Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/q1TvDdxYX2Dzj0a9SDjZdFnKnW4.roa
File: q1TvDdxYX2Dzj0a9SDjZdFnKnW4.roa (raw, json)
Hash identifier: ZYpPddTPO3yOPNp2GXBtFmJGuD1VVNCBUqagssx73ik=
Subject key identifier: AB:54:EF:0D:DC:58:5F:60:F3:8F:46:BD:48:38:D9:74:59:CA:9D:6E
Certificate issuer: /CN=ef738909f94d9968436bb4e09a2d47cc7901733c
Certificate serial: 011E1992
Authority key identifier: EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/q1TvDdxYX2Dzj0a9SDjZdFnKnW4.roa
Signing time: Thu 17 Mar 2022 14:46:04 +0000
ROA not before: Thu 17 Mar 2022 14:46:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 136258
IP address blocks: 185.237.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18749842 (0x11e1992)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef738909f94d9968436bb4e09a2d47cc7901733c
Validity
Not Before: Mar 17 14:46:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ab54ef0ddc585f60f38f46bd4838d97459ca9d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:84:04:92:9d:12:ec:46:e8:a6:3c:14:f0:0a:
e8:9f:9c:bf:9a:28:7a:a2:f2:70:9a:2d:d3:59:96:
df:9f:65:f5:bd:1f:bc:77:f1:29:aa:15:bf:23:ff:
58:14:b1:59:c8:93:25:94:e4:9c:e9:1f:d2:df:f4:
38:b6:5e:d2:af:35:9c:06:93:ee:ee:6e:f2:04:6c:
70:8d:1b:34:dc:ee:06:d2:13:dc:18:25:c6:d9:a6:
13:61:ae:3d:9a:b9:4b:e1:df:d6:3a:76:0e:0c:2e:
91:39:67:ad:3e:f4:28:1e:ca:6d:d8:47:64:3e:bd:
21:a2:06:02:44:f5:8a:80:cb:46:b0:5d:47:e4:25:
82:90:26:9b:c3:e0:ef:34:53:80:aa:cf:99:be:02:
7b:aa:3d:65:d6:8a:a3:ef:a3:e5:b2:4c:14:ba:db:
61:11:ab:fe:51:2c:1d:68:a1:d3:d8:64:44:d2:c6:
59:17:31:47:cf:03:83:71:7e:b5:36:8d:7e:e8:b9:
25:e6:8c:5c:18:b9:f2:5a:f0:b3:7b:ab:bb:b3:2b:
15:10:e0:32:24:ae:55:74:13:a2:32:b9:21:9e:b4:
7d:90:71:4b:55:a2:c0:58:74:b6:50:ce:b4:00:36:
39:48:cf:69:c3:2d:0e:9c:aa:ff:5b:69:0b:2f:07:
1a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:54:EF:0D:DC:58:5F:60:F3:8F:46:BD:48:38:D9:74:59:CA:9D:6E
X509v3 Authority Key Identifier:
keyid:EF:73:89:09:F9:4D:99:68:43:6B:B4:E0:9A:2D:47:CC:79:01:73:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/73OJCflNmWhDa7Tgmi1HzHkBczw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/q1TvDdxYX2Dzj0a9SDjZdFnKnW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/29a016-f614-4bc3-9362-5ee30989b6eb/1/73OJCflNmWhDa7Tgmi1HzHkBczw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.237.185.0/24
Signature Algorithm: sha256WithRSAEncryption
db:75:c1:8f:21:48:1d:5f:3a:0c:b1:2f:38:7c:86:2c:22:45:
c4:41:9b:58:46:c0:27:f7:cf:4d:8b:ec:b8:c6:99:7c:9e:b4:
0b:92:20:70:89:2e:d9:94:59:3a:9d:4a:22:53:e4:f7:c4:19:
ac:b0:c7:36:56:f0:29:01:63:dd:35:b3:62:a7:74:20:67:c6:
02:14:cd:92:7c:2b:23:e1:6b:c3:d2:b3:80:d6:ce:96:80:b0:
94:dd:e4:3a:9e:c9:3e:29:1c:da:dd:a0:9d:77:7a:5f:2f:bd:
cd:88:ad:09:7a:78:47:76:e9:11:35:f2:02:0e:26:33:84:f7:
85:52:63:01:41:96:17:b4:63:86:94:00:d8:0a:6f:91:e3:e9:
a9:d8:40:81:51:b2:7c:dc:2e:eb:78:3f:9b:b7:a4:45:31:2f:
77:38:02:e5:ef:ee:19:26:71:e0:c1:71:ff:80:2e:5e:35:31:
6f:15:7e:e6:10:50:ea:1d:04:be:d8:5c:90:6d:24:77:e6:2d:
cf:25:c4:45:50:d5:6e:19:ae:1a:d8:16:4a:d6:62:d1:12:99:
72:20:10:90:20:16:4d:9d:1f:c6:20:28:91:e8:13:50:67:22:
00:ee:87:e0:59:21:c8:06:87:b3:b8:4f:0e:ef:72:95:61:eb:
a1:a9:0b:d9
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEAR4ZkjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhl
ZjczODkwOWY5NGQ5OTY4NDM2YmI0ZTA5YTJkNDdjYzc5MDE3MzNjMB4XDTIyMDMx
NzE0NDYwNFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYWI1NGVmMGRkYzU4
NWY2MGYzOGY0NmJkNDgzOGQ5NzQ1OWNhOWQ2ZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMGEBJKdEuxG6KY8FPAK6J+cv5ooeqLycJot01mW359l9b0f
vHfxKaoVvyP/WBSxWciTJZTknOkf0t/0OLZe0q81nAaT7u5u8gRscI0bNNzuBtIT
3BglxtmmE2GuPZq5S+Hf1jp2DgwukTlnrT70KB7KbdhHZD69IaIGAkT1ioDLRrBd
R+QlgpAmm8Pg7zRTgKrPmb4Ce6o9ZdaKo++j5bJMFLrbYRGr/lEsHWih09hkRNLG
WRcxR88Dg3F+tTaNfui5JeaMXBi58lrws3uru7MrFRDgMiSuVXQTojK5IZ60fZBx
S1WiwFh0tlDOtAA2OUjPacMtDpyq/1tpCy8HGt0CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSrVO8N3FhfYPOPRr1IONl0WcqdbjAfBgNVHSMEGDAWgBTvc4kJ+U2ZaENr
tOCaLUfMeQFzPDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzczT0pDZmxObVdoRGE3VGdtaTFIekhrQmN6dy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvYTAvMjlhMDE2LWY2MTQtNGJjMy05MzYyLTVlZTMwOTg5YjZlYi8x
L3ExVHZEZHhZWDJEemowYTlTRGpaZEZuS25XNC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTAv
MjlhMDE2LWY2MTQtNGJjMy05MzYyLTVlZTMwOTg5YjZlYi8xLzczT0pDZmxObVdo
RGE3VGdtaTFIekhrQmN6dy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEALntuTANBgkqhkiG9w0BAQsFAAOC
AQEA23XBjyFIHV86DLEvOHyGLCJFxEGbWEbAJ/fPTYvsuMaZfJ60C5IgcIku2ZRZ
Op1KIlPk98QZrLDHNlbwKQFj3TWzYqd0IGfGAhTNknwrI+Frw9KzgNbOloCwlN3k
Op7JPikc2t2gnXd6Xy+9zYitCXp4R3bpETXyAg4mM4T3hVJjAUGWF7RjhpQA2Apv
kePpqdhAgVGyfNwu63g/m7ekRTEvdzgC5e/uGSZx4MFx/4AuXjUxbxV+5hBQ6h0E
vthckG0kd+YtzyXERVDVbhmuGtgWStZi0RKZciAQkCAWTZ0fxiAokegTUGciAO6H
4FkhyAaHs7hPDu9ylWHroakL2Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:39:13 2025 by rpki-client