Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/QWrc7L-Gi9eABPT-_Pd7pFaaBrs.roa
File: QWrc7L-Gi9eABPT-_Pd7pFaaBrs.roa (raw, json)
Hash identifier: 1HwvOR7hdhmN95F3miF5FGxRYE8x3MoZIF5v0ra6BVU=
Subject key identifier: 41:6A:DC:EC:BF:86:8B:D7:80:04:F4:FE:FC:F7:7B:A4:56:9A:06:BB
Certificate issuer: /CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
Certificate serial: 0194266B2BF1279F2A213C285CF296CFB3E2
Authority key identifier: 55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/QWrc7L-Gi9eABPT-_Pd7pFaaBrs.roa
Signing time: Thu 02 Jan 2025 09:49:05 +0000
ROA not before: Thu 02 Jan 2025 09:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200542
IP address blocks: 185.100.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:2b:f1:27:9f:2a:21:3c:28:5c:f2:96:cf:b3:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=554adb72b82ecfafc5705e25febcab5c82d76ee6
Validity
Not Before: Jan 2 09:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=416adcecbf868bd78004f4fefcf77ba4569a06bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ee:7b:f4:2e:e0:10:1a:e4:d6:64:e7:82:2b:
17:fa:3c:40:2d:4b:04:8d:93:92:6b:09:de:f9:4d:
b4:dd:63:1d:d0:85:4e:bd:d5:5a:a1:91:42:a1:4c:
11:7c:8d:17:e4:97:9c:c4:a0:c7:1b:c8:c6:48:bf:
95:a7:a5:2a:f2:7b:f8:a3:28:f6:85:bd:03:b1:ed:
22:13:c2:d8:0e:bc:6c:cb:bd:e4:4f:06:3e:96:b8:
f0:94:5d:0d:95:bf:23:42:11:13:52:6b:78:92:80:
08:60:3d:a7:4d:ac:81:ff:e0:e5:a8:f9:87:07:77:
bd:87:16:74:31:37:5e:81:72:f3:5f:c2:0a:44:e9:
c4:9f:cd:bd:6f:6b:d9:a9:94:fd:43:09:fc:40:07:
de:7b:97:95:50:f5:9c:8a:02:f7:52:b6:6b:8f:af:
5b:4d:1d:05:a5:05:f4:7a:58:19:81:f2:a5:29:f0:
66:17:aa:e0:13:1c:7c:6f:46:b3:89:f6:79:ee:27:
bf:ca:c8:62:ba:60:1b:8a:e8:cb:18:81:f6:07:5c:
25:a0:7e:f3:a1:33:35:43:8e:43:f7:c4:2e:0a:5a:
41:b1:63:a2:fe:57:37:29:09:1f:93:9a:a9:e8:d9:
8b:0d:43:8c:ac:08:08:a8:ca:b5:db:6e:86:f2:33:
7d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6A:DC:EC:BF:86:8B:D7:80:04:F4:FE:FC:F7:7B:A4:56:9A:06:BB
X509v3 Authority Key Identifier:
keyid:55:4A:DB:72:B8:2E:CF:AF:C5:70:5E:25:FE:BC:AB:5C:82:D7:6E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUrbcrguz6_FcF4l_ryrXILXbuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/QWrc7L-Gi9eABPT-_Pd7pFaaBrs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/5e3895-ae95-43e2-b7a1-75863f43476a/1/VUrbcrguz6_FcF4l_ryrXILXbuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.236.0/22
Signature Algorithm: sha256WithRSAEncryption
14:4a:ed:ee:aa:00:44:e7:a0:b6:37:80:c7:ba:a0:02:c8:95:
df:86:5c:b2:9c:01:7f:9a:cd:fe:b6:f8:2e:3b:4f:4f:ea:3b:
13:0b:b3:fb:31:60:a5:44:e6:68:4b:37:63:4f:4d:bb:d3:f0:
12:81:d7:28:07:11:44:b4:82:74:47:80:04:e1:62:bc:fe:2c:
ab:2d:df:86:26:29:22:f6:88:bb:21:2e:61:a7:ca:3d:d3:9d:
98:f4:eb:de:c3:28:4e:13:fe:a3:b4:b5:66:62:d6:01:31:7f:
26:0f:aa:cf:2f:91:f4:e5:80:1e:94:bb:bb:df:cb:06:0d:13:
ad:1f:43:2d:85:2c:38:b2:93:57:47:6b:9f:6e:53:44:41:03:
96:4b:5e:e4:47:5b:ad:92:7a:d9:9e:db:44:7e:de:62:c6:60:
c7:b3:1c:19:3a:00:73:77:19:01:e2:ec:5c:d2:1c:77:8b:11:
68:61:77:f3:c9:05:c9:a9:7b:ea:81:88:5f:0d:c2:e1:06:98:
f4:8d:7d:b0:20:cc:20:04:80:6e:54:4a:56:01:cb:a1:f0:ee:
94:dd:8c:e6:d0:66:79:65:6e:22:fa:11:77:72:ad:8b:d2:ad:
f1:d4:80:0f:af:02:57:44:a8:21:1a:9d:4d:93:c8:e3:cb:9d:
ca:54:dc:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:04 2025 by rpki-client