Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/KxqqgwhHr1JBau2ZnEJ99DBtg4A.roa
File: KxqqgwhHr1JBau2ZnEJ99DBtg4A.roa (raw, json)
Hash identifier: QCOcE3LD/xRpaRa6zgmKhfyxrFbaW8v4jp9GZFELj38=
Subject key identifier: 2B:1A:AA:83:08:47:AF:52:41:6A:ED:99:9C:42:7D:F4:30:6D:83:80
Certificate issuer: /CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
Certificate serial: 019427484365D530AB3735E72451E2A35C24
Authority key identifier: 1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/KxqqgwhHr1JBau2ZnEJ99DBtg4A.roa
Signing time: Thu 02 Jan 2025 13:50:34 +0000
ROA not before: Thu 02 Jan 2025 13:50:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61424
IP address blocks: 185.48.248.0/23 maxlen: 23
2a04:b540::/36 maxlen: 36
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:43:65:d5:30:ab:37:35:e7:24:51:e2:a3:5c:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
Validity
Not Before: Jan 2 13:50:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2b1aaa830847af52416aed999c427df4306d8380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:47:0c:6b:2f:b6:25:4b:b2:52:b5:15:20:fa:
9c:53:91:28:cd:91:ba:46:48:cc:20:fb:00:13:f6:
5c:77:1f:18:29:bd:4d:45:a9:e2:52:b4:46:d9:5a:
46:ce:81:b9:0d:40:1d:cb:c9:b7:bc:71:be:ee:08:
3e:e3:3c:2e:25:74:2a:48:fa:e4:48:14:55:f3:90:
2e:9c:ff:fb:4d:12:03:71:fd:1e:e8:51:11:65:1c:
b7:07:06:e5:a1:8a:b3:49:1a:2e:f9:32:60:db:51:
91:97:e8:42:f4:bb:ce:c7:d7:cf:56:05:c1:fd:51:
48:a9:b6:c0:68:37:c4:62:b2:f3:30:b0:6a:02:80:
13:30:1a:a0:b5:de:24:b0:ea:e8:55:a0:cc:26:12:
89:a7:b5:31:27:70:16:68:aa:5f:99:b1:c7:3a:8a:
b7:53:62:5c:62:94:29:fb:dd:7a:3d:85:51:81:62:
d3:5b:3a:80:42:82:0d:d3:d9:d7:ab:a2:02:f8:cb:
28:0e:45:8a:33:aa:8d:3d:32:27:a6:cd:bd:1b:cf:
90:f2:11:11:89:9d:c5:d9:59:8d:ca:b8:78:fa:12:
d6:ef:4f:b9:cb:17:c1:05:b3:55:b4:56:41:43:c9:
d5:78:d1:a2:96:8c:b1:cb:b4:cb:11:db:bd:5f:39:
b2:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:1A:AA:83:08:47:AF:52:41:6A:ED:99:9C:42:7D:F4:30:6D:83:80
X509v3 Authority Key Identifier:
keyid:1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/KxqqgwhHr1JBau2ZnEJ99DBtg4A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.248.0/23
IPv6:
2a04:b540::/36
Signature Algorithm: sha256WithRSAEncryption
1a:a7:44:1b:c8:85:10:2e:ee:94:3f:f3:28:eb:5f:52:36:20:
10:01:a6:65:d0:93:d5:10:46:1a:3e:de:91:f4:41:c1:2a:d3:
b0:c0:f0:9f:bd:83:3e:4d:f6:ec:67:97:c1:e6:5e:02:7b:85:
e9:dc:81:e3:a9:5f:45:24:d9:57:b6:46:45:f3:97:21:bf:6b:
e2:b7:dd:28:33:7d:ce:84:98:a6:96:01:cd:46:94:9c:fe:51:
91:94:e9:19:8f:d4:35:a8:a6:4c:c1:e1:d2:2c:e6:bf:23:58:
8b:b0:74:a9:41:ba:8f:27:23:3b:05:54:a7:77:37:56:04:5a:
87:c8:6c:ec:06:0b:0d:04:56:f3:eb:04:5c:73:68:54:2c:65:
82:55:47:f6:cc:7b:dd:fd:9f:de:3e:8d:83:4a:af:bd:06:f2:
ec:cd:61:7f:89:5b:b3:db:6a:d9:ca:7a:d0:02:92:7a:85:5c:
b3:40:47:01:79:0a:cb:61:2b:58:54:1a:39:b4:9d:19:68:70:
e0:a4:16:50:84:7f:aa:db:f0:42:a3:62:08:1c:3d:50:c2:56:
f7:09:4a:e7:c0:26:3d:a9:db:9b:e7:e2:18:44:68:2c:70:94:
eb:fa:e1:8e:d3:17:84:a3:9f:5b:05:c3:06:9b:fd:e2:ef:ef:
20:b9:ec:89
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZQnSENl1TCrNzXnJFHio1wkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiOTgyODgzZTFkZmJmNDYzM2UwOGMwYjU4Yzg1ZTg5ZmZj
MzIxMDEwHhcNMjUwMTAyMTM1MDM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYjFhYWE4MzA4NDdhZjUyNDE2YWVkOTk5YzQyN2RmNDMwNmQ4MzgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1kcMay+2JUuyUrUVIPqcU5EozZG6
RkjMIPsAE/Zcdx8YKb1NRaniUrRG2VpGzoG5DUAdy8m3vHG+7gg+4zwuJXQqSPrk
SBRV85AunP/7TRIDcf0e6FERZRy3BwbloYqzSRou+TJg21GRl+hC9LvOx9fPVgXB
/VFIqbbAaDfEYrLzMLBqAoATMBqgtd4ksOroVaDMJhKJp7UxJ3AWaKpfmbHHOoq3
U2JcYpQp+916PYVRgWLTWzqAQoIN09nXq6IC+MsoDkWKM6qNPTInps29G8+Q8hER
iZ3F2VmNyrh4+hLW70+5yxfBBbNVtFZBQ8nVeNGiloyxy7TLEdu9Xzmy0wIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFCsaqoMIR69SQWrtmZxCffQwbYOAMB8GA1UdIwQY
MBaAFBuYKIPh379GM+CMC1jIXon/wyEBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzVnb2ctSGZ2MFl6NEl3TFdNaGVpZl9ESVFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS81Nzg2MGEtZGQ1ZS00NmU4LTllY2It
ZDA3OGVlYzgyYjJhLzEvS3hxcWd3aEhyMUpCYXUyWm5FSjk5REJ0ZzRBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS81Nzg2MGEtZGQ1ZS00NmU4LTllY2ItZDA3OGVlYzgyYjJh
LzEvRzVnb2ctSGZ2MFl6NEl3TFdNaGVpZl9ESVFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBuTD4MA4E
AgACMAgDBgQqBLVAADANBgkqhkiG9w0BAQsFAAOCAQEAGqdEG8iFEC7ulD/zKOtf
UjYgEAGmZdCT1RBGGj7ekfRBwSrTsMDwn72DPk327GeXweZeAnuF6dyB46lfRSTZ
V7ZGRfOXIb9r4rfdKDN9zoSYppYBzUaUnP5RkZTpGY/UNaimTMHh0izmvyNYi7B0
qUG6jycjOwVUp3c3VgRah8hs7AYLDQRW8+sEXHNoVCxlglVH9sx73f2f3j6Ng0qv
vQby7M1hf4lbs9tq2cp60AKSeoVcs0BHAXkKy2ErWFQaObSdGWhw4KQWUIR/qtvw
QqNiCBw9UMJW9wlK58AmPanbm+fiGERoLHCU6/rhjtMXhKOfWwXDBpv94u/vILns
iQ==
-----END CERTIFICATE-----
Generated at Thu Apr 10 15:40:21 2025 by rpki-client