Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/KQDDkHaA80uZQn_bdkK5WtuD5ZQ.roa
File: KQDDkHaA80uZQn_bdkK5WtuD5ZQ.roa (raw, json)
Hash identifier: ogrDXmEHfH4q5fsZNMO7u3kh012u4hUryS0Qq72aka0=
Subject key identifier: 29:00:C3:90:76:80:F3:4B:99:42:7F:DB:76:42:B9:5A:DB:83:E5:94
Certificate issuer: /CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Certificate serial: 0194221F6225F1DB17EA123F7D3BF7FC6A80
Authority key identifier: 6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/KQDDkHaA80uZQn_bdkK5WtuD5ZQ.roa
Signing time: Wed 01 Jan 2025 13:47:49 +0000
ROA not before: Wed 01 Jan 2025 13:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51132
IP address blocks: 62.108.192.0/20 maxlen: 24
62.108.208.0/21 maxlen: 24
83.68.224.0/19 maxlen: 24
91.145.0.0/19 maxlen: 24
185.95.160.0/22 maxlen: 24
2a02:eb8::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:62:25:f1:db:17:ea:12:3f:7d:3b:f7:fc:6a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fedf0b7615290aefacc5f6aa6b41d9d1843f1b6
Validity
Not Before: Jan 1 13:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2900c3907680f34b99427fdb7642b95adb83e594
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:70:c0:5d:6c:03:b5:4a:ed:53:9f:b1:3f:0a:
17:77:2f:45:d0:3b:f3:9c:4c:c1:fa:c4:f3:ca:43:
4b:3e:4d:d1:45:9d:fe:98:53:c4:28:64:40:5b:e3:
88:3f:fa:71:ee:1d:1f:2f:ec:68:76:6b:06:f3:8d:
ab:c5:4a:40:d6:fc:ec:32:6a:2c:17:27:11:84:db:
9e:06:a6:b7:31:82:7e:93:8a:8e:e3:ba:9b:54:1a:
af:c1:dc:d4:50:e9:87:7f:2c:42:06:c1:75:86:b4:
4e:b5:c0:4a:74:03:e9:68:b9:f7:43:6b:22:d0:fc:
df:75:dc:03:0f:db:4e:0b:0e:91:74:9c:93:73:97:
97:a1:ef:f0:4f:be:ab:0d:cd:91:83:f0:d2:c3:88:
2f:36:10:bf:41:72:b8:00:a5:e8:da:b3:b9:07:b6:
6c:ea:a3:a3:f7:5a:22:bf:10:98:29:51:0a:89:d8:
16:4f:78:13:1f:d3:9f:5d:77:62:7e:23:fd:b8:0b:
7d:b1:f0:6e:d4:bb:d7:b4:c4:88:66:b0:5e:10:23:
cc:fd:7d:16:10:71:34:35:04:70:fd:a6:7d:66:cd:
1f:ef:8f:dc:c5:bb:a4:f0:03:06:b6:cc:12:05:e4:
1b:97:23:d1:f3:68:56:20:20:d7:ee:6f:a6:9b:cf:
0e:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:00:C3:90:76:80:F3:4B:99:42:7F:DB:76:42:B9:5A:DB:83:E5:94
X509v3 Authority Key Identifier:
keyid:6F:ED:F0:B7:61:52:90:AE:FA:CC:5F:6A:A6:B4:1D:9D:18:43:F1:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-3wt2FSkK76zF9qprQdnRhD8bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/KQDDkHaA80uZQn_bdkK5WtuD5ZQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/f4f897-82a7-4a27-b1f1-784db9b1da2b/1/b-3wt2FSkK76zF9qprQdnRhD8bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.192.0-62.108.215.255
83.68.224.0/19
91.145.0.0/19
185.95.160.0/22
IPv6:
2a02:eb8::/29
Signature Algorithm: sha256WithRSAEncryption
4c:52:19:4c:af:5b:ee:1d:39:19:79:20:7f:55:d1:40:13:5f:
73:20:ed:44:58:06:5a:db:73:b7:35:70:09:26:01:31:6c:2c:
9e:be:44:8b:26:46:1d:33:d3:f1:fc:c6:dd:4d:23:68:92:c4:
b3:e5:e1:16:a0:57:2e:de:8e:df:3a:f9:0d:de:ef:29:b6:66:
32:dd:4d:ce:85:d7:c6:f0:b8:d1:ca:ba:42:3f:0d:0f:83:b3:
c2:2d:21:c8:81:20:7a:5d:25:74:2f:5c:b0:6b:e3:86:d5:a1:
d1:93:4b:57:cc:7b:58:12:4e:e1:ff:a6:e5:a7:d7:cc:fd:40:
ab:c5:31:ec:33:22:60:94:50:de:77:67:81:4d:d3:4b:af:a4:
68:d6:ca:9b:96:99:f8:f4:cb:e4:46:58:fd:74:50:e8:6f:6d:
a0:de:86:34:d2:1a:ba:40:24:e0:09:4e:a9:22:a5:8d:2c:e3:
37:6d:b5:f4:0d:4b:21:c1:6e:ee:4a:a4:19:dd:e3:77:94:be:
20:a1:f4:ae:bd:6c:30:a2:c7:76:c9:58:93:03:ef:96:33:d6:
5e:5d:91:cf:e9:8a:c5:cc:72:03:a7:f4:75:12:2e:28:bc:2c:
7a:5f:ef:0f:26:7a:91:14:8e:e7:16:3c:fd:cc:af:6f:b5:93:
ad:18:be:0d
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgISAZQiH2Il8dsX6hI/fTv3/GqAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZWRmMGI3NjE1MjkwYWVmYWNjNWY2YWE2YjQxZDlkMTg0
M2YxYjYwHhcNMjUwMTAxMTM0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyOTAwYzM5MDc2ODBmMzRiOTk0MjdmZGI3NjQyYjk1YWRiODNlNTk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13DAXWwDtUrtU5+xPwoXdy9F0Dvz
nEzB+sTzykNLPk3RRZ3+mFPEKGRAW+OIP/px7h0fL+xodmsG842rxUpA1vzsMmos
FycRhNueBqa3MYJ+k4qO47qbVBqvwdzUUOmHfyxCBsF1hrROtcBKdAPpaLn3Q2si
0PzfddwDD9tOCw6RdJyTc5eXoe/wT76rDc2Rg/DSw4gvNhC/QXK4AKXo2rO5B7Zs
6qOj91oivxCYKVEKidgWT3gTH9OfXXdifiP9uAt9sfBu1LvXtMSIZrBeECPM/X0W
EHE0NQRw/aZ9Zs0f74/cxbuk8AMGtswSBeQblyPR82hWICDX7m+mm88OdwIDAQAB
o4ICMjCCAi4wHQYDVR0OBBYEFCkAw5B2gPNLmUJ/23ZCuVrbg+WUMB8GA1UdIwQY
MBaAFG/t8LdhUpCu+sxfaqa0HZ0YQ/G2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9mNGY4OTctODJhNy00YTI3LWIxZjEt
Nzg0ZGI5YjFkYTJiLzEvS1FERGtIYUE4MHVaUW5fYmRrSzVXdHVENVpRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9mNGY4OTctODJhNy00YTI3LWIxZjEtNzg0ZGI5YjFkYTJi
LzEvYi0zd3QyRlNrSzc2ekY5cXByUWRuUmhEOGJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEgGCCsGAQUFBwEHAQH/BDkwNzAmBAIAATAgMAwDBAY+bMAD
BAM+bNADBAVTROADBAVbkQADBAK5X6AwDQQCAAIwBwMFAyoCDrgwDQYJKoZIhvcN
AQELBQADggEBAExSGUyvW+4dORl5IH9V0UATX3Mg7URYBlrbc7c1cAkmATFsLJ6+
RIsmRh0z0/H8xt1NI2iSxLPl4RagVy7ejt86+Q3e7ym2ZjLdTc6F18bwuNHKukI/
DQ+Ds8ItIciBIHpdJXQvXLBr44bVodGTS1fMe1gSTuH/puWn18z9QKvFMewzImCU
UN53Z4FN00uvpGjWypuWmfj0y+RGWP10UOhvbaDehjTSGrpAJOAJTqkipY0s4zdt
tfQNSyHBbu5KpBnd43eUviCh9K69bDCix3bJWJMD75Yz1l5dkc/pisXMcgOn9HUS
Lii8LHpf7w8mepEUjucWPP3Mr2+1k60Yvg0=
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:49:53 2025 by rpki-client