Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/959a11-9eff-46c0-a5b5-94a2d5fe14f2/1/qI5ZkLoVisq_UDzvwtwGf6ZvkB0.roa
File: qI5ZkLoVisq_UDzvwtwGf6ZvkB0.roa (raw, json)
Hash identifier: 04fvqMW7OiU3VGqKEvGmhoXlU0DGbDMZiZCeQ23oQNc=
Subject key identifier: A8:8E:59:90:BA:15:8A:CA:BF:50:3C:EF:C2:DC:06:7F:A6:6F:90:1D
Certificate issuer: /CN=4a64d32cd26137be9c021101f95a7534d5fa5310
Certificate serial: 05C9731B
Authority key identifier: 4A:64:D3:2C:D2:61:37:BE:9C:02:11:01:F9:5A:75:34:D5:FA:53:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SmTTLNJhN76cAhEB-Vp1NNX6UxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/959a11-9eff-46c0-a5b5-94a2d5fe14f2/1/qI5ZkLoVisq_UDzvwtwGf6ZvkB0.roa
Signing time: Sat 01 Jan 2022 09:00:12 +0000
ROA not before: Sat 01 Jan 2022 09:00:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209935
IP address blocks: 185.226.56.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97088283 (0x5c9731b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a64d32cd26137be9c021101f95a7534d5fa5310
Validity
Not Before: Jan 1 09:00:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a88e5990ba158acabf503cefc2dc067fa66f901d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b2:c6:79:50:46:55:e8:8b:8f:bb:b6:dc:d0:
ac:c6:33:a3:96:53:10:90:33:24:41:57:98:f5:9a:
69:73:39:f2:d1:d9:81:c6:0a:25:75:c0:5b:2b:b6:
89:3e:52:22:ca:79:fc:97:dd:89:55:db:0b:35:78:
11:a6:90:2c:af:b7:67:c9:5e:e1:f1:fc:d0:11:6a:
d3:d8:4e:83:a8:d5:4b:e8:6b:de:98:39:54:72:64:
20:7b:b3:dc:e1:25:61:c7:bc:3e:89:f0:17:df:0b:
c5:00:97:3f:fa:5f:38:ca:c0:7b:d6:98:33:48:6e:
65:e2:25:93:b4:95:0f:40:79:e3:3e:d0:5e:c3:bc:
0a:49:bb:0b:95:60:44:a6:02:37:8a:18:95:83:af:
86:b9:23:95:58:0c:5e:e1:43:51:cb:c6:ee:99:04:
3a:4d:1d:bc:48:70:57:63:15:4a:52:d6:33:2c:92:
46:ce:95:1a:ce:71:8c:41:a0:e0:ed:40:a7:40:1f:
c7:ba:cb:d4:b1:15:11:fa:f8:e4:54:90:28:4e:c2:
4b:74:2c:fd:c1:30:77:0e:5f:44:c6:9d:93:c1:6c:
a0:45:f6:9e:af:99:d7:37:8f:95:0a:bb:6c:43:01:
8e:53:8c:3c:9d:a8:bf:42:40:16:44:d9:6e:35:e2:
d9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:8E:59:90:BA:15:8A:CA:BF:50:3C:EF:C2:DC:06:7F:A6:6F:90:1D
X509v3 Authority Key Identifier:
keyid:4A:64:D3:2C:D2:61:37:BE:9C:02:11:01:F9:5A:75:34:D5:FA:53:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SmTTLNJhN76cAhEB-Vp1NNX6UxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/959a11-9eff-46c0-a5b5-94a2d5fe14f2/1/qI5ZkLoVisq_UDzvwtwGf6ZvkB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/959a11-9eff-46c0-a5b5-94a2d5fe14f2/1/SmTTLNJhN76cAhEB-Vp1NNX6UxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.226.56.0/22
Signature Algorithm: sha256WithRSAEncryption
04:6f:1d:a7:09:59:8a:73:42:ff:11:73:de:7b:ec:42:42:b3:
ad:7b:0b:43:ac:9d:1a:ad:ed:3b:96:21:42:c3:f4:b9:37:b0:
41:b3:83:dd:c8:ce:5d:3e:b1:92:50:4d:f2:e8:6d:2b:97:d8:
cf:4d:e3:da:50:06:27:0b:96:47:69:81:f6:f9:d3:fe:4f:5b:
5d:32:4c:f9:ca:ba:37:45:4f:79:33:88:f5:d2:e9:6a:9d:29:
51:96:61:4a:50:1c:50:2d:7b:c4:f5:a1:d5:2f:4a:6f:7a:bb:
17:af:79:82:1a:9a:b5:35:42:b9:12:e0:7d:1a:2f:1c:79:33:
95:12:2a:b1:76:39:ea:0d:81:9c:f0:16:f4:82:c5:54:b7:66:
1c:bc:97:d6:01:21:83:e9:53:ea:c8:48:75:c0:62:6b:b8:de:
99:21:78:14:6c:57:93:58:1b:b6:ce:4b:c0:9c:11:40:4d:00:
fa:c7:1e:07:0e:ba:ef:e2:0c:40:00:41:7c:6b:be:75:8c:e8:
ad:6d:3b:93:95:05:56:8b:2f:bb:b1:aa:30:df:d9:50:76:43:
95:07:ac:2d:2b:8e:25:fb:36:8f:1c:9a:36:89:02:64:d1:71:
c2:f4:9d:11:4d:06:02:64:0d:de:b6:bc:ed:86:3b:b1:e3:3e:
ae:b3:56:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:47:30 2025 by rpki-client