Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/QmLqclIeKgJyec7JezomHprMxUI.roa
File: QmLqclIeKgJyec7JezomHprMxUI.roa (raw, json)
Hash identifier: jnGw1aX/bbjBYQipqNzcy1dm9N/v8qMjZ2OnfDvSpes=
Subject key identifier: 42:62:EA:72:52:1E:2A:02:72:79:CE:C9:7B:3A:26:1E:9A:CC:C5:42
Certificate issuer: /CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Certificate serial: 01941FFAB21500A9345CB2BBEDFEC9CA283E
Authority key identifier: 0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/QmLqclIeKgJyec7JezomHprMxUI.roa
Signing time: Wed 01 Jan 2025 03:48:30 +0000
ROA not before: Wed 01 Jan 2025 03:48:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210016
IP address blocks: 188.72.9.0/24 maxlen: 24
188.72.10.0/24 maxlen: 24
188.72.11.0/24 maxlen: 24
188.72.13.0/24 maxlen: 24
188.72.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b2:15:00:a9:34:5c:b2:bb:ed:fe:c9:ca:28:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5140282591f9912f9639ee1412b6d1dcff0861
Validity
Not Before: Jan 1 03:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4262ea72521e2a027279cec97b3a261e9accc542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:11:62:22:09:5d:2d:35:80:de:78:06:9c:04:
d3:c7:1d:ad:0a:12:45:51:bd:93:e6:04:6f:9a:59:
53:1e:69:9e:db:71:d2:28:d2:3c:9b:f3:c5:9c:45:
e2:35:24:60:3e:bc:e7:89:9e:c4:3f:3f:1d:0d:f6:
d6:e8:ee:d3:e7:0a:3f:31:e4:3e:80:6c:59:22:c0:
c6:90:c9:4e:4c:72:1a:c2:8b:a3:50:15:17:1d:92:
c2:7f:ad:dc:d8:eb:32:f0:96:b0:1b:76:10:e7:0d:
c3:6a:ea:68:9f:d2:b1:37:a5:f8:3d:78:50:01:bb:
47:b9:fb:75:4a:57:b9:13:17:0f:8f:34:84:5d:ec:
e8:1a:6b:66:c7:e3:99:00:d1:f0:85:7c:23:38:0b:
d0:9f:c5:97:39:9f:8b:a4:0c:e7:ec:92:c4:e1:51:
8d:b8:4f:a4:63:52:51:2b:6a:24:32:06:74:5a:1c:
ca:48:42:c7:71:9d:1a:b2:5d:01:37:0f:1b:2e:a1:
10:7d:db:57:41:0c:52:77:4b:46:74:56:4e:a6:c4:
06:de:64:65:68:a7:b9:42:db:dc:e6:d9:c8:ad:9b:
15:f9:e2:0d:ff:b3:b1:ae:c9:0d:a2:f0:ab:6d:1b:
6b:72:e2:2f:a2:08:22:6b:b4:a6:a8:e6:ea:10:2b:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:62:EA:72:52:1E:2A:02:72:79:CE:C9:7B:3A:26:1E:9A:CC:C5:42
X509v3 Authority Key Identifier:
keyid:0C:51:40:28:25:91:F9:91:2F:96:39:EE:14:12:B6:D1:DC:FF:08:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFFAKCWR-ZEvljnuFBK20dz_CGE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/QmLqclIeKgJyec7JezomHprMxUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/0554a2-d3d9-4fc4-8ed5-de91469d3772/1/DFFAKCWR-ZEvljnuFBK20dz_CGE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.72.9.0-188.72.11.255
188.72.13.0-188.72.14.255
Signature Algorithm: sha256WithRSAEncryption
7d:18:73:aa:80:d9:c1:02:be:aa:6e:46:ed:21:c8:af:e9:30:
c1:34:41:2e:a2:59:21:10:3e:25:d0:8e:a4:32:f0:bc:3f:59:
59:c4:8a:0b:01:ab:2c:9b:9c:7e:4a:38:78:6d:12:bb:71:81:
09:2f:d2:f3:71:02:98:74:f1:6c:1a:ef:23:34:f1:c1:cc:96:
7e:13:21:2d:d6:1c:77:43:04:53:79:bc:84:d9:be:b4:6d:95:
a4:9a:72:c2:7c:35:cc:f5:13:b5:74:90:ad:80:7b:1b:c5:8e:
a7:77:e4:e4:c1:a8:2a:56:3b:4b:62:c4:f8:c1:9d:14:98:42:
6a:6e:5b:c9:00:1f:10:83:e3:aa:4d:a3:20:7f:a1:96:a0:7b:
35:7e:0c:39:0d:76:66:80:27:ca:f2:ff:e8:68:1c:1e:46:b6:
47:fb:bf:e6:fe:64:cb:d9:78:6c:40:a3:d5:c5:e2:28:aa:d4:
00:67:da:3b:d6:90:a7:40:e5:46:99:4f:a9:0c:52:e3:c0:0c:
3e:1b:e9:98:aa:29:82:e9:82:8c:37:f9:f6:4a:26:25:3d:51:
ac:03:72:00:0a:04:8f:be:7a:38:08:87:c3:34:f3:8c:ab:01:
62:8a:f6:5d:8e:ac:fb:2d:e1:74:c9:89:1d:14:59:43:b3:d8:
eb:1d:2b:f8
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAZQf+rIVAKk0XLK77f7Jyig+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNTE0MDI4MjU5MWY5OTEyZjk2MzllZTE0MTJiNmQxZGNm
ZjA4NjEwHhcNMjUwMTAxMDM0ODMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjYyZWE3MjUyMWUyYTAyNzI3OWNlYzk3YjNhMjYxZTlhY2NjNTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxFiIgldLTWA3ngGnATTxx2tChJF
Ub2T5gRvmllTHmme23HSKNI8m/PFnEXiNSRgPrzniZ7EPz8dDfbW6O7T5wo/MeQ+
gGxZIsDGkMlOTHIawoujUBUXHZLCf63c2Osy8JawG3YQ5w3Daupon9KxN6X4PXhQ
AbtHuft1Sle5ExcPjzSEXezoGmtmx+OZANHwhXwjOAvQn8WXOZ+LpAzn7JLE4VGN
uE+kY1JRK2okMgZ0WhzKSELHcZ0asl0BNw8bLqEQfdtXQQxSd0tGdFZOpsQG3mRl
aKe5Qtvc5tnIrZsV+eIN/7OxrskNovCrbRtrcuIvoggia7SmqObqECvNNQIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFEJi6nJSHioCcnnOyXs6Jh6azMVCMB8GA1UdIwQY
MBaAFAxRQCglkfmRL5Y57hQSttHc/whhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUt
ZGU5MTQ2OWQzNzcyLzEvUW1McWNsSWVLZ0p5ZWM3SmV6b21IcHJNeFVJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8wNTU0YTItZDNkOS00ZmM0LThlZDUtZGU5MTQ2OWQzNzcy
LzEvREZGQUtDV1ItWkV2bGpudUZCSzIwZHpfQ0dFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAATAcMAwDBAC8SAkD
BAK8SAgwDAMEALxIDQMEALxIDjANBgkqhkiG9w0BAQsFAAOCAQEAfRhzqoDZwQK+
qm5G7SHIr+kwwTRBLqJZIRA+JdCOpDLwvD9ZWcSKCwGrLJucfko4eG0Su3GBCS/S
83ECmHTxbBrvIzTxwcyWfhMhLdYcd0MEU3m8hNm+tG2VpJpywnw1zPUTtXSQrYB7
G8WOp3fk5MGoKlY7S2LE+MGdFJhCam5byQAfEIPjqk2jIH+hlqB7NX4MOQ12ZoAn
yvL/6GgcHka2R/u/5v5ky9l4bECj1cXiKKrUAGfaO9aQp0DlRplPqQxS48AMPhvp
mKopgumCjDf59komJT1RrANyAAoEj756OAiHwzTzjKsBYor2XY6s+y3hdMmJHRRZ
Q7PY6x0r+A==
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:44:22 2025 by rpki-client