Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/qjOZ0ypY-v05Ar9oVOzV-LgMvAA.roa
File: qjOZ0ypY-v05Ar9oVOzV-LgMvAA.roa (raw, json)
Hash identifier: /cIFZv0Z52Y5+S3hgVxJBf+tIN9m9T+pJ4ZgMnUSMa0=
Subject key identifier: AA:33:99:D3:2A:58:FA:FD:39:02:BF:68:54:EC:D5:F8:B8:0C:BC:00
Certificate issuer: /CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Certificate serial: 01942521A8810C8400B0810A9D54EBA1533D
Authority key identifier: 1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/qjOZ0ypY-v05Ar9oVOzV-LgMvAA.roa
Signing time: Thu 02 Jan 2025 03:49:10 +0000
ROA not before: Thu 02 Jan 2025 03:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9121
IP address blocks: 185.76.201.0/24 maxlen: 24
185.76.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a8:81:0c:84:00:b0:81:0a:9d:54:eb:a1:53:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a12509e4f2a730e169937d40833bb893ee7b98c
Validity
Not Before: Jan 2 03:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa3399d32a58fafd3902bf6854ecd5f8b80cbc00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:cc:c3:2e:ad:35:d5:80:91:35:fd:29:da:
b5:62:80:08:24:38:f8:c2:2f:9c:d3:72:55:2f:4e:
5d:b9:d6:61:b7:83:b0:5b:87:6d:a5:90:9d:0e:f1:
5b:56:ba:00:b2:a3:32:b0:99:b0:cf:62:f9:aa:49:
94:a0:6f:0c:10:8d:49:6a:92:b4:11:48:d0:e7:be:
10:7b:3a:16:e1:aa:f4:4c:ab:9c:ac:35:a3:c7:1f:
78:34:c7:aa:49:10:62:a9:87:b6:1a:27:ee:96:0e:
cf:68:df:86:f2:3a:5e:db:48:f5:76:a6:af:cb:5e:
f3:b2:80:04:06:8b:bc:90:b5:36:eb:5a:26:1e:65:
d0:76:70:bf:09:27:dd:95:d3:60:33:74:c7:cd:91:
15:c8:89:a1:d1:74:d7:71:ad:7b:b8:eb:45:22:d1:
af:ce:a6:ef:17:c2:46:bd:0a:db:c8:e3:89:74:62:
96:8c:09:f1:c0:3c:c2:aa:ef:82:3a:41:63:bb:99:
49:bf:35:e2:ba:aa:c2:2d:60:7e:4f:a2:a2:71:55:
3c:d3:d7:1d:5a:42:ea:b0:dc:46:c3:8a:18:74:be:
8c:f0:e4:fe:41:0f:a6:4c:cf:d9:11:1f:e8:18:6b:
60:bd:46:ec:bf:3a:10:c4:2b:e0:6e:3b:db:2f:4f:
fb:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:33:99:D3:2A:58:FA:FD:39:02:BF:68:54:EC:D5:F8:B8:0C:BC:00
X509v3 Authority Key Identifier:
keyid:1A:12:50:9E:4F:2A:73:0E:16:99:37:D4:08:33:BB:89:3E:E7:B9:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GhJQnk8qcw4WmTfUCDO7iT7nuYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/qjOZ0ypY-v05Ar9oVOzV-LgMvAA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b31731-5cd3-445e-8cb3-4196b0eacd27/1/GhJQnk8qcw4WmTfUCDO7iT7nuYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.76.201.0/24
185.76.203.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:07:a1:77:f1:5e:77:14:2f:9e:37:61:e5:d9:3c:b7:7a:af:
dd:f2:92:10:df:14:5e:46:23:c6:3a:ef:a9:f4:09:b1:36:c5:
32:55:7e:9b:fa:eb:2b:e5:bc:c5:99:51:53:91:e8:ce:13:16:
27:7c:1d:d5:13:48:6d:f4:24:dc:1f:02:e4:4b:46:f5:22:36:
0f:45:5f:e9:3f:69:a7:12:d7:11:a0:22:66:f8:5a:e3:2d:52:
b3:43:7f:f7:5f:32:08:76:8f:a6:82:83:a4:2b:f2:d4:fb:05:
a9:05:da:e4:e9:26:4f:25:43:f2:94:8e:f8:55:69:64:94:65:
19:7d:63:b4:39:6b:a6:57:7f:01:0f:66:2a:3e:23:fa:31:41:
02:b5:5c:79:07:76:99:84:0f:65:ab:61:02:61:85:ee:0c:0a:
da:b4:1d:7e:ae:81:13:c1:25:e7:88:95:34:66:c9:4d:a2:7a:
33:66:34:74:a5:b4:58:84:81:cf:06:e2:57:a9:11:62:5d:57:
aa:9e:22:0b:92:35:7e:9a:f1:a5:2e:97:74:c5:10:7e:5c:d2:
b2:87:41:a1:1f:4b:89:94:67:cc:6b:95:b9:7e:62:ff:8b:4a:
e3:c8:c5:e1:38:41:73:32:d3:63:24:ad:77:ed:2d:e3:f1:fe:
62:fb:bd:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 11:13:13 2025 by rpki-client