Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/QVKy_C-gH5SUvXuFvr2rKaKKB9o.roa
File: QVKy_C-gH5SUvXuFvr2rKaKKB9o.roa (raw, json)
Hash identifier: bb+gerfKMtrw7ctarVTjGclt6FZ9lxxKBxWm7py7YFs=
Subject key identifier: 41:52:B2:FC:2F:A0:1F:94:94:BD:7B:85:BE:BD:AB:29:A2:8A:07:DA
Certificate issuer: /CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Certificate serial: 0194266BCA100E323F6F26D6721289752272
Authority key identifier: 87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/QVKy_C-gH5SUvXuFvr2rKaKKB9o.roa
Signing time: Thu 02 Jan 2025 09:49:45 +0000
ROA not before: Thu 02 Jan 2025 09:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61022
IP address blocks: 80.121.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ca:10:0e:32:3f:6f:26:d6:72:12:89:75:22:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=870c589a4f22a9ca2ff99b4c48f8bdf492871725
Validity
Not Before: Jan 2 09:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4152b2fc2fa01f9494bd7b85bebdab29a28a07da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8b:c8:ee:a2:98:f5:d0:4e:63:97:6f:10:d7:
a9:e7:b0:aa:a8:6f:3f:1c:58:88:25:af:80:c5:bf:
08:94:ab:41:53:91:a4:ed:99:8b:37:9a:6b:35:09:
4d:1c:41:d0:8d:c4:6f:b0:f6:08:e5:b9:fe:fc:0c:
dc:33:29:4e:7e:0f:ae:3e:18:05:d4:de:98:f1:5b:
1f:fa:6a:2d:46:36:b6:e4:7b:d8:db:74:be:29:4f:
91:60:54:fb:7d:ed:e2:66:29:ab:d4:01:78:7e:90:
85:a8:14:df:36:2d:2f:79:a4:c7:98:5a:dd:83:47:
e5:d7:8c:b0:f8:36:e8:87:2b:ff:8f:7d:af:be:a3:
ea:1d:4f:81:72:4f:41:f1:e0:04:89:24:73:2e:f5:
85:5a:52:49:0e:92:48:4d:9c:a2:ac:6e:e5:00:02:
f2:35:72:f3:25:ef:27:d6:70:59:07:e6:4c:86:ad:
af:a6:78:5f:97:8e:db:28:6c:57:21:dd:aa:a1:43:
26:65:d7:63:4e:45:0f:c4:ec:81:49:9e:a4:01:bf:
0c:4a:a8:48:3f:f9:33:de:d9:90:67:61:fe:96:0b:
65:d0:c1:66:21:e3:b4:18:3b:a3:f7:42:5f:9a:cd:
27:62:3f:1d:e7:04:4b:aa:5b:38:30:83:90:71:8e:
e8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:52:B2:FC:2F:A0:1F:94:94:BD:7B:85:BE:BD:AB:29:A2:8A:07:DA
X509v3 Authority Key Identifier:
keyid:87:0C:58:9A:4F:22:A9:CA:2F:F9:9B:4C:48:F8:BD:F4:92:87:17:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hwxYmk8iqcov-ZtMSPi99JKHFyU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/QVKy_C-gH5SUvXuFvr2rKaKKB9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f505b5-0e46-4b3f-bf1b-849d3a6b9c2d/1/hwxYmk8iqcov-ZtMSPi99JKHFyU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.121.202.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:bb:63:da:2c:70:fd:32:7b:b5:88:c5:55:95:9e:71:f1:08:
5d:87:10:c8:1f:58:2b:54:41:6d:37:bb:aa:59:2d:c3:fa:2a:
ab:f9:50:3b:15:c2:51:09:fd:9e:5a:90:73:58:63:c9:1c:be:
0c:ab:e2:61:4d:cb:24:29:0f:ea:aa:b3:12:29:eb:18:d1:c1:
67:19:2e:c1:81:a0:15:1f:ae:1b:99:fb:bc:0f:1b:6b:ab:fb:
51:b0:e9:07:38:66:57:c1:0b:52:6b:b1:6e:5d:4a:8a:6d:83:
cb:58:76:f9:f6:17:0f:07:3c:f6:91:af:17:bd:27:3b:49:c1:
2b:d6:da:24:12:24:4a:f4:d8:33:6d:b2:94:ff:fd:09:8d:22:
26:7f:02:75:85:6e:c8:a4:91:51:e3:4a:c9:c8:ee:d1:6a:80:
2a:51:3d:c0:6c:c9:84:67:e6:e6:87:6b:e7:17:b1:9b:2f:72:
b6:ce:61:4e:c8:9f:5b:d7:5e:3e:3e:22:e4:da:b2:6c:0b:23:
95:04:60:cf:17:d7:3b:a0:d6:7a:aa:78:0e:35:40:a1:a4:41:
1e:4f:07:21:ea:e8:e1:73:3c:28:a9:77:2e:db:8d:dd:0a:9b:
45:22:8b:9f:27:9b:6b:91:25:5e:ab:5a:6b:5b:83:71:b5:a7:
79:5d:cb:63
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma8oQDjI/bybWchKJdSJyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3MGM1ODlhNGYyMmE5Y2EyZmY5OWI0YzQ4ZjhiZGY0OTI4
NzE3MjUwHhcNMjUwMTAyMDk0OTQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTUyYjJmYzJmYTAxZjk0OTRiZDdiODViZWJkYWIyOWEyOGEwN2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYvI7qKY9dBOY5dvENep57CqqG8/
HFiIJa+Axb8IlKtBU5Gk7ZmLN5prNQlNHEHQjcRvsPYI5bn+/AzcMylOfg+uPhgF
1N6Y8Vsf+motRja25HvY23S+KU+RYFT7fe3iZimr1AF4fpCFqBTfNi0veaTHmFrd
g0fl14yw+Dbohyv/j32vvqPqHU+Bck9B8eAEiSRzLvWFWlJJDpJITZyirG7lAALy
NXLzJe8n1nBZB+ZMhq2vpnhfl47bKGxXId2qoUMmZddjTkUPxOyBSZ6kAb8MSqhI
P/kz3tmQZ2H+lgtl0MFmIeO0GDuj90Jfms0nYj8d5wRLqls4MIOQcY7otwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEFSsvwvoB+UlL17hb69qymiigfaMB8GA1UdIwQY
MBaAFIcMWJpPIqnKL/mbTEj4vfSShxclMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWIt
ODQ5ZDNhNmI5YzJkLzEvUVZLeV9DLWdINVNVdlh1RnZyMnJLYUtLQjlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9mNTA1YjUtMGU0Ni00YjNmLWJmMWItODQ5ZDNhNmI5YzJk
LzEvaHd4WW1rOGlxY292LVp0TVNQaTk5SktIRnlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUHnKMA0G
CSqGSIb3DQEBCwUAA4IBAQDGu2PaLHD9Mnu1iMVVlZ5x8QhdhxDIH1grVEFtN7uq
WS3D+iqr+VA7FcJRCf2eWpBzWGPJHL4Mq+JhTcskKQ/qqrMSKesY0cFnGS7BgaAV
H64bmfu8Dxtrq/tRsOkHOGZXwQtSa7FuXUqKbYPLWHb59hcPBzz2ka8XvSc7ScEr
1tokEiRK9NgzbbKU//0JjSImfwJ1hW7IpJFR40rJyO7RaoAqUT3AbMmEZ+bmh2vn
F7GbL3K2zmFOyJ9b114+PiLk2rJsCyOVBGDPF9c7oNZ6qngONUChpEEeTwch6ujh
czwoqXcu243dCptFIoufJ5trkSVeq1prW4Nxtad5Xctj
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:32:24 2025 by rpki-client