Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/qxJK7mJo-8_9pX76Qv716-ixIdM.roa
File: qxJK7mJo-8_9pX76Qv716-ixIdM.roa (raw, json)
Hash identifier: fY4//eCsnHFLSyarI5FkD4c8FhJJPdwHz6rpu0fR1zk=
Subject key identifier: AB:12:4A:EE:62:68:FB:CF:FD:A5:7E:FA:42:FE:F5:EB:E8:B1:21:D3
Certificate issuer: /CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Certificate serial: 0194AC58C65E8D655A4C110F77ACA0FC1460
Authority key identifier: 3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/qxJK7mJo-8_9pX76Qv716-ixIdM.roa
Signing time: Tue 28 Jan 2025 09:58:06 +0000
ROA not before: Tue 28 Jan 2025 09:58:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205225
IP address blocks: 185.117.60.0/22 maxlen: 22
185.117.62.0/24 maxlen: 24
185.117.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:ac:58:c6:5e:8d:65:5a:4c:11:0f:77:ac:a0:fc:14:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b8fe2465843031b778bb8d8b7bd35a094fccf48
Validity
Not Before: Jan 28 09:58:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab124aee6268fbcffda57efa42fef5ebe8b121d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c6:fe:85:e8:d4:f9:13:73:d3:03:b4:67:6e:
d9:2d:f5:ad:1c:40:a8:20:7a:92:55:a0:8f:d4:cb:
00:c1:32:21:97:87:6d:c0:d5:06:40:c0:87:e7:ce:
54:fc:a2:0f:1e:3f:a8:0f:2c:30:dd:09:94:43:74:
dc:a7:81:9d:50:61:c2:03:3c:b8:b4:77:6c:ab:a5:
b7:65:dd:54:2e:8a:f1:e3:2e:ea:c6:03:a7:20:47:
83:df:26:77:da:65:8e:46:40:e2:5b:57:eb:99:c9:
46:2e:e0:06:2e:5b:2c:b4:f6:81:9c:6e:e0:35:20:
4d:20:72:ec:71:a8:4c:d3:ea:77:0e:2d:f6:c7:18:
45:cd:02:71:0d:c2:b7:a5:0d:d2:8a:f8:49:5a:10:
0c:ff:4a:ba:60:be:67:8a:1a:4e:4e:4e:31:4e:a5:
c5:b5:dc:d6:a8:bd:5c:99:13:9f:10:08:3e:9d:56:
37:32:c0:4a:94:3e:57:bc:54:e1:59:63:5f:b0:8c:
49:e1:3d:68:5a:eb:6b:f1:4d:72:6c:51:b5:3a:34:
26:17:0c:fb:f1:4c:ad:df:38:98:67:d8:51:20:73:
ce:c4:df:20:48:43:c1:24:5e:e7:c1:a5:e0:55:8d:
9c:de:ce:4d:65:ac:3a:d7:54:a3:c4:20:35:6b:90:
f0:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:12:4A:EE:62:68:FB:CF:FD:A5:7E:FA:42:FE:F5:EB:E8:B1:21:D3
X509v3 Authority Key Identifier:
keyid:3B:8F:E2:46:58:43:03:1B:77:8B:B8:D8:B7:BD:35:A0:94:FC:CF:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O4_iRlhDAxt3i7jYt701oJT8z0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/qxJK7mJo-8_9pX76Qv716-ixIdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/ef20cf-4c39-4707-857c-7c35006e07a1/1/O4_iRlhDAxt3i7jYt701oJT8z0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.60.0/22
Signature Algorithm: sha256WithRSAEncryption
ad:87:0a:b7:03:ca:3e:e1:b7:03:8d:bd:f6:46:2c:e0:12:b3:
33:02:c4:6a:ce:39:cc:cc:5e:b3:4e:e4:82:06:d4:65:3f:2d:
44:fe:be:a2:08:b5:f2:44:4c:92:b9:b0:c6:16:2b:dd:2a:50:
d2:1e:68:f2:af:a2:a8:75:db:64:b9:6f:9b:f7:48:32:c5:ab:
86:20:c5:bd:c4:36:ca:19:17:7c:d4:4f:96:26:c5:5a:3f:07:
a6:b6:5e:d7:4c:55:ec:a6:16:f6:d0:f3:25:62:04:1a:f3:66:
2f:ed:eb:e3:88:e8:04:56:c9:ab:dd:7c:c8:6c:70:7a:71:47:
a9:e2:a2:ff:47:77:96:90:5a:9f:6f:d3:50:14:1a:cd:fb:b5:
b0:d5:45:f9:c3:8c:05:6a:f4:8b:55:9d:6f:d2:23:fb:af:83:
32:47:21:91:7d:c6:7f:ff:97:d0:b2:df:e6:91:36:eb:2f:fd:
4b:3d:67:73:8d:4f:55:02:d4:a8:2b:2f:72:2e:8e:82:84:03:
c5:b9:9a:a9:b5:10:b1:9d:65:64:a8:25:fa:01:a9:48:29:e1:
aa:c9:28:8c:b5:09:68:8a:eb:4b:fa:f3:9e:b6:68:31:a2:cb:
66:8c:13:09:b1:44:13:42:19:20:7c:0f:fe:aa:b3:2e:97:a1:
68:f6:35:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 08:58:13 2025 by rpki-client