Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/01Qa-NKV9qZmtPJzGWHO8PKJ8c4.roa
File: 01Qa-NKV9qZmtPJzGWHO8PKJ8c4.roa (raw, json)
Hash identifier: /kmPEn6ZmFIwrsVSjqDiSYZ+yN/UBzmXkDTLOjcbY8c=
Subject key identifier: D3:54:1A:F8:D2:95:F6:A6:66:B4:F2:73:19:61:CE:F0:F2:89:F1:CE
Certificate issuer: /CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Certificate serial: 01856C9CB066BA49E5A78CF03230DD23833D
Authority key identifier: 05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/01Qa-NKV9qZmtPJzGWHO8PKJ8c4.roa
Signing time: Sun 01 Jan 2023 09:14:46 +0000
ROA not before: Sun 01 Jan 2023 09:14:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203185
IP address blocks: 185.112.244.0/24 maxlen: 24
185.112.245.0/24 maxlen: 24
185.112.246.0/24 maxlen: 24
185.112.247.0/24 maxlen: 24
2a02:6e40:beef::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:9c:b0:66:ba:49:e5:a7:8c:f0:32:30:dd:23:83:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05da7571c5eb13b1ae4f4417cefec2bd77902e2d
Validity
Not Before: Jan 1 09:14:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3541af8d295f6a666b4f2731961cef0f289f1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:f4:a1:e4:1c:41:85:19:e0:b4:d0:36:a7:68:
30:0e:cd:22:e8:d0:41:bf:5f:d4:a0:54:eb:40:87:
87:f9:5e:3c:fb:3d:5e:1a:1c:3a:b0:72:75:d8:01:
69:98:1a:26:08:4e:5f:4d:00:7f:69:b4:f8:29:d4:
af:24:6c:22:ba:00:75:1d:02:fb:51:56:48:9d:fc:
c9:4d:1a:0e:b9:a9:2b:71:a6:9e:8f:2b:ab:20:e7:
56:ac:85:1b:8b:2e:4a:f0:f8:af:74:72:34:b8:7f:
d8:41:de:9f:8c:63:ba:af:1c:ea:34:26:27:d0:46:
d2:52:50:b5:d0:6b:cb:13:fa:9f:76:f2:d3:fe:e2:
59:2c:28:b6:64:8c:f5:3a:88:3b:fd:16:fa:29:08:
b4:05:5f:0b:14:39:1a:8d:55:56:4c:b9:e6:48:01:
8b:47:78:76:b5:3b:fc:0e:60:0b:98:89:d1:ba:73:
2d:94:7d:0b:b6:52:f5:1d:09:fa:c9:32:d5:5c:07:
25:f2:af:2d:9d:cd:14:8b:02:77:ec:c1:41:d5:da:
8f:07:94:0f:32:55:3d:3b:94:f0:70:73:8b:57:2b:
14:b1:fe:ae:e0:7b:cf:a5:55:8e:44:97:f0:2a:03:
31:2e:e1:fa:e7:f7:13:58:b5:c2:44:35:02:e3:c7:
6c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:54:1A:F8:D2:95:F6:A6:66:B4:F2:73:19:61:CE:F0:F2:89:F1:CE
X509v3 Authority Key Identifier:
keyid:05:DA:75:71:C5:EB:13:B1:AE:4F:44:17:CE:FE:C2:BD:77:90:2E:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/01Qa-NKV9qZmtPJzGWHO8PKJ8c4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/f64f83-370a-4901-8bfa-3655302bf005/1/Bdp1ccXrE7GuT0QXzv7CvXeQLi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.244.0/22
IPv6:
2a02:6e40:beef::/48
Signature Algorithm: sha256WithRSAEncryption
3e:96:31:33:37:ec:a1:7a:88:cc:72:d3:95:7b:18:2b:e4:1e:
e1:81:f3:cc:eb:a0:b5:12:98:3a:85:9a:29:9a:c1:5a:76:c7:
3f:04:00:4c:4d:64:e2:6d:00:cf:47:6e:9c:d6:3a:d4:b8:95:
5b:e8:aa:4a:cb:d8:51:5b:48:05:e6:ae:52:08:f8:e6:5c:ae:
d0:0c:72:89:9f:43:34:c0:ff:6e:a2:00:c9:67:f8:ff:d0:8f:
4a:01:d1:fb:e4:95:fb:38:83:50:5b:94:75:e8:43:a5:6c:3e:
5f:8a:c1:3f:96:fd:7c:6d:58:fa:76:8d:71:14:69:14:12:42:
36:3d:fc:47:da:62:dd:f4:ec:21:2f:14:e1:92:d5:68:54:92:
2f:ee:40:1a:ad:72:4d:c4:d0:70:1b:f8:ac:cb:42:5b:23:c3:
2a:d3:3a:9e:78:e5:39:d6:6f:b3:8e:3a:16:24:86:70:7e:76:
af:66:0e:65:12:72:3d:b4:66:4a:a5:5c:ac:2b:09:93:cb:02:
fa:9f:3f:50:39:66:f7:1a:0c:20:10:0b:d7:06:99:d9:e6:82:
a2:0a:3a:47:b0:7d:31:4d:45:68:30:0b:e3:7c:96:93:9c:16:
ee:1f:8f:19:f3:34:64:41:5c:5d:59:f8:be:5e:52:35:06:8f:
16:e5:e0:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 17:34:26 2025 by rpki-client