Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/KqEu5jotrlVlkvOlW0cERo3_YvU.roa
File: KqEu5jotrlVlkvOlW0cERo3_YvU.roa (raw, json)
Hash identifier: Ef6oWYOyhbekzNl2fidznurlFufl1VnCP1Vvg7sBYuQ=
Subject key identifier: 2A:A1:2E:E6:3A:2D:AE:55:65:92:F3:A5:5B:47:04:46:8D:FF:62:F5
Certificate issuer: /CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Certificate serial: 01942521C6A905B48F17EE19AD44F2CAE509
Authority key identifier: 87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/KqEu5jotrlVlkvOlW0cERo3_YvU.roa
Signing time: Thu 02 Jan 2025 03:49:18 +0000
ROA not before: Thu 02 Jan 2025 03:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199087
IP address blocks: 89.190.0.0/19 maxlen: 19
185.151.76.0/22 maxlen: 22
2a03:7c00::/29 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:c6:a9:05:b4:8f:17:ee:19:ad:44:f2:ca:e5:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87f41ae0779e37defc69b2a5b0f7ab8fd40cd3e7
Validity
Not Before: Jan 2 03:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2aa12ee63a2dae556592f3a55b4704468dff62f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:b2:89:a7:a5:d9:04:37:0f:3b:d5:c0:5f:
23:8d:63:63:4b:03:45:17:e7:7b:02:bd:eb:0c:ac:
3b:43:84:34:db:76:96:c7:f9:a9:ac:6b:fb:ee:b2:
37:8a:f8:50:b1:de:bb:cf:72:03:ab:43:25:d0:26:
75:02:a0:53:65:ed:f1:af:a0:40:2a:34:69:51:0d:
75:1e:4d:99:48:ec:51:52:4f:27:b0:79:fe:ec:b2:
37:3e:87:2f:78:32:2d:70:10:b3:fb:a6:24:9b:30:
b5:bc:40:64:b5:ce:50:5c:a6:7e:84:83:80:96:8a:
44:70:22:ca:7b:02:66:e7:6d:b8:c9:64:ce:61:f9:
18:63:28:33:40:67:9f:03:03:12:ac:4d:08:07:2c:
e8:f9:da:05:fe:ce:bb:29:eb:cf:4d:78:ec:f0:cb:
0f:b3:8f:f2:51:44:dd:60:8e:65:4d:ec:1a:b5:9d:
2f:9a:4f:27:5b:b4:3e:f8:e8:99:1e:c7:34:c8:a2:
dd:6c:57:7b:97:b0:97:53:29:55:01:fe:55:a8:0c:
8e:42:a1:1d:4f:8b:ba:56:9c:72:4b:2b:db:ef:8f:
aa:19:0b:ac:86:cd:9a:a1:54:e4:06:d9:d9:5e:9e:
97:60:41:87:9d:5b:e9:80:27:71:af:8e:23:80:7e:
ad:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:A1:2E:E6:3A:2D:AE:55:65:92:F3:A5:5B:47:04:46:8D:FF:62:F5
X509v3 Authority Key Identifier:
keyid:87:F4:1A:E0:77:9E:37:DE:FC:69:B2:A5:B0:F7:AB:8F:D4:0C:D3:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h_Qa4HeeN978abKlsPerj9QM0-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/KqEu5jotrlVlkvOlW0cERo3_YvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/185cb5-4752-43b8-8e46-c43ab2a12d55/1/h_Qa4HeeN978abKlsPerj9QM0-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.190.0.0/19
185.151.76.0/22
IPv6:
2a03:7c00::/29
Signature Algorithm: sha256WithRSAEncryption
79:3c:b4:d2:7e:b1:a6:7f:80:ac:3b:19:73:bc:41:57:36:40:
fc:be:12:04:d4:97:60:2f:fe:8c:8b:b8:9e:29:13:11:c3:8e:
d2:53:4a:23:9f:1c:8c:7e:a4:55:99:15:8c:55:4d:8f:92:8d:
a9:61:6a:18:6d:3c:43:1e:56:98:db:3d:6c:10:49:97:84:66:
fa:33:0e:26:b2:de:b8:e8:63:79:16:3c:c9:e3:37:a8:b9:ed:
b6:cf:75:87:bc:20:8c:0c:5c:c8:1a:fe:b2:05:d7:25:6f:e2:
21:e5:ea:cb:08:6a:ae:13:b8:70:f8:f3:c7:fa:eb:c9:2d:93:
e5:11:d2:ab:ac:98:26:77:08:01:29:44:c8:e5:a8:50:f5:a1:
f6:7a:74:73:c3:2b:6c:d9:b8:6b:a7:0e:ca:9d:5c:7c:79:88:
68:c0:d0:7d:91:f4:72:73:08:5e:6e:8e:8e:78:89:99:1a:2a:
b6:b0:de:72:01:6b:67:e2:2f:ca:79:31:b9:c4:6d:2d:46:2a:
43:12:7f:28:c4:b0:5d:1b:5a:5a:e3:58:29:9d:03:90:65:ed:
c2:cc:3d:11:c6:4c:e0:0d:14:0a:81:13:ef:1d:56:47:e2:43:
13:80:92:21:95:95:e3:3c:9e:f4:c7:3e:69:3b:9b:99:75:7a:
a2:c0:32:9c
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQlIcapBbSPF+4ZrUTyyuUJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3ZjQxYWUwNzc5ZTM3ZGVmYzY5YjJhNWIwZjdhYjhmZDQw
Y2QzZTcwHhcNMjUwMTAyMDM0OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYWExMmVlNjNhMmRhZTU1NjU5MmYzYTU1YjQ3MDQ0NjhkZmY2MmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUiyiael2QQ3DzvVwF8jjWNjSwNF
F+d7Ar3rDKw7Q4Q023aWx/mprGv77rI3ivhQsd67z3IDq0Ml0CZ1AqBTZe3xr6BA
KjRpUQ11Hk2ZSOxRUk8nsHn+7LI3PocveDItcBCz+6YkmzC1vEBktc5QXKZ+hIOA
lopEcCLKewJm5224yWTOYfkYYygzQGefAwMSrE0IByzo+doF/s67KevPTXjs8MsP
s4/yUUTdYI5lTewatZ0vmk8nW7Q++OiZHsc0yKLdbFd7l7CXUylVAf5VqAyOQqEd
T4u6VpxySyvb74+qGQushs2aoVTkBtnZXp6XYEGHnVvpgCdxr44jgH6tvwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFCqhLuY6La5VZZLzpVtHBEaN/2L1MB8GA1UdIwQY
MBaAFIf0GuB3njfe/GmypbD3q4/UDNPnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni8xODVjYjUtNDc1Mi00M2I4LThlNDYt
YzQzYWIyYTEyZDU1LzEvS3FFdTVqb3RybFZsa3ZPbFcwY0VSbzNfWXZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni8xODVjYjUtNDc1Mi00M2I4LThlNDYtYzQzYWIyYTEyZDU1
LzEvaF9RYTRIZWVOOTc4YWJLbHNQZXJqOVFNMC1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFWb4AAwQC
uZdMMA0EAgACMAcDBQMqA3wAMA0GCSqGSIb3DQEBCwUAA4IBAQB5PLTSfrGmf4Cs
OxlzvEFXNkD8vhIE1JdgL/6Mi7ieKRMRw47SU0ojnxyMfqRVmRWMVU2Pko2pYWoY
bTxDHlaY2z1sEEmXhGb6Mw4mst646GN5FjzJ4zeoue22z3WHvCCMDFzIGv6yBdcl
b+Ih5erLCGquE7hw+PPH+uvJLZPlEdKrrJgmdwgBKUTI5ahQ9aH2enRzwyts2bhr
pw7KnVx8eYhowNB9kfRycwhebo6OeImZGiq2sN5yAWtn4i/KeTG5xG0tRipDEn8o
xLBdG1pa41gpnQOQZe3CzD0RxkzgDRQKgRPvHVZH4kMTgJIhlZXjPJ70xz5pO5uZ
dXqiwDKc
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:57 2025 by rpki-client