Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Q6_kTmc8fX58I7EBj3sPsSojmYU.roa
File: Q6_kTmc8fX58I7EBj3sPsSojmYU.roa (raw, json)
Hash identifier: sbWoHZJ8TPnfLH8vFWPl9mieLm0sgZlIoabKMFRTcsU=
Subject key identifier: 43:AF:E4:4E:67:3C:7D:7E:7C:23:B1:01:8F:7B:0F:B1:2A:23:99:85
Certificate issuer: /CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Certificate serial: 019427464438BCAD2D01DC5A17CA74F7A19B
Authority key identifier: 46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Q6_kTmc8fX58I7EBj3sPsSojmYU.roa
Signing time: Thu 02 Jan 2025 13:48:23 +0000
ROA not before: Thu 02 Jan 2025 13:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202423
IP address blocks: 185.142.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:44:38:bc:ad:2d:01:dc:5a:17:ca:74:f7:a1:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=465eba5c1a80f86a4589278edd9304b3f5169f83
Validity
Not Before: Jan 2 13:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43afe44e673c7d7e7c23b1018f7b0fb12a239985
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:23:18:19:f1:7a:a0:02:bd:dd:bd:f9:71:f6:
bd:3a:6a:bb:b5:9d:db:7e:d7:70:3c:cc:f4:07:a6:
97:32:b6:4e:f6:bb:2d:10:17:ed:d3:fa:57:57:24:
ec:f3:8d:00:65:40:93:10:e4:ed:45:21:ee:6e:27:
51:f3:61:47:5e:c2:28:f1:f0:1d:6f:e5:78:5d:b5:
c0:ef:d9:14:6c:33:9d:63:ba:d6:20:b1:e0:40:3f:
b4:37:ce:04:3c:9a:8a:26:32:48:a6:27:d4:0c:9f:
09:58:3d:4f:20:a0:6d:06:8e:c4:07:2b:3d:10:9a:
53:69:87:17:fb:1f:d8:2a:13:62:55:97:45:63:66:
76:bd:98:69:70:ea:0a:9a:2c:9a:28:06:35:02:b5:
1b:a5:7a:58:a0:5b:87:5f:ac:2b:6e:31:a2:37:33:
c4:d3:6e:ac:3f:28:23:22:5e:19:e7:ae:27:3b:77:
a5:f3:8e:92:67:4b:83:dd:02:c0:b3:a6:c8:84:cf:
b9:7f:22:74:c9:30:5a:99:c2:3d:1b:0a:f8:b2:12:
52:12:cc:38:79:e1:df:29:59:64:3d:15:23:51:84:
6e:6d:c4:9c:70:c3:36:48:43:54:2d:76:d3:ba:65:
63:44:94:97:29:e9:d6:65:36:a1:f0:72:a1:55:96:
85:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AF:E4:4E:67:3C:7D:7E:7C:23:B1:01:8F:7B:0F:B1:2A:23:99:85
X509v3 Authority Key Identifier:
keyid:46:5E:BA:5C:1A:80:F8:6A:45:89:27:8E:DD:93:04:B3:F5:16:9F:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Q6_kTmc8fX58I7EBj3sPsSojmYU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/c12a7b-5caf-4e7c-970d-5c476e3325f5/1/Rl66XBqA-GpFiSeO3ZMEs_UWn4M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.98.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:48:db:3d:ed:dd:49:49:6f:4a:8f:fd:15:13:ea:0b:9f:c6:
d2:c3:52:e6:4f:91:c9:2f:f3:7d:94:bc:46:9c:59:52:49:63:
62:3b:36:af:26:03:50:a2:f5:3e:45:89:b4:75:91:8f:68:04:
e9:39:ad:8e:97:0a:35:6a:06:05:0d:fc:49:55:33:b9:aa:26:
60:cb:fc:b8:9a:89:e2:d1:51:49:b1:da:e6:71:88:e6:bd:53:
2f:9e:18:81:27:db:07:3f:d7:34:0e:c4:64:10:b6:d2:7c:15:
f3:8f:66:2a:49:0a:68:a9:09:72:c1:37:fe:15:74:1b:70:d7:
50:ea:fe:9d:4d:c2:29:7b:7d:cc:48:ef:a8:5d:08:50:db:6e:
db:15:6d:38:1d:3d:ca:a4:e9:97:6c:f4:16:32:f5:a1:45:64:
04:e8:b8:37:27:10:c7:2d:04:13:93:36:5e:30:64:28:69:87:
2d:a2:13:7f:9e:c0:84:ab:28:c9:76:18:15:38:6c:c1:89:39:
d6:c1:69:9d:7f:b7:c9:0e:11:3d:2e:ae:d3:77:64:3c:bd:4b:
1e:8a:5c:50:2a:6e:2e:d2:82:fb:39:b1:da:e1:32:22:fa:67:
b8:78:ea:18:09:ac:3d:56:c6:04:86:ba:50:b3:6e:3a:f3:3d:
3f:2c:14:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnRkQ4vK0tAdxaF8p096GbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NWViYTVjMWE4MGY4NmE0NTg5Mjc4ZWRkOTMwNGIzZjUx
NjlmODMwHhcNMjUwMTAyMTM0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2FmZTQ0ZTY3M2M3ZDdlN2MyM2IxMDE4ZjdiMGZiMTJhMjM5OTg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSMYGfF6oAK93b35cfa9Omq7tZ3b
ftdwPMz0B6aXMrZO9rstEBft0/pXVyTs840AZUCTEOTtRSHubidR82FHXsIo8fAd
b+V4XbXA79kUbDOdY7rWILHgQD+0N84EPJqKJjJIpifUDJ8JWD1PIKBtBo7EBys9
EJpTaYcX+x/YKhNiVZdFY2Z2vZhpcOoKmiyaKAY1ArUbpXpYoFuHX6wrbjGiNzPE
026sPygjIl4Z564nO3el846SZ0uD3QLAs6bIhM+5fyJ0yTBamcI9Gwr4shJSEsw4
eeHfKVlkPRUjUYRubcSccMM2SENULXbTumVjRJSXKenWZTah8HKhVZaF2wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEOv5E5nPH1+fCOxAY97D7EqI5mFMB8GA1UdIwQY
MBaAFEZeulwagPhqRYknjt2TBLP1Fp+DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQt
NWM0NzZlMzMyNWY1LzEvUTZfa1RtYzhmWDU4STdFQmozc1BzU29qbVlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9jMTJhN2ItNWNhZi00ZTdjLTk3MGQtNWM0NzZlMzMyNWY1
LzEvUmw2NlhCcUEtR3BGaVNlTzNaTUVzX1VXbjRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuY5iMA0G
CSqGSIb3DQEBCwUAA4IBAQC4SNs97d1JSW9Kj/0VE+oLn8bSw1LmT5HJL/N9lLxG
nFlSSWNiOzavJgNQovU+RYm0dZGPaATpOa2Olwo1agYFDfxJVTO5qiZgy/y4moni
0VFJsdrmcYjmvVMvnhiBJ9sHP9c0DsRkELbSfBXzj2YqSQpoqQlywTf+FXQbcNdQ
6v6dTcIpe33MSO+oXQhQ227bFW04HT3KpOmXbPQWMvWhRWQE6Lg3JxDHLQQTkzZe
MGQoaYctohN/nsCEqyjJdhgVOGzBiTnWwWmdf7fJDhE9Lq7Td2Q8vUseilxQKm4u
0oL7ObHa4TIi+me4eOoYCaw9VsYEhrpQs2468z0/LBQe
-----END CERTIFICATE-----
Generated at Wed Apr 9 12:58:37 2025 by rpki-client