Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/Q_hNNNrvfdt4T7zaFgVAOI2Ug4U.roa
File: Q_hNNNrvfdt4T7zaFgVAOI2Ug4U.roa (raw, json)
Hash identifier: 9mnmFfW5Q+MSEVzDqE5Zshz0gJWGwWSH8EwhTTvC93E=
Subject key identifier: 43:F8:4D:34:DA:EF:7D:DB:78:4F:BC:DA:16:05:40:38:8D:94:83:85
Certificate issuer: /CN=6085397f26a044caef6a6b669287331aa4d68645
Certificate serial: 0332C93C
Authority key identifier: 60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/Q_hNNNrvfdt4T7zaFgVAOI2Ug4U.roa
Signing time: Sat 01 Jan 2022 05:03:12 +0000
ROA not before: Sat 01 Jan 2022 05:03:12 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 30823
IP address blocks: 185.111.188.0/24 maxlen: 24
185.244.94.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53659964 (0x332c93c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6085397f26a044caef6a6b669287331aa4d68645
Validity
Not Before: Jan 1 05:03:12 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43f84d34daef7ddb784fbcda160540388d948385
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b9:95:3b:36:70:aa:24:01:c8:75:d6:3f:06:
c4:31:7d:96:b8:93:4f:f8:0e:77:b0:b9:5f:42:e2:
1d:e4:77:90:bb:5c:e8:2a:3f:7c:16:6e:bf:c0:da:
62:99:18:9c:88:ef:cc:5c:37:4c:f3:eb:03:5b:bd:
4e:86:09:4f:ed:5c:30:a6:0d:03:90:95:fb:6f:8d:
61:c1:77:00:f2:e4:17:51:fa:31:1c:cf:d1:ff:7d:
f0:26:a1:6e:2e:c2:69:a5:7d:ad:d2:20:62:f2:8e:
8b:e5:05:10:a4:43:a6:41:bf:3a:63:15:f9:4c:02:
12:69:d3:5b:3a:0d:e2:da:29:10:9b:b5:ef:88:69:
79:82:36:92:8d:6b:08:0e:6e:41:da:6d:bb:c9:07:
c9:b4:a1:25:d5:e5:e6:41:a0:08:c1:c6:e8:28:72:
6b:06:57:38:71:6b:48:83:03:da:09:2e:bc:fb:d4:
ac:53:98:42:bd:f7:49:6a:76:ee:a5:66:25:76:b0:
03:16:58:55:42:9e:09:a0:ac:aa:08:4b:91:9f:5a:
df:25:7c:0a:e5:cb:cc:79:bd:2c:0e:fb:79:bc:d1:
6e:c5:2a:b9:ef:a7:88:50:22:2b:c5:4a:ee:7a:2a:
75:cd:c6:ee:6a:76:23:27:91:0a:83:86:f6:83:74:
ae:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F8:4D:34:DA:EF:7D:DB:78:4F:BC:DA:16:05:40:38:8D:94:83:85
X509v3 Authority Key Identifier:
keyid:60:85:39:7F:26:A0:44:CA:EF:6A:6B:66:92:87:33:1A:A4:D6:86:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YIU5fyagRMrvamtmkoczGqTWhkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/Q_hNNNrvfdt4T7zaFgVAOI2Ug4U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/1125a2-4432-483f-a00b-616d97a77bd6/1/YIU5fyagRMrvamtmkoczGqTWhkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.111.188.0/24
185.244.94.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:97:11:2a:97:86:bf:7d:d0:98:5b:f4:43:93:e0:01:24:15:
fd:56:ca:1e:1b:80:db:f3:ad:e2:7c:20:e3:05:f1:80:38:1f:
b8:5c:9f:45:e6:d6:36:8c:2d:64:55:fc:46:94:30:2c:2b:b9:
70:5b:f8:61:20:a2:cb:d5:7c:56:01:0d:6d:ad:ff:86:64:07:
38:4d:ac:f9:2b:52:23:0e:61:74:e1:50:a0:f7:7f:2f:b9:74:
af:38:d5:0c:33:8b:62:c6:1f:83:87:fd:86:e9:97:37:77:20:
2e:ef:f0:41:f5:d8:31:20:1a:03:26:97:9f:19:5e:58:d6:cc:
ac:5c:4c:28:91:72:d9:fc:a5:71:8f:52:ec:7e:93:49:cc:31:
e8:13:b5:0d:1a:62:6e:a2:12:2b:62:68:3b:52:e9:3c:23:60:
f4:10:60:ad:65:88:38:8b:59:c8:ff:28:53:58:d2:e0:e3:18:
4c:12:d2:0a:88:d3:f7:75:97:89:07:10:6f:2e:e9:1e:1c:1c:
73:00:40:87:e3:00:99:d2:7c:d9:f8:4d:ef:e5:8b:e4:62:44:
8b:81:72:d7:a0:6a:96:4a:32:4f:d8:ac:4d:40:40:26:8a:69:
11:5a:3d:17:5d:02:25:2a:f3:03:0c:c3:e0:8e:75:9f:f9:d1:
30:25:f5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:17 2025 by rpki-client