Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/QEP4j9JVsbgw6u0dNGwjp_dEBOM.roa
File: QEP4j9JVsbgw6u0dNGwjp_dEBOM.roa (raw, json)
Hash identifier: cfwWMXWNZBAAjCKALqzpLbct9a8WBHygXbGOplIqMXg=
Subject key identifier: 40:43:F8:8F:D2:55:B1:B8:30:EA:ED:1D:34:6C:23:A7:F7:44:04:E3
Certificate issuer: /CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Certificate serial: 0194258E26B36B27B8118D997C066F6BCE3F
Authority key identifier: EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/QEP4j9JVsbgw6u0dNGwjp_dEBOM.roa
Signing time: Thu 02 Jan 2025 05:47:40 +0000
ROA not before: Thu 02 Jan 2025 05:47:40 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60532
IP address blocks: 88.218.228.0/22 maxlen: 22
185.23.189.0/24 maxlen: 24
185.23.190.0/23 maxlen: 23
2a04:26c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:26:b3:6b:27:b8:11:8d:99:7c:06:6f:6b:ce:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6d47b47e05b13d058b1cb42529a7c1866dcdf2
Validity
Not Before: Jan 2 05:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4043f88fd255b1b830eaed1d346c23a7f74404e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:44:31:56:2a:54:8b:f0:bc:ab:1b:19:ac:ef:
21:df:ca:05:ab:cc:33:c3:11:ef:e7:67:ca:26:ab:
2d:5f:b8:c6:79:99:f6:eb:69:9f:79:8f:eb:b3:77:
0e:61:2d:9d:9e:4f:7a:f2:73:06:94:61:1c:ab:78:
af:36:b4:fc:ec:94:3f:ea:36:e9:6d:6f:73:25:dd:
28:81:c7:b4:eb:3a:64:b8:8f:20:a9:23:8d:72:5a:
0b:f5:e5:c8:a1:81:dd:bf:34:15:48:46:2f:63:bd:
86:fa:1d:b5:7b:66:62:34:65:5f:8f:70:ef:e7:9c:
f7:ee:89:ab:64:41:63:35:b8:48:52:9e:ad:c6:11:
85:9a:79:62:ad:87:b1:a2:aa:38:b5:41:7f:3c:28:
25:f7:be:9e:8a:be:8c:37:60:17:95:c1:90:5a:5f:
cd:c8:77:7f:d9:7b:36:8c:0a:8b:5a:6c:b9:ff:8b:
f4:30:ba:30:ba:79:d2:28:7f:23:ec:cb:52:6e:37:
2e:2b:9e:02:04:3e:69:59:8c:54:59:5f:0e:7f:e8:
cf:76:b8:f1:7a:20:f3:a4:59:43:1a:b0:c3:a0:15:
d9:ff:61:36:9c:ca:cf:d5:bc:9c:69:4a:a1:1a:82:
00:6f:21:53:8d:2c:ae:eb:4f:8a:a9:c0:11:f1:34:
2e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:43:F8:8F:D2:55:B1:B8:30:EA:ED:1D:34:6C:23:A7:F7:44:04:E3
X509v3 Authority Key Identifier:
keyid:EC:6D:47:B4:7E:05:B1:3D:05:8B:1C:B4:25:29:A7:C1:86:6D:CD:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7G1HtH4FsT0Fixy0JSmnwYZtzfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/QEP4j9JVsbgw6u0dNGwjp_dEBOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2a591c-3c4a-4288-be91-c39adb98f429/1/7G1HtH4FsT0Fixy0JSmnwYZtzfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.228.0/22
185.23.189.0-185.23.191.255
IPv6:
2a04:26c0::/29
Signature Algorithm: sha256WithRSAEncryption
72:48:17:c7:68:89:2a:15:eb:ad:b0:81:2d:f7:9a:9a:af:ac:
65:0d:d4:a2:0b:2e:2b:fd:5b:d4:96:2f:91:8d:5a:7c:41:57:
d9:b7:42:3c:4d:f1:dd:7b:94:53:10:bc:e6:e0:d6:aa:f7:37:
3c:6e:50:34:4f:8c:0c:1d:06:fb:4a:56:18:b5:8e:9f:95:9a:
53:5e:72:f9:c0:dc:12:56:ca:10:64:51:83:e3:5e:e1:8c:f2:
03:cb:2f:ea:7b:f1:f6:4a:69:da:3d:fa:9b:e0:9e:84:1f:13:
c8:6e:cf:bd:cc:e7:69:d9:9d:72:e2:9a:43:a3:95:a4:3e:8b:
ac:02:c8:1b:90:f5:80:d7:e6:aa:25:af:96:ee:91:ee:5c:cf:
ef:09:1c:8a:14:c2:32:19:8c:e7:df:dc:12:51:f8:79:0d:ad:
07:6d:cc:78:fe:64:25:10:2f:18:d5:18:2d:1b:1b:f4:c7:4b:
61:6a:d8:a0:d2:28:1e:4e:71:f9:5d:60:7a:64:c0:ef:10:eb:
e7:2d:c4:09:2f:e1:72:1d:d7:f8:87:e6:38:cb:6e:55:2d:e8:
25:1e:97:39:b2:21:51:1f:8d:2a:20:dd:bf:01:d3:c5:16:02:
52:29:76:f0:ad:79:41:01:45:a4:d1:dd:74:80:1c:7d:86:a7:
bc:fb:9a:fb
-----BEGIN CERTIFICATE-----
MIIFGjCCBAKgAwIBAgISAZQljiazaye4EY2ZfAZva84/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVjNmQ0N2I0N2UwNWIxM2QwNThiMWNiNDI1MjlhN2MxODY2
ZGNkZjIwHhcNMjUwMTAyMDU0NzQwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDQzZjg4ZmQyNTViMWI4MzBlYWVkMWQzNDZjMjNhN2Y3NDQwNGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUQxVipUi/C8qxsZrO8h38oFq8wz
wxHv52fKJqstX7jGeZn262mfeY/rs3cOYS2dnk968nMGlGEcq3ivNrT87JQ/6jbp
bW9zJd0ogce06zpkuI8gqSONcloL9eXIoYHdvzQVSEYvY72G+h21e2ZiNGVfj3Dv
55z37omrZEFjNbhIUp6txhGFmnlirYexoqo4tUF/PCgl976eir6MN2AXlcGQWl/N
yHd/2Xs2jAqLWmy5/4v0MLowunnSKH8j7MtSbjcuK54CBD5pWYxUWV8Of+jPdrjx
eiDzpFlDGrDDoBXZ/2E2nMrP1bycaUqhGoIAbyFTjSyu60+KqcAR8TQu8QIDAQAB
o4ICJjCCAiIwHQYDVR0OBBYEFEBD+I/SVbG4MOrtHTRsI6f3RATjMB8GA1UdIwQY
MBaAFOxtR7R+BbE9BYsctCUpp8GGbc3yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN0cxSHRINEZzVDBGaXh5MEpTbW53WVp0emZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8yYTU5MWMtM2M0YS00Mjg4LWJlOTEt
YzM5YWRiOThmNDI5LzEvUUVQNGo5SlZzYmd3NnUwZE5Hd2pwX2RFQk9NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8yYTU5MWMtM2M0YS00Mjg4LWJlOTEtYzM5YWRiOThmNDI5
LzEvN0cxSHRINEZzVDBGaXh5MEpTbW53WVp0emZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQCWNrkMAwD
BAC5F70DBAa5F4AwDQQCAAIwBwMFAyoEJsAwDQYJKoZIhvcNAQELBQADggEBAHJI
F8doiSoV662wgS33mpqvrGUN1KILLiv9W9SWL5GNWnxBV9m3QjxN8d17lFMQvObg
1qr3NzxuUDRPjAwdBvtKVhi1jp+VmlNecvnA3BJWyhBkUYPjXuGM8gPLL+p78fZK
ado9+pvgnoQfE8huz73M52nZnXLimkOjlaQ+i6wCyBuQ9YDX5qolr5buke5cz+8J
HIoUwjIZjOff3BJR+HkNrQdtzHj+ZCUQLxjVGC0bG/THS2Fq2KDSKB5OcfldYHpk
wO8Q6+ctxAkv4XId1/iH5jjLblUt6CUelzmyIVEfjSog3b8B08UWAlIpdvCteUEB
RaTR3XSAHH2Gp7z7mvs=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:57:10 2025 by rpki-client