Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/QSsP3hVliieFZmqEh-oXRbOngVs.roa
File: QSsP3hVliieFZmqEh-oXRbOngVs.roa (raw, json)
Hash identifier: +SXMbXSSzjopaotKF7OHij1zUgdfHzWAWlGpHYpJIV8=
Subject key identifier: 41:2B:0F:DE:15:65:8A:27:85:66:6A:84:87:EA:17:45:B3:A7:81:5B
Certificate issuer: /CN=06c44b821ab5db542cc536c1f88b84baf0621654
Certificate serial: 019425FC8E1C544C3902AB103907C9792D6F
Authority key identifier: 06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/QSsP3hVliieFZmqEh-oXRbOngVs.roa
Signing time: Thu 02 Jan 2025 07:48:15 +0000
ROA not before: Thu 02 Jan 2025 07:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203409
IP address blocks: 185.128.36.0/24 maxlen: 24
185.128.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:8e:1c:54:4c:39:02:ab:10:39:07:c9:79:2d:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06c44b821ab5db542cc536c1f88b84baf0621654
Validity
Not Before: Jan 2 07:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=412b0fde15658a2785666a8487ea1745b3a7815b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:5c:2f:81:08:7b:49:5a:4c:22:cb:27:63:1e:
26:6b:4f:26:d9:84:78:9b:28:d9:47:21:11:26:13:
50:cc:84:96:6a:f9:e8:79:e0:1f:f1:35:cf:02:96:
e2:18:d9:bb:ea:46:d7:3f:c0:59:5d:ee:f7:e0:19:
b7:a7:95:1a:86:82:d3:6c:e0:6d:45:51:18:4c:49:
82:7e:02:61:6e:b2:7f:8e:95:d6:e1:f5:43:27:28:
c2:5f:d6:93:11:5c:29:4a:9b:5f:21:98:9e:b3:9d:
99:a7:4c:07:57:3b:7d:eb:b9:95:bc:59:cf:2f:15:
7f:e7:68:02:48:e9:3f:eb:30:cd:4a:d7:bb:ff:ed:
47:d8:59:ce:0c:a4:a8:87:a9:fd:a5:fc:bf:41:c1:
52:8b:e1:cc:fb:4c:dd:f8:53:1f:ae:05:98:06:1f:
5b:19:62:d1:bc:fb:b2:11:01:0d:d8:db:df:34:3a:
60:5a:bd:db:97:de:9a:60:96:65:63:df:ce:94:8e:
4e:5d:7a:6a:90:8a:d1:88:8e:1c:08:e6:bf:d4:e5:
bc:f3:05:26:80:2d:44:3f:c4:be:76:23:ff:70:5b:
f7:fb:a8:e8:14:95:32:d6:bd:08:6c:4f:64:a6:42:
2e:f3:c0:1f:8e:85:7a:e8:02:01:c0:4b:97:94:8e:
1d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2B:0F:DE:15:65:8A:27:85:66:6A:84:87:EA:17:45:B3:A7:81:5B
X509v3 Authority Key Identifier:
keyid:06:C4:4B:82:1A:B5:DB:54:2C:C5:36:C1:F8:8B:84:BA:F0:62:16:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BsRLghq121QsxTbB-IuEuvBiFlQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/QSsP3hVliieFZmqEh-oXRbOngVs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/79cef8-43a1-4089-809f-dc984265567d/1/BsRLghq121QsxTbB-IuEuvBiFlQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.128.36.0/23
Signature Algorithm: sha256WithRSAEncryption
68:48:51:1e:b0:a0:66:5f:5e:c4:f9:42:09:2d:d9:e3:bb:f8:
21:b9:7a:c3:f4:81:f5:a5:06:7f:3d:da:7b:66:14:96:d4:0f:
99:8c:dc:76:8e:0a:fb:47:56:b6:c6:ed:bd:36:4a:40:33:67:
3c:0a:80:33:21:ef:5c:a2:80:ad:31:59:03:72:1b:37:25:86:
bc:15:90:54:38:91:77:c8:a4:a1:a6:76:a5:61:7c:88:da:69:
0b:f9:a9:34:0f:96:25:fd:6a:3c:f3:20:8c:bc:8e:d7:c6:da:
bf:fb:67:b0:4f:32:bc:56:d0:47:4d:3e:28:f9:25:ba:57:81:
ff:af:1d:20:b0:0a:52:32:b8:9f:2e:55:41:ef:a2:d6:40:ab:
fb:c0:34:c6:d8:55:1a:c1:ee:35:bd:5d:b0:fa:62:b4:44:26:
8e:e9:e6:df:35:d5:66:62:af:3a:b6:55:e9:d4:29:1a:cc:9e:
b9:9b:07:ad:8e:d4:d9:b4:e0:94:94:7e:28:4c:c1:8e:85:b4:
54:57:a7:cf:49:9d:96:5a:4c:58:11:77:b2:8d:2f:25:ef:34:
4c:6f:40:87:40:c0:2d:92:97:55:99:59:c5:cc:76:b5:7c:d6:
6a:b5:c9:b0:06:5b:6c:88:da:e8:34:6d:31:59:a8:46:49:d4:
c5:e1:0f:8a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/I4cVEw5AqsQOQfJeS1vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2YzQ0YjgyMWFiNWRiNTQyY2M1MzZjMWY4OGI4NGJhZjA2
MjE2NTQwHhcNMjUwMTAyMDc0ODE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTJiMGZkZTE1NjU4YTI3ODU2NjZhODQ4N2VhMTc0NWIzYTc4MTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1wvgQh7SVpMIssnYx4ma08m2YR4
myjZRyERJhNQzISWavnoeeAf8TXPApbiGNm76kbXP8BZXe734Bm3p5UahoLTbOBt
RVEYTEmCfgJhbrJ/jpXW4fVDJyjCX9aTEVwpSptfIZies52Zp0wHVzt967mVvFnP
LxV/52gCSOk/6zDNSte7/+1H2FnODKSoh6n9pfy/QcFSi+HM+0zd+FMfrgWYBh9b
GWLRvPuyEQEN2NvfNDpgWr3bl96aYJZlY9/OlI5OXXpqkIrRiI4cCOa/1OW88wUm
gC1EP8S+diP/cFv3+6joFJUy1r0IbE9kpkIu88AfjoV66AIBwEuXlI4dFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEErD94VZYonhWZqhIfqF0Wzp4FbMB8GA1UdIwQY
MBaAFAbES4IatdtULMU2wfiLhLrwYhZUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYt
ZGM5ODQyNjU1NjdkLzEvUVNzUDNoVmxpaWVGWm1xRWgtb1hSYk9uZ1ZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83OWNlZjgtNDNhMS00MDg5LTgwOWYtZGM5ODQyNjU1Njdk
LzEvQnNSTGdocTEyMVFzeFRiQi1JdUV1dkJpRmxRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBuYAkMA0G
CSqGSIb3DQEBCwUAA4IBAQBoSFEesKBmX17E+UIJLdnju/ghuXrD9IH1pQZ/Pdp7
ZhSW1A+ZjNx2jgr7R1a2xu29NkpAM2c8CoAzIe9cooCtMVkDchs3JYa8FZBUOJF3
yKShpnalYXyI2mkL+ak0D5Yl/Wo88yCMvI7Xxtq/+2ewTzK8VtBHTT4o+SW6V4H/
rx0gsApSMrifLlVB76LWQKv7wDTG2FUawe41vV2w+mK0RCaO6ebfNdVmYq86tlXp
1CkazJ65mwetjtTZtOCUlH4oTMGOhbRUV6fPSZ2WWkxYEXeyjS8l7zRMb0CHQMAt
kpdVmVnFzHa1fNZqtcmwBltsiNroNG0xWahGSdTF4Q+K
-----END CERTIFICATE-----
Generated at Tue Apr 8 01:05:04 2025 by rpki-client