Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a4bdf9-3ca2-4d64-a1ac-17b9e32da5a9/1/qa75AdAqgmVEk86EfRueXXS0A6A.roa
File: qa75AdAqgmVEk86EfRueXXS0A6A.roa (raw, json)
Hash identifier: E5VH2m4KYnre1ehAoZqxsOUcO42PfRUm8ml9+dGOW6Y=
Subject key identifier: A9:AE:F9:01:D0:2A:82:65:44:93:CE:84:7D:1B:9E:5D:74:B4:03:A0
Certificate issuer: /CN=7097b9a4fc8fa314795a6a277d0e85f2cccaee3f
Certificate serial: 0C427E58
Authority key identifier: 70:97:B9:A4:FC:8F:A3:14:79:5A:6A:27:7D:0E:85:F2:CC:CA:EE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cJe5pPyPoxR5WmonfQ6F8szK7j8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a4bdf9-3ca2-4d64-a1ac-17b9e32da5a9/1/qa75AdAqgmVEk86EfRueXXS0A6A.roa
Signing time: Sat 01 Jan 2022 13:07:02 +0000
ROA not before: Sat 01 Jan 2022 13:07:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 204379
IP address blocks: 185.250.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 205684312 (0xc427e58)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7097b9a4fc8fa314795a6a277d0e85f2cccaee3f
Validity
Not Before: Jan 1 13:07:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a9aef901d02a82654493ce847d1b9e5d74b403a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:01:5a:41:e0:26:b9:9c:54:8e:32:f0:58:dd:
ed:98:de:30:39:8b:87:39:bb:be:f4:c4:b9:36:aa:
73:a9:5f:06:69:b2:7d:8d:60:c2:0e:78:7b:09:ac:
b3:49:3d:fa:36:eb:57:49:9a:65:a9:e3:9e:4d:b6:
46:da:ed:1a:d1:8c:c1:61:fa:bd:d4:f9:b5:b4:6a:
99:08:17:49:5e:2f:11:67:65:89:1a:5c:fc:0c:92:
79:cc:c1:db:76:2e:cd:f7:25:e6:80:0f:b5:18:3b:
e0:3d:2b:4b:0e:c9:f2:04:d0:22:53:64:25:c4:fd:
8b:72:a4:39:c3:75:df:9e:95:d7:69:33:ed:a4:f0:
84:67:4a:2d:f5:42:b2:60:c5:78:79:b8:97:f4:ce:
dd:d3:4e:3a:79:fd:92:15:40:22:43:39:eb:37:5b:
08:4f:17:ea:ed:83:8e:36:36:f1:02:b5:cb:ca:db:
1e:4e:d9:ea:90:85:16:e0:a2:dd:61:4f:4a:55:4a:
dd:06:65:49:9a:8e:5f:85:1f:fd:55:24:f2:f5:66:
41:f5:47:ec:39:84:a5:56:72:f3:5b:e3:ee:67:2f:
f5:c0:b3:9a:c4:da:eb:ad:44:c2:9b:67:a5:45:d6:
e9:a1:72:8e:ea:59:a1:91:63:ca:37:4a:28:19:27:
cd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AE:F9:01:D0:2A:82:65:44:93:CE:84:7D:1B:9E:5D:74:B4:03:A0
X509v3 Authority Key Identifier:
keyid:70:97:B9:A4:FC:8F:A3:14:79:5A:6A:27:7D:0E:85:F2:CC:CA:EE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cJe5pPyPoxR5WmonfQ6F8szK7j8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a4bdf9-3ca2-4d64-a1ac-17b9e32da5a9/1/qa75AdAqgmVEk86EfRueXXS0A6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a4bdf9-3ca2-4d64-a1ac-17b9e32da5a9/1/cJe5pPyPoxR5WmonfQ6F8szK7j8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.144.0/22
Signature Algorithm: sha256WithRSAEncryption
03:e7:ab:39:34:5f:a7:50:49:73:60:0d:18:f1:a5:ba:e8:7e:
0b:e9:09:20:2d:c4:86:37:2a:2c:31:a3:99:76:92:1c:fe:d9:
61:69:8a:56:98:95:c8:b7:eb:8e:42:44:bb:fb:b6:39:9e:7d:
38:75:52:04:fc:1e:55:ab:23:5c:34:81:e1:48:79:37:85:66:
64:c9:fc:e5:6c:ba:0f:62:a0:1e:42:93:4e:71:54:34:29:3e:
68:21:7f:c1:b9:89:4f:fd:0d:94:11:02:43:57:b6:e7:f7:f0:
18:ee:2b:1c:23:e1:92:3b:7b:8c:53:d1:e8:52:74:e4:ff:be:
cb:93:97:2b:6e:1d:15:e6:3c:e2:77:b6:f0:8f:22:33:9a:3b:
ca:68:e5:fb:2b:b5:a3:1e:47:7c:19:46:67:6e:7b:fd:08:27:
a0:8e:b1:af:2b:5d:20:92:ab:84:09:b7:b3:c7:15:f6:e9:1e:
13:28:f1:a4:2a:16:f5:63:68:84:8e:d5:0b:ba:82:c0:b1:90:
ac:06:83:84:ee:d4:04:ae:28:dc:2a:b5:68:80:00:bc:5f:b0:
cd:cd:69:26:31:4d:1d:a2:be:9a:79:6e:62:3b:e7:f9:37:c2:
f8:0d:aa:d4:1d:27:63:02:49:4c:be:ea:bd:cb:5a:c5:03:a8:
35:99:f9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:48 2025 by rpki-client