Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/c3663b-e6de-4dcf-84bd-c0acd75ed790/1/qRofhoOarcKK8jKFTSSnbdn7oe0.roa
File: qRofhoOarcKK8jKFTSSnbdn7oe0.roa (raw, json)
Hash identifier: IqCGkk0dPsxdY6Xwqiknm7cwmrmBPFn5ohxUV9OJ1jo=
Subject key identifier: A9:1A:1F:86:83:9A:AD:C2:8A:F2:32:85:4D:24:A7:6D:D9:FB:A1:ED
Certificate issuer: /CN=5cc4816fb01ffd35dbc8e8b0ac259f1eb9c306c1
Certificate serial: 0185E4AA19BA953FE7302DB1681C58C87449
Authority key identifier: 5C:C4:81:6F:B0:1F:FD:35:DB:C8:E8:B0:AC:25:9F:1E:B9:C3:06:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XMSBb7Af_TXbyOiwrCWfHrnDBsE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/c3663b-e6de-4dcf-84bd-c0acd75ed790/1/qRofhoOarcKK8jKFTSSnbdn7oe0.roa
Signing time: Tue 24 Jan 2023 16:43:51 +0000
ROA not before: Tue 24 Jan 2023 16:43:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205911
IP address blocks: 37.44.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:aa:19:ba:95:3f:e7:30:2d:b1:68:1c:58:c8:74:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cc4816fb01ffd35dbc8e8b0ac259f1eb9c306c1
Validity
Not Before: Jan 24 16:43:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a91a1f86839aadc28af232854d24a76dd9fba1ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:da:6a:43:7b:e1:8d:85:6c:97:2d:f2:f1:
3f:cf:d8:a7:64:ef:a6:e0:8c:a8:db:09:71:cf:8d:
b6:9d:07:3a:ae:f3:c4:87:5d:53:59:8a:d9:01:39:
42:09:73:32:fd:c5:71:d4:a3:a6:86:b2:0e:4b:da:
75:4b:da:5d:f6:6d:ad:ba:98:61:d4:46:86:1b:50:
5a:d2:3c:47:9a:77:0d:cf:b4:12:14:d7:64:e6:ea:
13:0c:5d:b0:3c:e4:8d:d0:94:2e:10:22:fb:c2:1a:
53:ec:eb:52:3a:03:20:1a:87:b5:a2:66:ab:08:92:
8b:34:2d:df:eb:72:bc:e4:9e:81:65:69:9b:9c:1d:
40:15:89:76:0a:10:38:c9:68:4f:44:8a:15:b0:a9:
e6:8d:de:9b:26:0a:0c:90:bd:42:cc:0f:e8:f3:49:
7d:61:ae:12:93:85:2f:f1:4c:96:61:3b:75:86:1d:
37:c6:93:2c:31:29:44:b6:0a:d8:44:5f:36:94:a5:
ed:0f:ea:0a:50:ed:2b:99:2b:c5:26:05:8b:a6:8f:
87:20:ce:3a:74:1b:6d:dc:2b:34:b7:20:26:86:f7:
f4:bd:9a:8d:8b:7b:69:90:4a:95:9b:ff:0a:c8:a2:
8d:00:f7:12:84:5e:0c:56:36:48:12:9e:86:ec:ea:
d0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1A:1F:86:83:9A:AD:C2:8A:F2:32:85:4D:24:A7:6D:D9:FB:A1:ED
X509v3 Authority Key Identifier:
keyid:5C:C4:81:6F:B0:1F:FD:35:DB:C8:E8:B0:AC:25:9F:1E:B9:C3:06:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XMSBb7Af_TXbyOiwrCWfHrnDBsE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c3663b-e6de-4dcf-84bd-c0acd75ed790/1/qRofhoOarcKK8jKFTSSnbdn7oe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/c3663b-e6de-4dcf-84bd-c0acd75ed790/1/XMSBb7Af_TXbyOiwrCWfHrnDBsE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.214.0/24
Signature Algorithm: sha256WithRSAEncryption
12:54:72:f5:d0:83:41:48:66:bf:ab:9d:4f:a8:2f:e3:46:64:
50:09:30:af:9c:06:b7:7d:ff:ca:03:a8:b5:ce:9b:2c:fd:44:
0d:8a:71:b7:fe:b5:cd:73:a1:df:de:5b:5d:37:d0:4d:c0:12:
46:ef:69:98:0e:29:11:d9:27:64:ac:9c:c4:59:d1:c6:53:4c:
5c:96:8e:07:9d:c0:b3:ff:c7:5e:37:a8:62:39:5a:db:4d:34:
c2:37:10:59:a9:b2:1f:e7:90:34:ea:f2:47:0d:5a:be:65:09:
aa:7c:4e:17:a1:06:71:7d:49:ba:49:8d:70:58:b4:4f:0f:ee:
e8:66:b7:af:ec:86:9b:ef:28:46:7b:a6:23:9f:de:c2:a5:55:
00:10:32:d2:b6:ab:d2:b8:3c:e3:08:ab:02:09:ca:75:87:7f:
99:70:eb:30:c2:18:2a:b3:d2:e9:51:74:0c:28:96:82:cd:66:
a9:e6:99:db:33:c9:ff:4b:2c:5e:7a:a0:9f:fa:4b:11:b1:79:
18:3a:cd:f9:61:d5:d1:94:b4:86:49:9f:6d:59:d8:b5:4a:f8:
5d:f7:7b:f9:57:59:6f:b2:40:26:7b:02:15:7b:6f:e1:e7:3a:
63:04:bf:0e:0d:5e:1c:e5:00:88:2d:e2:f0:95:c3:66:19:4f:
cd:18:44:3b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYXkqhm6lT/nMC2xaBxYyHRJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjYzQ4MTZmYjAxZmZkMzVkYmM4ZThiMGFjMjU5ZjFlYjlj
MzA2YzEwHhcNMjMwMTI0MTY0MzUxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTFhMWY4NjgzOWFhZGMyOGFmMjMyODU0ZDI0YTc2ZGQ5ZmJhMWVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTPaakN74Y2FbJct8vE/z9inZO+m
4Iyo2wlxz422nQc6rvPEh11TWYrZATlCCXMy/cVx1KOmhrIOS9p1S9pd9m2tuphh
1EaGG1Ba0jxHmncNz7QSFNdk5uoTDF2wPOSN0JQuECL7whpT7OtSOgMgGoe1omar
CJKLNC3f63K85J6BZWmbnB1AFYl2ChA4yWhPRIoVsKnmjd6bJgoMkL1CzA/o80l9
Ya4Sk4Uv8UyWYTt1hh03xpMsMSlEtgrYRF82lKXtD+oKUO0rmSvFJgWLpo+HIM46
dBtt3Cs0tyAmhvf0vZqNi3tpkEqVm/8KyKKNAPcShF4MVjZIEp6G7OrQBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKkaH4aDmq3CivIyhU0kp23Z+6HtMB8GA1UdIwQY
MBaAFFzEgW+wH/0128josKwlnx65wwbBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE1TQmI3QWZfVFhieU9pd3JDV2ZIcm5EQnNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9jMzY2M2ItZTZkZS00ZGNmLTg0YmQt
YzBhY2Q3NWVkNzkwLzEvcVJvZmhvT2FyY0tLOGpLRlRTU25iZG43b2UwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9jMzY2M2ItZTZkZS00ZGNmLTg0YmQtYzBhY2Q3NWVkNzkw
LzEvWE1TQmI3QWZfVFhieU9pd3JDV2ZIcm5EQnNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAJSzWMA0G
CSqGSIb3DQEBCwUAA4IBAQASVHL10INBSGa/q51PqC/jRmRQCTCvnAa3ff/KA6i1
zpss/UQNinG3/rXNc6Hf3ltdN9BNwBJG72mYDikR2SdkrJzEWdHGU0xclo4HncCz
/8deN6hiOVrbTTTCNxBZqbIf55A06vJHDVq+ZQmqfE4XoQZxfUm6SY1wWLRPD+7o
Zrev7Iab7yhGe6Yjn97CpVUAEDLStqvSuDzjCKsCCcp1h3+ZcOswwhgqs9LpUXQM
KJaCzWap5pnbM8n/SyxeeqCf+ksRsXkYOs35YdXRlLSGSZ9tWdi1Svhd93v5V1lv
skAmewIVe2/h5zpjBL8ODV4c5QCILeLwlcNmGU/NGEQ7
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:24 2025 by rpki-client