Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/QK15-i7XSCXTEVu3NNRHzRF4ezo.roa
File: QK15-i7XSCXTEVu3NNRHzRF4ezo.roa (raw, json)
Hash identifier: x0cfhMLQIA3M5N3d+Cnub4RrSFTx7/5hmRiMtqqMFQI=
Subject key identifier: 40:AD:79:FA:2E:D7:48:25:D3:11:5B:B7:34:D4:47:CD:11:78:7B:3A
Certificate issuer: /CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412
Certificate serial: 0194228D2470E0279742CD9534B67290729B
Authority key identifier: 6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/QK15-i7XSCXTEVu3NNRHzRF4ezo.roa
Signing time: Wed 01 Jan 2025 15:47:42 +0000
ROA not before: Wed 01 Jan 2025 15:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6939
IP address blocks: 85.116.204.0/22 maxlen: 22
85.116.208.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:24:70:e0:27:97:42:cd:95:34:b6:72:90:72:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed0392ac7660bd1460fa1d5031d1840d01b9412
Validity
Not Before: Jan 1 15:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40ad79fa2ed74825d3115bb734d447cd11787b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:69:65:cf:6a:d6:85:4a:d4:4e:61:0d:91:
b5:e3:08:03:1b:0a:0a:04:91:10:de:23:da:69:8b:
85:7e:84:f3:b0:2e:6d:11:ed:49:67:eb:b0:f9:fa:
35:60:10:5b:c8:a6:9a:fe:a7:c4:36:11:d1:2f:57:
2a:20:c0:58:61:f6:c0:ff:c4:43:a1:3c:17:6e:28:
d4:09:19:56:6e:d1:78:a9:4a:7f:28:34:a1:1d:98:
73:3f:00:b1:3d:63:8b:4a:f6:18:dc:a7:a4:cb:6a:
a9:da:97:78:c6:b7:2b:0f:ae:ce:6a:db:be:4e:01:
90:ac:01:61:63:50:3a:ab:05:35:95:b9:9a:de:d0:
26:f8:8d:b7:b6:3e:a6:7e:7b:76:ad:8b:9d:a3:5d:
e9:0e:23:e4:68:59:26:bf:00:f2:fb:77:3c:e3:fc:
20:33:14:82:94:7d:f4:5c:24:2d:fe:50:d5:1e:d9:
12:60:38:12:45:08:66:56:dd:76:db:61:a3:71:05:
fe:a6:91:33:f6:5b:56:92:e0:5d:88:cf:20:fd:70:
43:1c:6e:6f:89:35:bc:dc:1d:78:7c:37:79:26:4d:
2a:c0:f4:7f:57:81:f4:b1:10:ba:b5:22:23:7c:d6:
e3:ef:3f:9a:9e:92:74:fb:5d:3b:f9:03:91:f7:d2:
af:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AD:79:FA:2E:D7:48:25:D3:11:5B:B7:34:D4:47:CD:11:78:7B:3A
X509v3 Authority Key Identifier:
keyid:6E:D0:39:2A:C7:66:0B:D1:46:0F:A1:D5:03:1D:18:40:D0:1B:94:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/btA5KsdmC9FGD6HVAx0YQNAblBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/QK15-i7XSCXTEVu3NNRHzRF4ezo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/78e03c-c9c7-4c85-bfdd-e8baf9ffadf8/1/btA5KsdmC9FGD6HVAx0YQNAblBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.116.204.0-85.116.211.255
Signature Algorithm: sha256WithRSAEncryption
60:69:4d:a9:07:13:09:47:ea:ac:09:8d:a2:f4:ae:79:bc:07:
ca:c1:53:52:be:3a:f4:7e:ec:11:b8:0b:c7:37:82:a0:a7:bf:
3d:7c:90:14:c4:aa:de:9a:93:69:4a:0b:1d:e1:85:4b:33:a2:
41:ea:90:92:a6:5d:0c:a0:db:ad:0a:62:2c:df:a2:cb:f5:fe:
df:b9:35:32:1c:f0:eb:23:0a:d2:79:60:6d:47:19:ca:71:5c:
e8:bb:5b:5a:fb:ed:9c:32:4b:50:49:d3:56:0b:c0:22:75:78:
3c:c1:ac:bc:b8:93:78:6a:fd:e3:ea:49:ad:1a:ca:ba:ae:91:
6a:26:46:26:61:d6:72:c4:00:9c:25:ca:5f:2b:18:f5:3a:71:
03:7d:f3:b1:51:95:3e:bd:44:0c:52:8b:2a:f6:40:73:38:c6:
e2:82:55:89:f5:9a:5b:2b:67:11:65:c4:4f:e6:17:8a:79:9c:
24:af:a7:08:64:d5:c8:e0:14:b6:ed:39:ef:4d:e5:8e:51:a0:
cd:ef:5e:0e:96:b8:ca:73:a7:26:33:7c:82:13:41:3f:ba:80:
c7:f5:2d:35:68:51:88:62:2c:24:f1:58:ec:86:d3:1e:a1:e6:
3b:1d:cf:bd:2e:f1:d9:1e:61:b7:ff:52:98:6d:c0:cc:5a:a1:
ce:d9:a7:29
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQijSRw4CeXQs2VNLZykHKbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZlZDAzOTJhYzc2NjBiZDE0NjBmYTFkNTAzMWQxODQwZDAx
Yjk0MTIwHhcNMjUwMTAxMTU0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGFkNzlmYTJlZDc0ODI1ZDMxMTViYjczNGQ0NDdjZDExNzg3YjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJlpZc9q1oVK1E5hDZG14wgDGwoK
BJEQ3iPaaYuFfoTzsC5tEe1JZ+uw+fo1YBBbyKaa/qfENhHRL1cqIMBYYfbA/8RD
oTwXbijUCRlWbtF4qUp/KDShHZhzPwCxPWOLSvYY3Keky2qp2pd4xrcrD67Oatu+
TgGQrAFhY1A6qwU1lbma3tAm+I23tj6mfnt2rYudo13pDiPkaFkmvwDy+3c84/wg
MxSClH30XCQt/lDVHtkSYDgSRQhmVt1222GjcQX+ppEz9ltWkuBdiM8g/XBDHG5v
iTW83B14fDd5Jk0qwPR/V4H0sRC6tSIjfNbj7z+anpJ0+107+QOR99KvmwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFECtefou10gl0xFbtzTUR80ReHs6MB8GA1UdIwQY
MBaAFG7QOSrHZgvRRg+h1QMdGEDQG5QSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83OGUwM2MtYzljNy00Yzg1LWJmZGQt
ZThiYWY5ZmZhZGY4LzEvUUsxNS1pN1hTQ1hURVZ1M05OUkh6UkY0ZXpvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83OGUwM2MtYzljNy00Yzg1LWJmZGQtZThiYWY5ZmZhZGY4
LzEvYnRBNUtzZG1DOUZHRDZIVkF4MFlRTkFibEJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJVdMwD
BAJVdNAwDQYJKoZIhvcNAQELBQADggEBAGBpTakHEwlH6qwJjaL0rnm8B8rBU1K+
OvR+7BG4C8c3gqCnvz18kBTEqt6ak2lKCx3hhUszokHqkJKmXQyg260KYizfosv1
/t+5NTIc8OsjCtJ5YG1HGcpxXOi7W1r77ZwyS1BJ01YLwCJ1eDzBrLy4k3hq/ePq
Sa0ayrqukWomRiZh1nLEAJwlyl8rGPU6cQN987FRlT69RAxSiyr2QHM4xuKCVYn1
mlsrZxFlxE/mF4p5nCSvpwhk1cjgFLbtOe9N5Y5RoM3vXg6WuMpzpyYzfIITQT+6
gMf1LTVoUYhiLCTxWOyG0x6h5jsdz70u8dkeYbf/UphtwMxaoc7Zpyk=
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:56:07 2025 by rpki-client