Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/c74190-3129-4363-b519-74dcd96fa6ee/1/qcpdt0u7XGd8MRUfYbi0jcQwUcs.roa
File: qcpdt0u7XGd8MRUfYbi0jcQwUcs.roa (raw, json)
Hash identifier: THQrxt8160TVLjgocSmYKWeRUCUiShjN1Paor1H766I=
Subject key identifier: A9:CA:5D:B7:4B:BB:5C:67:7C:31:15:1F:61:B8:B4:8D:C4:30:51:CB
Certificate issuer: /CN=583f4053e432c62dce0460dbecb17c8669c7b502
Certificate serial: 018CC726C17941BAC7ABFDB75CA3A5ADA3DB
Authority key identifier: 58:3F:40:53:E4:32:C6:2D:CE:04:60:DB:EC:B1:7C:86:69:C7:B5:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD9AU-Qyxi3OBGDb7LF8hmnHtQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/c74190-3129-4363-b519-74dcd96fa6ee/1/qcpdt0u7XGd8MRUfYbi0jcQwUcs.roa
Signing time: Mon 01 Jan 2024 22:30:55 +0000
ROA not before: Mon 01 Jan 2024 22:30:55 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47203
IP address blocks: 185.94.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:26:c1:79:41:ba:c7:ab:fd:b7:5c:a3:a5:ad:a3:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583f4053e432c62dce0460dbecb17c8669c7b502
Validity
Not Before: Jan 1 22:30:55 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9ca5db74bbb5c677c31151f61b8b48dc43051cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b1:69:c3:8d:14:00:4a:84:8e:25:c3:d4:1a:
4b:01:29:ce:9a:05:25:9f:00:f8:64:17:db:a7:f8:
6d:08:bd:64:a9:1d:90:fd:30:18:9b:b6:84:ab:e2:
2d:50:38:22:c6:50:0a:eb:04:ee:30:fe:35:81:0b:
0d:a4:b5:1b:0e:07:19:0b:34:a7:c0:f8:de:4a:96:
ed:f6:5f:63:d4:d0:78:55:01:70:3a:86:38:a7:03:
9c:13:84:03:af:dc:22:ed:f8:5c:c8:cf:54:4f:0f:
cf:1e:2e:37:0e:ba:26:56:1f:00:15:47:48:7f:95:
00:a4:d3:b9:bf:0e:cf:90:66:6d:38:4a:20:0b:6a:
1a:3e:63:4a:2f:a8:5a:33:d7:97:ed:b8:a8:8d:19:
25:92:f9:09:ad:70:9c:f7:62:d9:91:5c:58:b3:62:
fd:58:ae:4e:3d:02:a1:98:3d:d2:0d:62:8e:ef:94:
62:48:22:a1:55:ea:7f:7f:63:07:cf:67:4a:65:ef:
22:30:00:95:9d:eb:c0:3b:5d:77:47:9f:b9:b6:85:
1b:e9:00:13:f0:f1:91:c3:e9:2b:e7:de:e2:c2:0c:
6d:ae:ae:4f:fe:3d:c2:eb:e0:7f:97:b4:91:50:3f:
49:cf:00:c0:ab:d2:1a:e8:3b:fa:f3:aa:cb:1a:62:
26:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:CA:5D:B7:4B:BB:5C:67:7C:31:15:1F:61:B8:B4:8D:C4:30:51:CB
X509v3 Authority Key Identifier:
keyid:58:3F:40:53:E4:32:C6:2D:CE:04:60:DB:EC:B1:7C:86:69:C7:B5:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD9AU-Qyxi3OBGDb7LF8hmnHtQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c74190-3129-4363-b519-74dcd96fa6ee/1/qcpdt0u7XGd8MRUfYbi0jcQwUcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/c74190-3129-4363-b519-74dcd96fa6ee/1/WD9AU-Qyxi3OBGDb7LF8hmnHtQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.212.0/22
Signature Algorithm: sha256WithRSAEncryption
30:8e:df:46:fc:41:a5:55:d8:6c:df:fe:50:47:9f:d2:f8:95:
98:1d:27:d7:62:34:b7:c9:55:9f:5e:1f:48:d4:7f:4f:88:4f:
48:6d:97:3c:5d:05:8a:ed:57:d1:27:e6:de:44:9f:39:4c:b3:
ea:f4:70:5c:0c:0e:38:9e:4a:23:9c:43:93:27:89:cd:50:25:
74:ac:ca:8d:79:c6:1a:05:be:03:42:a5:f5:7a:dc:18:d5:e4:
20:0b:96:c4:07:f7:79:55:3c:01:11:5a:ea:f0:4e:e2:1f:44:
bd:a7:81:d4:06:44:90:4b:88:4b:ac:ff:89:e7:a6:c2:96:03:
09:8e:ee:a7:a2:96:a0:68:ed:6c:98:46:e1:f8:0f:28:33:fc:
ab:2c:6d:81:c3:93:d7:27:54:93:8b:81:0a:fc:e3:c8:45:90:
f1:4d:e2:0a:1f:49:51:2e:8d:fe:21:43:a5:2e:a0:fb:6f:5f:
37:ee:67:ed:5c:0f:40:c6:2b:7f:e4:8c:a2:23:8d:4f:f5:45:
8f:a2:9b:b7:44:2a:12:83:52:f6:42:c4:f1:bf:98:b6:4c:41:
c8:38:18:53:87:37:32:bc:eb:dc:88:84:e5:c7:e1:7b:4a:52:
37:29:f3:6e:08:db:07:30:68:31:e6:ce:e6:96:d2:5d:21:c2:
84:c5:39:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzHJsF5QbrHq/23XKOlraPbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4M2Y0MDUzZTQzMmM2MmRjZTA0NjBkYmVjYjE3Yzg2Njlj
N2I1MDIwHhcNMjQwMTAxMjIzMDU1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWNhNWRiNzRiYmI1YzY3N2MzMTE1MWY2MWI4YjQ4ZGM0MzA1MWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLFpw40UAEqEjiXD1BpLASnOmgUl
nwD4ZBfbp/htCL1kqR2Q/TAYm7aEq+ItUDgixlAK6wTuMP41gQsNpLUbDgcZCzSn
wPjeSpbt9l9j1NB4VQFwOoY4pwOcE4QDr9wi7fhcyM9UTw/PHi43DromVh8AFUdI
f5UApNO5vw7PkGZtOEogC2oaPmNKL6haM9eX7biojRklkvkJrXCc92LZkVxYs2L9
WK5OPQKhmD3SDWKO75RiSCKhVep/f2MHz2dKZe8iMACVnevAO113R5+5toUb6QAT
8PGRw+kr597iwgxtrq5P/j3C6+B/l7SRUD9JzwDAq9Ia6Dv686rLGmIm3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKnKXbdLu1xnfDEVH2G4tI3EMFHLMB8GA1UdIwQY
MBaAFFg/QFPkMsYtzgRg2+yxfIZpx7UCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0Q5QVUtUXl4aTNPQkdEYjdMRjhobW5IdFFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9jNzQxOTAtMzEyOS00MzYzLWI1MTkt
NzRkY2Q5NmZhNmVlLzEvcWNwZHQwdTdYR2Q4TVJVZlliaTBqY1F3VWNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9jNzQxOTAtMzEyOS00MzYzLWI1MTktNzRkY2Q5NmZhNmVl
LzEvV0Q5QVUtUXl4aTNPQkdEYjdMRjhobW5IdFFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuV7UMA0G
CSqGSIb3DQEBCwUAA4IBAQAwjt9G/EGlVdhs3/5QR5/S+JWYHSfXYjS3yVWfXh9I
1H9PiE9IbZc8XQWK7VfRJ+beRJ85TLPq9HBcDA44nkojnEOTJ4nNUCV0rMqNecYa
Bb4DQqX1etwY1eQgC5bEB/d5VTwBEVrq8E7iH0S9p4HUBkSQS4hLrP+J56bClgMJ
ju6nopagaO1smEbh+A8oM/yrLG2Bw5PXJ1STi4EK/OPIRZDxTeIKH0lRLo3+IUOl
LqD7b1837mftXA9Axit/5IyiI41P9UWPopu3RCoSg1L2QsTxv5i2TEHIOBhThzcy
vOvciITlx+F7SlI3KfNuCNsHMGgx5s7mltJdIcKExTn5
-----END CERTIFICATE-----
Generated at Tue Apr 22 17:09:41 2025 by rpki-client