Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Q6cDxTeewGfs_wv6X-rgtvOr4yQ.roa
File: Q6cDxTeewGfs_wv6X-rgtvOr4yQ.roa (raw, json)
Hash identifier: gvgS8T3T6aVXbvi3UFPtlydNW2ujDdJmKVZEJDXsAnc=
Subject key identifier: 43:A7:03:C5:37:9E:C0:67:EC:FF:0B:FA:5F:EA:E0:B6:F3:AB:E3:24
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 019423D713977C0FCECB261FB37C842AC648
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Q6cDxTeewGfs_wv6X-rgtvOr4yQ.roa
Signing time: Wed 01 Jan 2025 21:48:05 +0000
ROA not before: Wed 01 Jan 2025 21:48:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57371
IP address blocks: 185.200.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:13:97:7c:0f:ce:cb:26:1f:b3:7c:84:2a:c6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 1 21:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43a703c5379ec067ecff0bfa5feae0b6f3abe324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e5:82:b9:b9:52:08:a9:ba:c7:39:8e:5c:e7:
db:aa:59:d1:3e:bd:16:9f:94:e3:f7:7f:61:a6:46:
08:50:fe:22:1b:98:0a:b2:c8:15:23:fc:bd:c7:b2:
2e:8b:c6:82:53:87:3f:21:6a:a8:c2:e4:f2:7f:d9:
fa:27:95:d9:0f:d2:a3:52:0d:a5:6e:96:ac:e7:e7:
ac:98:43:7e:53:bb:e4:2b:cb:92:9f:8d:44:24:da:
ba:b0:2f:03:67:9a:e3:3d:aa:e9:1a:44:c1:13:0d:
ef:b1:58:fc:72:3d:a8:8f:07:d9:57:cc:4f:6d:1b:
70:79:1a:c6:c8:0b:b3:05:d0:b2:f9:22:c9:8d:5c:
ac:86:38:3c:5c:eb:58:d2:eb:8b:4a:f1:0d:44:2e:
95:c2:c7:72:84:81:ad:5d:63:20:d3:98:14:ed:32:
77:48:81:55:f9:99:f9:a8:6c:6c:ee:2e:98:53:2b:
10:6a:1c:93:09:09:04:95:46:0a:35:a0:8c:0e:5c:
f8:38:b1:fb:51:68:30:d2:b6:87:51:30:e1:c2:f0:
fc:61:37:54:94:01:b3:0b:c0:56:a7:bc:15:e5:a3:
cb:87:6f:a5:58:03:d0:92:bd:14:2e:da:74:8a:7e:
45:71:21:b0:26:10:fa:7f:dd:cd:51:b7:b8:f7:83:
40:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A7:03:C5:37:9E:C0:67:EC:FF:0B:FA:5F:EA:E0:B6:F3:AB:E3:24
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Q6cDxTeewGfs_wv6X-rgtvOr4yQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.189.0/24
Signature Algorithm: sha256WithRSAEncryption
63:ac:5e:92:1c:40:98:63:02:06:2a:55:2e:17:30:69:27:04:
de:80:6f:b3:e3:7f:4c:c7:89:83:59:44:e9:41:15:36:5e:78:
92:f9:9b:e3:bb:bd:b0:64:e6:3a:a5:7b:e2:7d:14:55:d7:ea:
27:fd:b2:42:da:41:a2:13:75:07:1f:3b:eb:a3:ea:27:96:10:
0c:d4:7d:af:9d:9f:0f:bf:d4:a2:8e:a0:e4:74:a6:3d:0e:ea:
06:29:da:fc:a3:c7:62:e6:66:d6:f6:a2:2d:a3:e8:75:21:14:
da:0c:df:ef:0c:3e:1f:da:04:6c:a9:29:b3:3c:a8:f9:b9:54:
75:b4:28:75:e7:08:09:38:43:1c:30:57:79:8e:52:12:90:dd:
a3:e9:61:e8:2f:cc:bc:f0:df:8d:87:d4:b1:c1:4d:a4:a2:1a:
52:11:71:bb:de:4d:04:f5:90:68:89:7c:eb:ca:fd:04:79:11:
9f:28:59:15:87:c9:85:98:0d:21:65:a8:87:cb:f2:bc:ba:c5:
74:71:9f:fa:26:59:bd:00:19:22:68:06:68:b7:05:81:bd:0b:
ee:17:94:f1:5e:63:3f:23:3a:6b:d2:50:25:46:78:d3:6d:e0:
8d:e4:cc:d6:8e:8e:7e:bc:4e:2e:da:cd:a9:fd:2c:00:ca:8a:
e6:dd:0b:b0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1xOXfA/OyyYfs3yEKsZIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Zjk2MzQ1ZDNmMjJlZGIzOTVkMjQ3ZjdiODZkMmQ3M2U0
YTAwOTEwHhcNMjUwMTAxMjE0ODA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2E3MDNjNTM3OWVjMDY3ZWNmZjBiZmE1ZmVhZTBiNmYzYWJlMzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+WCublSCKm6xzmOXOfbqlnRPr0W
n5Tj939hpkYIUP4iG5gKssgVI/y9x7Iui8aCU4c/IWqowuTyf9n6J5XZD9KjUg2l
bpas5+esmEN+U7vkK8uSn41EJNq6sC8DZ5rjParpGkTBEw3vsVj8cj2ojwfZV8xP
bRtweRrGyAuzBdCy+SLJjVyshjg8XOtY0uuLSvENRC6VwsdyhIGtXWMg05gU7TJ3
SIFV+Zn5qGxs7i6YUysQahyTCQkElUYKNaCMDlz4OLH7UWgw0raHUTDhwvD8YTdU
lAGzC8BWp7wV5aPLh2+lWAPQkr0ULtp0in5FcSGwJhD6f93NUbe494NAnQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEOnA8U3nsBn7P8L+l/q4Lbzq+MkMB8GA1UdIwQY
MBaAFLT5Y0XT8i7bOV0kf3uG0tc+SgCRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQt
NmZjMzQzZDc3Y2QyLzEvUTZjRHhUZWV3R2ZzX3d2Nlgtcmd0dk9yNHlRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZTEyMWQtNzNiMy00MzhhLTgzYzQtNmZjMzQzZDc3Y2Qy
LzEvdFBsalJkUHlMdHM1WFNSX2U0YlMxejVLQUpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuci9MA0G
CSqGSIb3DQEBCwUAA4IBAQBjrF6SHECYYwIGKlUuFzBpJwTegG+z439Mx4mDWUTp
QRU2XniS+Zvju72wZOY6pXvifRRV1+on/bJC2kGiE3UHHzvro+onlhAM1H2vnZ8P
v9SijqDkdKY9DuoGKdr8o8di5mbW9qIto+h1IRTaDN/vDD4f2gRsqSmzPKj5uVR1
tCh15wgJOEMcMFd5jlISkN2j6WHoL8y88N+Nh9SxwU2kohpSEXG73k0E9ZBoiXzr
yv0EeRGfKFkVh8mFmA0hZaiHy/K8usV0cZ/6Jlm9ABkiaAZotwWBvQvuF5TxXmM/
Izpr0lAlRnjTbeCN5MzWjo5+vE4u2s2p/SwAyorm3Quw
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:45:43 2025 by rpki-client