Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/QiSb7ncxhroPDe8r3d-k-6qSJpg.roa
File: QiSb7ncxhroPDe8r3d-k-6qSJpg.roa (raw, json)
Hash identifier: 2QPUErzm3g3I76bVA3MB748BXYwluNd9burJzsAC6Ao=
Subject key identifier: 42:24:9B:EE:77:31:86:BA:0F:0D:EF:2B:DD:DF:A4:FB:AA:92:26:98
Certificate issuer: /CN=d8ae1d7cc68b78c494c530eaa4a0f7559e25a4ef
Certificate serial: 0644A677
Authority key identifier: D8:AE:1D:7C:C6:8B:78:C4:94:C5:30:EA:A4:A0:F7:55:9E:25:A4:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/QiSb7ncxhroPDe8r3d-k-6qSJpg.roa
Signing time: Sat 01 Jan 2022 14:58:16 +0000
ROA not before: Sat 01 Jan 2022 14:58:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 201308
IP address blocks: 185.75.242.0/24 maxlen: 24
185.75.243.0/24 maxlen: 24
2a05:5500::/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 105162359 (0x644a677)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ae1d7cc68b78c494c530eaa4a0f7559e25a4ef
Validity
Not Before: Jan 1 14:58:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42249bee773186ba0f0def2bdddfa4fbaa922698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3a:d2:be:0c:82:2c:51:be:cc:36:2d:eb:c0:
8d:78:ee:5a:08:70:a1:18:4d:51:d4:7f:1f:16:4c:
30:88:1f:59:69:8e:63:c7:73:93:1f:aa:26:e9:2d:
6c:6f:1a:98:2d:15:c3:ae:0c:97:bf:ab:ca:f0:a1:
74:46:dd:0a:b3:bb:a4:ac:8d:ac:10:a7:7f:45:99:
d1:4e:2a:bf:52:be:6b:f1:19:ba:14:1c:5a:ec:22:
76:74:3c:35:73:6e:88:72:a6:5f:dd:d0:86:57:98:
28:c1:a4:ce:3f:d2:d2:51:fc:39:de:f5:a7:24:08:
9c:49:26:e2:f8:27:20:48:87:81:4a:a0:56:88:3e:
9c:2e:97:d1:46:32:45:a6:a0:d6:f1:fd:bf:8f:07:
56:4b:ba:2a:a4:a6:09:61:bc:cf:e7:31:41:36:3c:
b1:80:12:db:b1:0d:46:81:f8:76:e7:f9:ce:80:37:
28:a5:44:b1:22:cc:53:0d:a9:39:14:3a:c6:dd:19:
92:f2:c0:35:bd:61:39:91:61:f9:fb:42:d5:7c:ce:
79:5d:55:f5:b9:dd:0b:3d:f1:d4:98:d1:be:2c:17:
d4:68:db:e0:53:6b:d0:7f:51:41:db:9d:88:f0:be:
5c:c1:3f:9f:b6:22:ae:31:cd:36:f1:97:a0:0a:35:
aa:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:24:9B:EE:77:31:86:BA:0F:0D:EF:2B:DD:DF:A4:FB:AA:92:26:98
X509v3 Authority Key Identifier:
keyid:D8:AE:1D:7C:C6:8B:78:C4:94:C5:30:EA:A4:A0:F7:55:9E:25:A4:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/QiSb7ncxhroPDe8r3d-k-6qSJpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/15c74c-f8b8-4f53-a131-64e431f74eea/1/2K4dfMaLeMSUxTDqpKD3VZ4lpO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.75.242.0/23
IPv6:
2a05:5500::/30
Signature Algorithm: sha256WithRSAEncryption
47:3c:be:c6:91:a7:80:d1:b8:fe:9c:9a:8f:c1:0f:25:c2:13:
ed:f1:69:c1:b3:85:3a:ca:e5:84:dc:4f:f7:f4:7e:53:ef:ba:
08:1b:23:6b:45:64:dd:9d:ba:7b:82:24:c6:ba:31:b9:5d:0c:
29:4d:33:5e:bb:6a:19:d7:e6:89:8b:39:91:24:44:c2:32:30:
af:b7:de:f7:08:5d:02:4e:e1:ce:dd:70:8d:6e:40:04:95:94:
4e:4a:f1:d5:01:10:f6:0a:d6:b3:7a:39:3c:c1:ab:78:d4:e7:
9f:20:8d:74:72:7e:a8:25:c5:71:99:1f:a5:79:86:9f:6a:75:
ba:30:c9:b2:67:27:19:4d:47:2d:18:d5:4e:57:32:3e:81:c3:
3c:2e:55:70:db:19:74:5a:2e:3d:3e:c0:46:5e:db:ed:2b:9c:
4e:3e:21:4d:6a:46:1a:d7:b7:cb:7f:aa:72:50:6b:49:7e:ce:
a6:a4:46:67:ea:a6:36:33:f5:b0:fe:3c:95:a4:f6:8c:91:da:
00:1a:47:29:09:02:3d:ca:cc:26:18:2a:49:0b:59:09:e5:5b:
2c:e7:ef:97:11:96:6d:b8:5d:93:96:0f:6f:23:f6:7b:74:03:
09:c3:85:ca:bb:df:12:76:59:b8:70:8d:c4:96:21:65:88:0b:
41:f9:2b:a6
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgIEBkSmdzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhk
OGFlMWQ3Y2M2OGI3OGM0OTRjNTMwZWFhNGEwZjc1NTllMjVhNGVmMB4XDTIyMDEw
MTE0NTgxNloXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDIyNDliZWU3NzMx
ODZiYTBmMGRlZjJiZGRkZmE0ZmJhYTkyMjY5ODCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKw60r4MgixRvsw2LevAjXjuWghwoRhNUdR/HxZMMIgfWWmO
Y8dzkx+qJuktbG8amC0Vw64Ml7+ryvChdEbdCrO7pKyNrBCnf0WZ0U4qv1K+a/EZ
uhQcWuwidnQ8NXNuiHKmX93QhleYKMGkzj/S0lH8Od71pyQInEkm4vgnIEiHgUqg
Vog+nC6X0UYyRaag1vH9v48HVku6KqSmCWG8z+cxQTY8sYAS27ENRoH4duf5zoA3
KKVEsSLMUw2pORQ6xt0ZkvLANb1hOZFh+ftC1XzOeV1V9bndCz3x1JjRviwX1Gjb
4FNr0H9RQdudiPC+XME/n7YirjHNNvGXoAo1qmcCAwEAAaOCAhgwggIUMB0GA1Ud
DgQWBBRCJJvudzGGug8N7yvd36T7qpImmDAfBgNVHSMEGDAWgBTYrh18xot4xJTF
MOqkoPdVniWk7zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzJLNGRmTWFMZU1TVXhURHFwS0QzVlo0bHBPOC5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWMvMTVjNzRjLWY4YjgtNGY1My1hMTMxLTY0ZTQzMWY3NGVlYS8x
L1FpU2I3bmN4aHJvUERlOHIzZC1rLTZxU0pwZy5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWMv
MTVjNzRjLWY4YjgtNGY1My1hMTMxLTY0ZTQzMWY3NGVlYS8xLzJLNGRmTWFMZU1T
VXhURHFwS0QzVlo0bHBPOC5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAblL8jANBAIAAjAHAwUCKgVVADAN
BgkqhkiG9w0BAQsFAAOCAQEARzy+xpGngNG4/pyaj8EPJcIT7fFpwbOFOsrlhNxP
9/R+U++6CBsja0Vk3Z26e4IkxroxuV0MKU0zXrtqGdfmiYs5kSREwjIwr7fe9whd
Ak7hzt1wjW5ABJWUTkrx1QEQ9grWs3o5PMGreNTnnyCNdHJ+qCXFcZkfpXmGn2p1
ujDJsmcnGU1HLRjVTlcyPoHDPC5VcNsZdFouPT7ARl7b7SucTj4hTWpGGte3y3+q
clBrSX7OpqRGZ+qmNjP1sP48laT2jJHaABpHKQkCPcrMJhgqSQtZCeVbLOfvlxGW
bbhdk5YPbyP2e3QDCcOFyrvfEnZZuHCNxJYhZYgLQfkrpg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:59:58 2023 by rpki-client on console-fra.rpki-client.org