC
7bk1LRnjRhqY3cxdL9xrBbPW3Sb7XKTjkwCK31vb9LovzQIpuopE1dotQGtRhxNv
Y4zGze/doNY6itWhbSx48YruvJNM0sSsSBQJQQTRJFF2cxjIYId/l7ZLh8Yn7ZBU
+GQOmGh+PvAdQwI90Ip3+zDlS+cOQTdNvu9qOqwv4QvVEo6taadSJB6nnODSVIw4
/d0eQz1j3TxuIMiz1jaOQEADtBMLNciJm/G4rzSVhwMG8+G5YbJpe13R/wWUlppU
cjC0WoH+PemnPXoy7ukUgQ1UmvKDz5a9qk5NtihEIIx5Lf961x6bv4B50wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNECQjrfud7Z23ovgQTaT0anfd5QMB8GA1UdIwQY
MBaAFCiFWFKkvNG/HsgT88E7Dx83LzlxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEt
NzA0NDYzZWJhZDM2LzEvMFFKQ090LTUzdG5iZWktQkJOcFBScWQ5M2xBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC8wZTM2ZmMtYmEwYi00Y2U2LWFmNmEtNzA0NDYzZWJhZDM2
LzEvS0lWWVVxUzgwYjhleUJQendUc1BIemN2T1hFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuXGHMA0G
CSqGSIb3DQEBCwUAA4IBAQBI0XVlJVkO1XH2HQlu4AcuF6LB1N6XpR/DrRjLKY8D
GQQ87JPFfBYq5708aogS19TABOIu7OFPqqNliAlhT+1NGEoe5cBAp7JzhseGjyUG
e0X2Q7kTnCZDHkilPFtkAsFdbN123896bJDoDWo68jLTDTknfR16jzGo6B+cV/NS
yM85QxT9hMO9EHYTxGBtth3PkBPmVlWp7d36wrqQGvVKLlGUCql3olD4lxBedcU6
c3vlu0VlBmHYhEWSnOMVyXuMcUrySSm5i2cysIc6mg1z+4q1T57gSG+lO406So0+
vuizU4V38vxjSg1TzrvSRq87IdcYpw8cS/V+x2jjI10K
-----END CERTIFICATE-----
Generated at Tue Apr 8 07:39:17 2025 by rpki-client