Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/q-UjelWVJEcPadl31G47nebbXb8.roa
File: q-UjelWVJEcPadl31G47nebbXb8.roa (raw, json)
Hash identifier: 65aJhppjeAJp5scwXUtr/SDly2MObd0FzMz5wed2pGs=
Subject key identifier: AB:E5:23:7A:55:95:24:47:0F:69:D9:77:D4:6E:3B:9D:E6:DB:5D:BF
Certificate issuer: /CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0
Certificate serial: 0194266B9BDDCBCF2EC7D45E5D75551027F6
Authority key identifier: 7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/q-UjelWVJEcPadl31G47nebbXb8.roa
Signing time: Thu 02 Jan 2025 09:49:33 +0000
ROA not before: Thu 02 Jan 2025 09:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12703
IP address blocks: 185.71.184.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:9b:dd:cb:cf:2e:c7:d4:5e:5d:75:55:10:27:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c5dbb0b9e3538185f3e6d6e3c7da2f8922c8ce0
Validity
Not Before: Jan 2 09:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abe5237a559524470f69d977d46e3b9de6db5dbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a9:df:6e:b8:1a:03:6d:03:33:91:7c:ef:ae:
3e:ff:35:5b:48:cb:d2:a7:0e:89:46:aa:0d:70:2a:
9c:85:2d:73:9f:6d:d5:e3:7b:24:22:b7:f8:b5:5d:
b0:7c:4d:c0:c7:a1:6c:1f:56:f6:f7:47:c3:0c:d1:
1e:25:12:0d:77:f1:f2:86:08:91:22:db:b1:be:13:
e1:09:77:5a:64:d1:60:99:f0:70:4a:ce:74:34:92:
5d:5c:a3:bf:3c:34:06:47:a7:23:5c:53:d8:59:36:
f0:25:a6:45:53:f9:54:a9:65:f7:22:f2:2f:8c:f1:
c2:99:f4:cc:38:63:6d:6f:ca:40:d8:09:14:02:31:
6f:34:06:18:6b:67:94:21:17:4d:47:d6:71:78:84:
70:96:bb:a0:42:8c:48:4e:ce:87:cc:35:c1:38:01:
67:90:56:d7:05:c2:1a:08:fb:72:81:1c:bb:96:87:
4f:60:3c:b9:9d:e5:f2:86:d4:f6:2d:fc:1b:e8:76:
59:7a:53:8d:6d:d2:5b:2e:06:53:1a:1e:35:19:d0:
de:b4:76:1a:c0:2a:69:e7:97:dd:dc:1d:3a:02:65:
09:bc:8e:20:a7:9b:c4:2f:8e:05:0d:0e:06:2d:cc:
f7:1e:8d:31:0e:fe:01:c1:d4:3f:21:32:d9:9c:48:
4d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E5:23:7A:55:95:24:47:0F:69:D9:77:D4:6E:3B:9D:E6:DB:5D:BF
X509v3 Authority Key Identifier:
keyid:7C:5D:BB:0B:9E:35:38:18:5F:3E:6D:6E:3C:7D:A2:F8:92:2C:8C:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fF27C541OBhfPm1uPH2i-JIsjOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/q-UjelWVJEcPadl31G47nebbXb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/e8120c-7451-45ae-89b0-75f6e529186f/1/fF27C541OBhfPm1uPH2i-JIsjOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.71.184.0/22
Signature Algorithm: sha256WithRSAEncryption
11:7a:b6:d3:79:8a:6f:2b:1d:b1:96:e8:db:67:99:4e:72:45:
fa:85:49:29:7d:51:c5:03:90:99:e7:37:1e:77:59:9c:e2:8d:
c5:6c:bc:c5:ca:74:31:6e:37:c0:00:9e:d6:93:7a:57:e6:51:
cf:e6:09:96:18:d3:a5:3c:23:6d:26:38:1f:7e:0a:5a:90:be:
06:ab:b9:20:b2:dd:97:c6:ce:27:2c:34:f8:69:8b:49:34:64:
41:61:8a:a0:2d:a0:88:9c:f6:be:d1:6f:c3:68:82:63:ba:7a:
e6:49:f7:0a:1c:0a:60:d6:86:d6:b3:f8:f6:de:14:73:78:a2:
a3:6d:42:ed:f2:1b:6b:81:82:9b:06:43:6d:d2:e6:3a:2d:d8:
16:68:1b:f7:83:a3:7a:80:7f:15:ff:2c:93:e9:dc:cd:2b:06:
16:58:27:52:d8:7b:14:78:a2:b0:f5:40:7f:47:a6:c0:fe:0a:
57:b6:7f:65:f9:fa:17:5e:42:a6:f8:2d:1b:64:1f:04:68:80:
94:a0:6b:c5:f6:fa:a7:3a:51:9f:b5:2f:d3:9f:04:dd:2f:a0:
7e:6a:7b:0e:25:6f:5a:73:c8:14:9c:f4:e1:f7:3c:61:8e:1b:
28:b6:bc:0a:d1:72:fc:b5:98:5f:6d:55:28:42:fd:38:d1:11:
41:98:d2:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:01:13 2025 by rpki-client