Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/qxB3G-DAT2TOHgf8cs1YnCiCmR8.roa
File: qxB3G-DAT2TOHgf8cs1YnCiCmR8.roa (raw, json)
Hash identifier: ZFrfwVtd1AtEvQCLNybyNQRnl8i0goc5HC9uTWDb3Lk=
Subject key identifier: AB:10:77:1B:E0:C0:4F:64:CE:1E:07:FC:72:CD:58:9C:28:82:99:1F
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 0195849142A601BB8E7E92D6EF7A37F798FE
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/qxB3G-DAT2TOHgf8cs1YnCiCmR8.roa
Signing time: Tue 11 Mar 2025 09:37:47 +0000
ROA not before: Tue 11 Mar 2025 09:37:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215645
IP address blocks: 185.243.181.0/24 maxlen: 24
185.254.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:84:91:42:a6:01:bb:8e:7e:92:d6:ef:7a:37:f7:98:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Mar 11 09:37:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab10771be0c04f64ce1e07fc72cd589c2882991f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:52:73:93:ea:7b:ea:dc:1c:67:51:3d:72:00:
90:37:79:8d:52:20:41:b9:a9:5b:55:42:be:5d:23:
13:65:a2:7e:de:c3:1e:16:6a:2a:20:ac:d3:de:1f:
a2:20:c1:73:29:ca:ba:24:b6:5e:28:64:5b:8b:30:
9d:c6:12:ef:10:64:fc:4e:6f:53:51:60:0c:69:e7:
93:64:37:c2:25:e1:ec:d3:aa:ff:33:33:32:02:e4:
6c:48:ec:61:02:72:64:62:c3:a2:f0:18:04:80:7c:
67:33:1f:4d:0b:88:37:76:52:77:92:7c:44:f4:95:
a1:8b:fe:1f:9f:71:7b:81:64:07:16:a5:42:aa:86:
80:1d:0d:1e:28:8c:dd:02:fc:9e:7e:8f:e9:eb:b6:
64:ab:f0:0d:92:c2:49:de:9a:15:7e:e8:22:12:62:
bc:04:2d:e3:10:ed:8e:00:c0:dc:01:13:53:b0:ac:
6c:0c:4f:ec:58:43:5f:df:db:36:bd:d6:0b:9f:9e:
2d:13:d4:86:96:46:39:44:be:a4:6c:c5:f8:df:6e:
ef:84:d5:59:48:5f:51:66:bd:df:7b:b3:13:2a:cc:
3f:1c:05:bc:26:e0:29:4f:37:49:74:04:8b:7c:77:
f1:33:7d:a7:7d:36:9e:ed:d4:20:32:de:16:9d:c4:
54:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:10:77:1B:E0:C0:4F:64:CE:1E:07:FC:72:CD:58:9C:28:82:99:1F
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/qxB3G-DAT2TOHgf8cs1YnCiCmR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.181.0/24
185.254.28.0/24
Signature Algorithm: sha256WithRSAEncryption
18:9c:9c:f0:4d:01:93:55:03:38:d9:5e:a1:9a:0f:01:6f:0a:
34:d3:01:69:de:9d:99:29:b7:af:00:a2:7c:d0:55:4c:5b:75:
58:ff:53:cf:00:ed:b2:c5:f2:46:ee:96:12:a7:68:86:ce:82:
c5:eb:25:80:2f:5f:5f:fa:f6:74:e2:2a:e6:e9:ac:f4:86:1c:
75:00:f1:51:ac:14:f5:a2:ed:2e:ba:5a:d7:61:2e:a2:ac:9c:
7f:18:f4:0e:97:e6:44:f9:a8:32:33:1e:b2:9e:48:4e:9d:85:
2b:6b:35:ec:96:27:4c:da:e1:b3:5e:6d:4e:36:9f:ae:65:ed:
5f:80:c6:53:a9:de:4e:0f:ba:bc:54:d6:df:25:1f:66:79:77:
32:41:25:ae:fd:9b:c2:96:80:9d:ad:fd:13:8a:ab:d7:64:49:
d4:56:0b:88:81:3a:93:b0:1a:1e:c7:d0:15:45:a8:2c:fc:99:
44:70:4b:c0:fc:cc:d6:65:e6:4c:90:3b:28:9d:fd:fc:fd:9b:
a2:62:9d:12:c0:b2:70:e5:8e:a7:ad:4e:6f:e5:d3:0c:06:d6:
a5:0b:aa:f2:b1:60:ef:35:4d:13:90:c7:4e:45:ab:c7:26:e1:
90:e9:0d:b1:37:ea:1c:1d:33:25:45:7e:bd:d5:00:82:1a:9a:
fe:bc:a2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:31:40 2025 by rpki-client