Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/9QEKfiqhzH-bmQh5b6rMdNbStYc.roa
File: 9QEKfiqhzH-bmQh5b6rMdNbStYc.roa (raw, json)
Hash identifier: MpYTZwjsTnNyFZWB4RSLKA3k60L/jvvVARMaXOoFY4M=
Subject key identifier: F5:01:0A:7E:2A:A1:CC:7F:9B:99:08:79:6F:AA:CC:74:D6:D2:B5:87
Certificate issuer: /CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Certificate serial: 0194252149B3773BA5D314C5E99E2CDB5AF1
Authority key identifier: D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/9QEKfiqhzH-bmQh5b6rMdNbStYc.roa
Signing time: Thu 02 Jan 2025 03:48:46 +0000
ROA not before: Thu 02 Jan 2025 03:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208764
IP address blocks: 185.244.92.0/23 maxlen: 23
194.169.51.0/24 maxlen: 24
194.169.53.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:49:b3:77:3b:a5:d3:14:c5:e9:9e:2c:db:5a:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d949caba3d4315607f4a6d627ece1ecea8cbc319
Validity
Not Before: Jan 2 03:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5010a7e2aa1cc7f9b9908796faacc74d6d2b587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:a7:fb:79:09:99:6b:e6:d2:ac:3d:40:76:9b:
d5:e0:2b:45:3c:49:24:3d:4f:a5:d5:3b:9b:21:a4:
e1:df:e7:9f:59:e2:f0:50:9d:b0:fc:3a:42:d3:11:
38:a9:eb:ff:0b:02:e8:e9:07:a8:58:42:5f:c1:50:
98:f3:75:32:ca:78:15:4f:96:b0:2d:63:da:f6:28:
63:a2:23:55:bb:64:1f:92:cb:a8:8d:a8:71:13:d8:
0c:87:b8:9c:c9:6b:c1:17:e5:00:6e:91:87:16:15:
a7:2a:a8:7d:88:2b:31:5c:e9:58:ab:f5:48:c8:55:
d1:52:f8:45:3a:0e:2e:0e:0f:1d:e0:3a:58:7b:e3:
8b:1f:a2:b2:f7:28:ef:e1:67:72:1a:6c:b6:37:b8:
03:af:a8:66:8f:82:e0:c8:1b:50:95:95:28:59:36:
65:09:45:e2:cf:b8:b6:fd:b7:22:13:03:c4:87:af:
0b:97:73:01:a9:f8:c6:f5:84:c1:37:a6:7f:c9:ff:
0e:a6:42:ed:6d:93:b3:a5:9e:d4:c7:1f:69:f7:31:
6f:ea:eb:3f:5a:8b:d8:04:71:2b:d1:c0:87:9f:c9:
36:33:8d:5a:9b:4d:2e:91:55:3c:60:e6:fc:25:71:
8b:dc:37:e2:1d:32:a0:85:90:1d:48:8a:36:0b:de:
5d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:01:0A:7E:2A:A1:CC:7F:9B:99:08:79:6F:AA:CC:74:D6:D2:B5:87
X509v3 Authority Key Identifier:
keyid:D9:49:CA:BA:3D:43:15:60:7F:4A:6D:62:7E:CE:1E:CE:A8:CB:C3:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/9QEKfiqhzH-bmQh5b6rMdNbStYc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/fe6904-eb56-4493-929c-1a9df38f5901/1/2UnKuj1DFWB_Sm1ifs4ezqjLwxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.92.0/23
194.169.51.0/24
194.169.53.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:72:dd:a3:2d:5a:00:2d:4a:b2:29:d4:e5:a2:3d:a2:14:86:
3a:e8:8d:92:66:c1:19:72:3d:9e:85:1b:1b:41:9b:12:31:6a:
a8:0b:b7:42:e2:a9:da:5e:85:bf:53:6c:70:01:ef:75:85:ea:
fd:32:c4:e3:2d:ed:b5:6e:6e:b8:19:11:a5:50:89:4d:c2:7d:
69:26:8d:00:fa:3f:9c:58:d2:b2:a1:da:9f:e1:41:b2:a8:f7:
42:e4:84:75:3b:80:b8:b0:ca:80:0d:a9:5c:04:f5:41:fd:e4:
78:65:db:a7:8e:39:8c:cf:19:fd:40:96:01:aa:9d:72:dd:f5:
79:99:6b:5a:92:26:bf:f8:81:22:29:98:50:bc:d1:a0:91:50:
af:52:96:c3:b7:64:8e:60:9a:b1:f1:bd:ea:63:59:74:a2:91:
3a:40:ae:ff:1a:ec:9d:0e:fa:be:97:45:0a:fa:b8:f6:be:21:
1e:2a:b7:b6:8a:a0:6b:97:53:f4:28:2b:cf:71:3b:91:91:19:
bb:ed:92:3e:10:6c:96:d2:38:b3:c3:f7:34:c5:5b:8c:0a:1c:
f5:44:f3:51:63:ca:85:35:8d:59:a9:99:2d:aa:87:01:d5:b8:
a0:18:1c:89:2b:b5:2e:0e:f9:70:bf:74:16:04:46:30:ec:57:
57:2d:ea:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:17:44 2025 by rpki-client