Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Q04PHNHkVGOQBGz38l6FMNftIkQ.roa
File: Q04PHNHkVGOQBGz38l6FMNftIkQ.roa (raw, json)
Hash identifier: nC5n+t+3CRmuiFPsyHmK9z3lajFhLTv09cMr+b/qaG8=
Subject key identifier: 43:4E:0F:1C:D1:E4:54:63:90:04:6C:F7:F2:5E:85:30:D7:ED:22:44
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D71C4BA5D09C32A5899CC99FFE2527
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Q04PHNHkVGOQBGz38l6FMNftIkQ.roa
Signing time: Wed 01 Jan 2025 21:48:07 +0000
ROA not before: Wed 01 Jan 2025 21:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201138
IP address blocks: 185.102.137.0/24 maxlen: 24
185.125.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:1c:4b:a5:d0:9c:32:a5:89:9c:c9:9f:fe:25:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=434e0f1cd1e4546390046cf7f25e8530d7ed2244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:bb:33:5f:11:3b:80:17:c8:14:9f:cd:93:34:
2f:92:39:1e:bc:a8:68:64:c7:a5:47:b4:99:16:1d:
d9:c0:dd:6f:11:ee:f9:80:fc:f0:fd:1d:1b:aa:3f:
02:8c:15:a6:f0:fb:11:3d:08:b2:eb:46:10:b9:7f:
10:78:fd:26:a5:42:7a:fc:99:d0:2d:a1:83:e9:41:
5e:93:01:33:37:bc:97:45:36:94:fb:65:5c:9d:11:
f2:23:23:81:42:88:ef:b0:1c:03:0f:8e:a9:4e:53:
8e:0a:09:19:b0:a1:6a:31:b5:bf:fa:fe:7b:19:dc:
ca:66:76:a0:e3:f0:cc:fe:32:0c:8d:59:53:26:0b:
28:10:11:fd:a7:9c:ec:1c:7e:14:54:a8:88:00:57:
45:f4:27:f6:6c:ba:8b:b3:a0:2a:89:66:99:46:41:
9b:b9:de:11:87:f1:9b:c0:1d:d9:f2:f0:fe:f9:74:
94:67:b3:8b:16:2c:2b:85:ad:6e:9d:1e:d8:3c:15:
5e:1c:6f:e4:35:17:28:a5:5f:c4:ca:54:11:2b:7d:
c4:d5:45:d4:c5:0c:57:e5:d0:71:fa:f8:76:6d:b1:
ce:be:eb:5a:43:d1:9c:ed:92:a0:e6:ae:db:79:29:
75:8d:b0:b3:b4:16:2e:4b:d0:b7:b2:e2:aa:5e:76:
53:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4E:0F:1C:D1:E4:54:63:90:04:6C:F7:F2:5E:85:30:D7:ED:22:44
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Q04PHNHkVGOQBGz38l6FMNftIkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.102.137.0/24
185.125.229.0/24
Signature Algorithm: sha256WithRSAEncryption
95:1c:71:5a:b7:c8:ff:65:e4:14:ad:13:ac:3b:8e:b3:48:80:
56:db:5e:bc:c5:d3:56:51:b2:eb:7d:4b:23:76:0a:48:32:49:
da:e3:61:73:06:4e:ad:9c:83:9f:f6:53:dd:d9:46:c3:91:4d:
78:94:8d:fe:7e:52:f8:2b:e7:92:1c:41:45:c1:eb:74:6c:46:
d2:b4:e4:17:54:d0:04:ae:ae:8f:44:41:de:71:8d:2e:d1:88:
a5:71:a1:5a:c4:14:5c:1c:1a:6b:28:d9:71:92:9a:c6:46:2d:
2a:5f:70:14:1a:fe:71:53:3c:f1:a4:65:fc:df:21:3a:65:eb:
1a:5e:4d:69:bb:6c:91:83:be:c4:56:f1:bf:d4:c4:88:3f:81:
ba:cc:68:83:34:9a:68:0c:bc:42:1c:31:33:81:c2:40:42:fc:
a9:fb:c9:70:c1:f3:16:b3:49:ec:77:b9:4d:4b:d2:b1:6d:cc:
ef:0f:1a:4a:3b:81:b4:f6:1a:47:46:eb:fb:a2:e7:af:74:a6:
f1:92:b0:d2:30:5e:ac:e6:e2:b9:05:8d:3f:39:98:d1:bb:ed:
a0:34:20:1e:39:54:4f:f7:e9:93:19:7b:63:f1:53:fd:01:73:
22:aa:f5:ec:b4:ce:b8:73:66:9c:18:cd:af:a5:31:b9:2d:73:
44:ea:b5:3b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQj1xxLpdCcMqWJnMmf/iUnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjUwMTAxMjE0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzRlMGYxY2QxZTQ1NDYzOTAwNDZjZjdmMjVlODUzMGQ3ZWQyMjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrszXxE7gBfIFJ/NkzQvkjkevKho
ZMelR7SZFh3ZwN1vEe75gPzw/R0bqj8CjBWm8PsRPQiy60YQuX8QeP0mpUJ6/JnQ
LaGD6UFekwEzN7yXRTaU+2VcnRHyIyOBQojvsBwDD46pTlOOCgkZsKFqMbW/+v57
GdzKZnag4/DM/jIMjVlTJgsoEBH9p5zsHH4UVKiIAFdF9Cf2bLqLs6AqiWaZRkGb
ud4Rh/GbwB3Z8vD++XSUZ7OLFiwrha1unR7YPBVeHG/kNRcopV/EylQRK33E1UXU
xQxX5dBx+vh2bbHOvutaQ9Gc7ZKg5q7beSl1jbCztBYuS9C3suKqXnZTtwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFENODxzR5FRjkARs9/JehTDX7SJEMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvUTA0UEhOSGtWR09RQkd6MzhsNkZNTmZ0SWtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuWaJAwQA
uX3lMA0GCSqGSIb3DQEBCwUAA4IBAQCVHHFat8j/ZeQUrROsO46zSIBW2168xdNW
UbLrfUsjdgpIMkna42FzBk6tnIOf9lPd2UbDkU14lI3+flL4K+eSHEFFwet0bEbS
tOQXVNAErq6PREHecY0u0YilcaFaxBRcHBprKNlxkprGRi0qX3AUGv5xUzzxpGX8
3yE6ZesaXk1pu2yRg77EVvG/1MSIP4G6zGiDNJpoDLxCHDEzgcJAQvyp+8lwwfMW
s0nsd7lNS9KxbczvDxpKO4G09hpHRuv7ouevdKbxkrDSMF6s5uK5BY0/OZjRu+2g
NCAeOVRP9+mTGXtj8VP9AXMiqvXstM64c2acGM2vpTG5LXNE6rU7
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:20 2025 by rpki-client