Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/sqmMGt0eDKyreQvWI_6aFaF0fMI.roa
File: sqmMGt0eDKyreQvWI_6aFaF0fMI.roa (raw, json)
Hash identifier: qdLfu3h3QsYojhl/lJoW5BgE1PTZ02X+GGEq14T1m/g=
Subject key identifier: B2:A9:8C:1A:DD:1E:0C:AC:AB:79:0B:D6:23:FE:9A:15:A1:74:7C:C2
Certificate issuer: /CN=9de05733efb8b3764ca93ee340988869d96603aa
Certificate serial: 019425FD96CE8249750A940E310DC3B57B33
Authority key identifier: 9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/sqmMGt0eDKyreQvWI_6aFaF0fMI.roa
Signing time: Thu 02 Jan 2025 07:49:23 +0000
ROA not before: Thu 02 Jan 2025 07:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215328
IP address blocks: 188.65.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:96:ce:82:49:75:0a:94:0e:31:0d:c3:b5:7b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de05733efb8b3764ca93ee340988869d96603aa
Validity
Not Before: Jan 2 07:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2a98c1add1e0cacab790bd623fe9a15a1747cc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:74:5f:46:f4:70:f8:1b:72:21:70:36:72:
06:f1:cc:f8:dd:2d:fb:28:b9:22:26:dd:58:61:c3:
13:3b:ab:e2:2f:44:2c:11:f2:ac:7f:60:c0:20:3d:
c8:84:4a:7b:88:ba:65:67:9f:b7:9c:75:9e:3a:59:
ad:a9:2f:ff:e7:c4:0a:7c:ef:6d:18:8e:75:9d:77:
97:bf:15:45:1a:b5:39:50:b6:e5:cf:8b:8d:7b:e2:
f6:d3:8d:db:c8:fb:85:76:21:10:60:b6:f5:95:2a:
75:fd:33:c7:cb:16:ce:b8:d5:37:a6:94:2e:5d:1a:
59:aa:66:c6:2a:f3:83:bb:77:4e:d7:25:ed:f0:5d:
be:73:a1:0c:f7:40:73:71:00:26:64:34:78:87:0c:
c5:99:9f:08:4c:4e:e9:29:d5:cc:6b:ca:77:6b:88:
bf:f8:75:2f:ea:ca:9d:63:3e:50:c9:36:65:0e:24:
43:ec:bb:da:20:52:de:d6:c7:cc:f4:4f:b4:2a:1e:
e5:9a:6f:c2:ab:33:43:76:09:5a:58:97:92:6a:de:
af:8a:f4:17:94:29:e1:ae:3a:4d:8c:d0:3b:5a:cd:
99:a8:3c:8a:46:00:99:36:c6:d4:a3:38:dc:08:66:
82:43:f3:29:b0:73:5d:30:40:a3:dd:f8:36:43:72:
8e:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A9:8C:1A:DD:1E:0C:AC:AB:79:0B:D6:23:FE:9A:15:A1:74:7C:C2
X509v3 Authority Key Identifier:
keyid:9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/sqmMGt0eDKyreQvWI_6aFaF0fMI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.65.162.0/24
Signature Algorithm: sha256WithRSAEncryption
62:d3:79:32:29:6f:fa:01:0e:cc:a4:8d:d4:49:ff:bd:77:3c:
02:d3:64:5e:23:51:29:dc:23:98:df:2e:ee:9e:92:02:33:cb:
3f:40:ba:6a:82:5c:e1:e8:af:5f:50:c0:b7:8c:60:4a:1a:5e:
11:32:ad:27:8d:fd:b0:cd:ae:f8:0f:47:71:62:43:73:46:98:
62:58:26:7e:5d:59:3c:cc:96:94:ce:1f:45:b2:3c:b4:53:40:
6b:83:99:34:b5:55:98:f6:3e:6c:6b:02:13:fe:ca:93:c8:ad:
e3:32:1e:5d:e0:c8:27:15:72:fd:a0:25:b2:23:67:e1:5c:5c:
2b:0b:19:41:30:d5:ce:2c:a7:b9:8a:89:4a:9d:27:71:60:f7:
e1:56:8e:58:16:df:07:0d:87:51:29:3d:0b:45:9e:94:fa:75:
23:71:a7:91:c8:c2:49:cf:ab:52:a7:a5:d2:f4:79:29:8d:f2:
00:1f:f3:9a:54:a3:b5:5a:7b:34:c4:24:d9:0f:1b:90:88:4f:
b5:43:4c:7f:a6:11:ca:6e:7d:bf:a4:4c:c2:81:d8:64:3d:55:
22:1d:a2:fd:db:92:99:d0:4d:e2:0a:78:d7:d4:df:4a:19:5d:
0b:c4:2a:ba:a6:cf:5c:59:1e:e0:c9:d4:4c:b5:2c:da:a3:4e:
36:95:cc:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:53:12 2025 by rpki-client