Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/qfZmyz5c0Otzh5FraMbLjQgm1q4.roa
File: qfZmyz5c0Otzh5FraMbLjQgm1q4.roa (raw, json)
Hash identifier: NyL5zhhnHkZIp2wHnybHvHh9Y8Jth+1zfrHIidSODzk=
Subject key identifier: A9:F6:66:CB:3E:5C:D0:EB:73:87:91:6B:68:C6:CB:8D:08:26:D6:AE
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258F027FB7904CF058DCB9821A2E406C
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/qfZmyz5c0Otzh5FraMbLjQgm1q4.roa
Signing time: Thu 02 Jan 2025 05:48:36 +0000
ROA not before: Thu 02 Jan 2025 05:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62386
IP address blocks: 85.187.234.0/23 maxlen: 23
85.187.234.0/24 maxlen: 24
85.187.235.0/24 maxlen: 24
151.237.36.0/22 maxlen: 22
151.237.36.0/24 maxlen: 24
151.237.37.0/24 maxlen: 24
151.237.38.0/24 maxlen: 24
151.237.39.0/24 maxlen: 24
151.237.63.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:02:7f:b7:90:4c:f0:58:dc:b9:82:1a:2e:40:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9f666cb3e5cd0eb7387916b68c6cb8d0826d6ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fb:1b:fe:ef:b9:c5:cb:b9:8f:3d:58:c8:af:
5b:ae:7d:b1:05:4e:b5:0e:3f:1f:bc:f5:5b:67:c0:
57:c0:fb:38:da:c6:bf:ce:f8:35:b9:af:13:d4:f8:
e1:22:2a:86:0f:17:c6:46:dc:e2:e3:0e:9d:34:b4:
c1:0f:01:9a:6b:df:ba:ed:61:a6:fa:68:64:77:4d:
a8:71:3c:de:0a:5a:48:1f:4b:38:51:63:98:17:89:
8e:59:13:75:47:7f:d9:0c:42:ef:62:dd:e2:91:1f:
ac:e7:f4:3c:1f:e0:96:1c:a3:42:5c:04:fb:fb:47:
e8:26:d4:0d:d8:b0:9c:23:e2:dc:5d:95:98:48:26:
15:a9:2a:25:9a:5f:23:96:7b:6b:44:71:4b:fd:3f:
e3:a9:e5:43:cc:d1:7c:f6:00:53:c8:90:a8:88:31:
7b:45:35:92:bb:96:a2:c2:14:53:e1:fa:e9:61:58:
e4:da:d7:0d:e9:97:b4:d9:5f:7c:be:10:41:3c:4d:
ed:dd:30:8d:25:1a:bd:d9:01:b8:c5:0a:77:4b:a5:
16:10:7d:d0:32:7a:03:25:53:ba:ae:95:1a:68:39:
1b:ba:3c:8b:a1:4f:db:29:b1:db:b6:c6:0c:ae:e1:
7a:9e:e5:48:6f:58:85:03:25:63:f0:3e:31:b4:13:
2f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F6:66:CB:3E:5C:D0:EB:73:87:91:6B:68:C6:CB:8D:08:26:D6:AE
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/qfZmyz5c0Otzh5FraMbLjQgm1q4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.234.0/23
151.237.36.0/22
151.237.63.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:49:d0:5d:ae:29:98:01:fe:48:3e:32:7b:b6:a9:d4:24:a6:
41:d7:df:32:dc:ae:d4:24:28:0d:6a:59:f0:41:16:aa:ab:16:
cf:50:d6:ff:76:6d:9d:39:d7:7d:80:81:87:9c:5a:e1:d0:0e:
df:42:15:e9:0a:56:65:87:c6:b0:81:7d:ca:3a:01:10:56:b5:
37:8c:61:d8:6d:fa:32:8a:b5:7b:c1:97:63:22:7b:06:8f:71:
cd:19:57:36:f1:54:bf:4f:a7:06:c3:e9:ac:e8:ae:b6:ac:9d:
ee:9f:5c:f3:b8:ce:8b:c4:10:8b:fd:b5:99:3e:24:12:7f:53:
85:0f:45:99:f0:11:59:0c:55:39:5c:a2:cb:e4:90:36:8c:75:
53:f4:79:9b:7e:70:f8:aa:48:b4:d1:50:25:16:d8:52:93:56:
1d:4d:13:ca:f9:44:50:6c:21:2d:cb:a6:82:b2:d9:02:55:ee:
79:b0:c6:ce:12:a4:fc:de:4b:61:6b:59:e2:ba:ef:73:72:14:
a9:36:b9:ba:5b:49:48:44:45:0f:ff:e7:ee:31:64:47:08:e4:
48:66:92:7f:d4:9a:f3:d2:ad:1e:25:4d:33:c5:66:30:c9:3a:
06:ef:0b:9f:b0:32:68:d8:d9:02:a2:fc:2f:01:a7:56:b3:d6:
7d:bf:3c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:54:36 2025 by rpki-client