Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/cqpCBmULlkLpy9cOYPffK00m4qw.roa
File: cqpCBmULlkLpy9cOYPffK00m4qw.roa (raw, json)
Hash identifier: Zda2T2ViIBtlQoTjH9v3jooycQ7wA7bbYyhzAcUzyH0=
Subject key identifier: 72:AA:42:06:65:0B:96:42:E9:CB:D7:0E:60:F7:DF:2B:4D:26:E2:AC
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258F0A2E2263895ED655514EFC704216
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/cqpCBmULlkLpy9cOYPffK00m4qw.roa
Signing time: Thu 02 Jan 2025 05:48:38 +0000
ROA not before: Thu 02 Jan 2025 05:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207691
IP address blocks: 85.187.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:0a:2e:22:63:89:5e:d6:55:51:4e:fc:70:42:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72aa4206650b9642e9cbd70e60f7df2b4d26e2ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:5f:cf:aa:f4:88:42:5e:0b:6e:78:eb:c0:4b:
8c:5a:69:2f:af:b3:71:cc:1c:53:4b:8e:cd:54:3a:
e7:5b:ff:4d:aa:b9:d3:63:42:3f:03:a1:aa:55:f7:
01:d2:c4:c7:f2:0e:a9:c4:79:71:0b:fc:66:bd:a4:
0d:7c:6b:8c:9e:2a:ec:f2:4a:65:ad:a7:4a:f8:18:
f9:36:ee:36:17:d7:8f:47:03:b9:b8:e9:11:37:f7:
0b:95:c0:c2:28:dd:59:51:0e:30:46:82:e1:09:a5:
78:8d:df:78:fa:22:22:7c:7c:28:d3:36:b7:c4:fc:
de:53:05:e2:c3:9c:5c:27:50:28:7e:55:9c:7e:7b:
2b:3a:8b:ea:c3:a0:34:7d:24:b6:cd:c9:12:56:c2:
a6:50:87:a2:44:8f:d7:85:13:59:b9:68:fa:9c:db:
6c:24:54:ae:9c:69:3a:33:a9:1d:22:37:52:dc:63:
d6:69:cb:81:cd:86:ee:60:6e:65:2e:c4:8b:6c:57:
c0:41:d3:db:2a:44:f9:bd:4b:f8:7c:f5:94:ea:90:
1a:14:1a:ba:85:fa:d7:ec:bb:1d:da:27:8a:9b:d8:
58:8d:56:ae:a0:d8:df:22:6c:28:43:21:77:bb:5b:
66:4a:fd:db:18:6c:9e:ee:21:42:6f:96:cc:59:0e:
71:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AA:42:06:65:0B:96:42:E9:CB:D7:0E:60:F7:DF:2B:4D:26:E2:AC
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/cqpCBmULlkLpy9cOYPffK00m4qw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.51.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:0c:39:86:a7:18:bd:d6:55:13:70:12:71:a0:44:b7:01:05:
66:d4:68:14:df:19:f0:b3:50:df:cb:c4:99:7a:80:cd:0a:55:
fa:88:75:11:f5:6b:4c:56:4f:a5:b8:42:53:0c:e2:a3:ac:2e:
d1:6b:1e:9a:88:6e:64:ca:12:7b:e6:81:63:b5:0e:e0:f9:fc:
b5:f2:84:53:36:0b:b1:18:aa:49:4b:de:ae:29:f4:3c:ad:01:
6f:99:d9:6b:80:be:9f:b1:f4:ab:dc:d6:75:cf:a7:58:e3:ef:
53:9a:93:ba:e9:3d:9d:5a:69:37:3a:0f:29:dd:11:2f:ca:8a:
b9:56:1e:d5:40:8b:ab:e6:4b:ef:da:72:02:66:57:ac:da:81:
27:cb:f8:cd:22:d9:3d:99:da:3b:52:2c:f1:cc:e8:8d:f6:a5:
01:cf:0f:7e:f0:76:b7:37:1f:37:68:d3:14:5c:28:5d:7d:42:
eb:31:22:1a:67:46:30:1e:90:5b:49:3f:72:05:d6:4e:15:87:
cf:d7:37:19:74:c4:fd:20:d2:d0:29:8b:b0:82:bc:47:a6:8c:
9f:5c:aa:36:3e:31:f2:fa:9b:d6:24:65:74:d1:50:df:38:30:
87:38:9d:78:c0:af:27:75:c5:c6:17:a2:28:6f:fe:2b:2b:42:
e4:a1:9a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:02:55 2025 by rpki-client