Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/qf1_Wz1js3xh5T6fOQssL748W8Y.roa
File: qf1_Wz1js3xh5T6fOQssL748W8Y.roa (raw, json)
Hash identifier: LIiJDjtWI/OSM/oOUeypQGPeFD9dNyCQffUSuaGgb/s=
Subject key identifier: A9:FD:7F:5B:3D:63:B3:7C:61:E5:3E:9F:39:0B:2C:2F:BE:3C:5B:C6
Certificate issuer: /CN=29085fc534c13e0882e260a895f3cf0c5543ef08
Certificate serial: 01942068089FC2A775FEDD50B98B21341350
Authority key identifier: 29:08:5F:C5:34:C1:3E:08:82:E2:60:A8:95:F3:CF:0C:55:43:EF:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQhfxTTBPgiC4mColfPPDFVD7wg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/qf1_Wz1js3xh5T6fOQssL748W8Y.roa
Signing time: Wed 01 Jan 2025 05:47:56 +0000
ROA not before: Wed 01 Jan 2025 05:47:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207658
IP address blocks: 185.187.60.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:08:9f:c2:a7:75:fe:dd:50:b9:8b:21:34:13:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29085fc534c13e0882e260a895f3cf0c5543ef08
Validity
Not Before: Jan 1 05:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9fd7f5b3d63b37c61e53e9f390b2c2fbe3c5bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:70:ed:e4:44:86:a7:52:cf:5b:75:8c:2c:ea:
7f:46:1c:91:3b:a0:3e:ba:ab:40:38:47:99:79:b8:
7c:cb:79:83:bd:86:2f:9b:1d:2c:79:97:e6:99:95:
a3:02:a5:bc:ed:50:12:e4:4e:de:0d:91:09:bd:cc:
2a:4c:b0:59:6a:68:36:b2:45:44:38:14:68:95:b2:
f7:24:f0:40:97:89:37:62:31:e8:81:55:29:92:5e:
3e:02:46:29:b6:58:69:51:2f:fa:d7:b7:1a:4d:22:
9c:1a:8a:4e:f8:6e:73:83:ae:a6:04:c6:50:79:5f:
0a:05:8c:30:ed:29:7d:ab:95:d0:83:58:fe:ad:8f:
3b:02:3f:04:4e:a6:8c:56:57:f0:43:54:18:57:43:
fd:44:c3:89:1a:14:33:51:88:26:13:10:82:ac:6a:
f4:02:ef:2f:37:df:a8:00:f5:b0:64:80:a6:6d:a3:
a4:79:4e:e1:c8:27:ee:9f:76:45:e0:39:97:af:70:
64:dc:2c:f3:83:10:ed:ee:ad:63:54:e8:60:65:c6:
c3:72:67:ad:fe:88:c0:ef:51:53:c4:77:ca:8c:14:
33:2a:4e:db:8e:1d:21:bd:c6:b1:7b:67:c1:ad:bd:
6d:59:8e:ba:6a:b5:30:69:81:9a:a4:9f:88:2f:6f:
08:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FD:7F:5B:3D:63:B3:7C:61:E5:3E:9F:39:0B:2C:2F:BE:3C:5B:C6
X509v3 Authority Key Identifier:
keyid:29:08:5F:C5:34:C1:3E:08:82:E2:60:A8:95:F3:CF:0C:55:43:EF:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQhfxTTBPgiC4mColfPPDFVD7wg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/qf1_Wz1js3xh5T6fOQssL748W8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/56d490-0196-45ac-83eb-c3297129e4d3/1/KQhfxTTBPgiC4mColfPPDFVD7wg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.60.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:28:09:a0:92:1b:42:f4:17:d8:1a:9c:d0:6e:18:7e:54:46:
c0:14:be:cc:55:35:b0:0b:72:0c:47:7f:5a:a9:44:6d:25:a0:
88:d0:70:d8:d0:be:70:90:33:04:ab:26:66:37:03:d0:e0:df:
2f:8f:6e:4e:59:29:ce:4c:a2:4b:13:d8:a8:81:ec:34:80:42:
46:27:96:9f:b2:44:97:6e:31:76:77:30:fc:d1:fb:42:bc:1b:
81:78:63:9a:db:c8:f4:27:9a:85:ad:64:5e:eb:92:d5:e0:11:
38:cc:32:ea:86:a0:b8:06:01:cf:fe:6d:49:b1:dd:39:d3:3b:
de:04:11:ab:d8:0c:f5:83:36:d3:7b:c4:0e:e2:f8:fd:05:f6:
92:e7:cd:f3:73:10:91:0a:71:a2:08:10:3c:5d:c4:04:dd:ad:
94:90:56:f8:e5:20:04:e4:24:17:dd:18:04:ce:1d:ce:09:70:
c9:23:90:79:72:97:2f:6f:ce:3b:b7:6e:60:8f:fc:58:c5:47:
92:96:fd:0c:b0:1e:8c:bf:f7:dd:a3:c5:09:03:0f:bd:f4:25:
9d:aa:c1:d5:48:97:d1:78:f8:03:fd:c5:46:06:96:ad:f5:e4:
27:ba:5e:21:16:75:12:a0:50:e6:f8:15:62:63:a6:c4:43:03:
6d:60:b6:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgaAifwqd1/t1QuYshNBNQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5MDg1ZmM1MzRjMTNlMDg4MmUyNjBhODk1ZjNjZjBjNTU0
M2VmMDgwHhcNMjUwMTAxMDU0NzU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWZkN2Y1YjNkNjNiMzdjNjFlNTNlOWYzOTBiMmMyZmJlM2M1YmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3Dt5ESGp1LPW3WMLOp/RhyRO6A+
uqtAOEeZebh8y3mDvYYvmx0seZfmmZWjAqW87VAS5E7eDZEJvcwqTLBZamg2skVE
OBRolbL3JPBAl4k3YjHogVUpkl4+AkYptlhpUS/617caTSKcGopO+G5zg66mBMZQ
eV8KBYww7Sl9q5XQg1j+rY87Aj8ETqaMVlfwQ1QYV0P9RMOJGhQzUYgmExCCrGr0
Au8vN9+oAPWwZICmbaOkeU7hyCfun3ZF4DmXr3Bk3CzzgxDt7q1jVOhgZcbDcmet
/ojA71FTxHfKjBQzKk7bjh0hvcaxe2fBrb1tWY66arUwaYGapJ+IL28IUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKn9f1s9Y7N8YeU+nzkLLC++PFvGMB8GA1UdIwQY
MBaAFCkIX8U0wT4IguJgqJXzzwxVQ+8IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS1FoZnhUVEJQZ2lDNG1Db2xmUFBERlZEN3dnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS81NmQ0OTAtMDE5Ni00NWFjLTgzZWIt
YzMyOTcxMjllNGQzLzEvcWYxX1d6MWpzM3hoNVQ2Zk9Rc3NMNzQ4VzhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS81NmQ0OTAtMDE5Ni00NWFjLTgzZWItYzMyOTcxMjllNGQz
LzEvS1FoZnhUVEJQZ2lDNG1Db2xmUFBERlZEN3dnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAubs8MA0G
CSqGSIb3DQEBCwUAA4IBAQCMKAmgkhtC9BfYGpzQbhh+VEbAFL7MVTWwC3IMR39a
qURtJaCI0HDY0L5wkDMEqyZmNwPQ4N8vj25OWSnOTKJLE9iogew0gEJGJ5afskSX
bjF2dzD80ftCvBuBeGOa28j0J5qFrWRe65LV4BE4zDLqhqC4BgHP/m1Jsd050zve
BBGr2Az1gzbTe8QO4vj9BfaS583zcxCRCnGiCBA8XcQE3a2UkFb45SAE5CQX3RgE
zh3OCXDJI5B5cpcvb847t25gj/xYxUeSlv0MsB6Mv/fdo8UJAw+99CWdqsHVSJfR
ePgD/cVGBpat9eQnul4hFnUSoFDm+BViY6bEQwNtYLYK
-----END CERTIFICATE-----
Generated at Mon Apr 7 00:39:37 2025 by rpki-client