Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/133c6c-46ce-4447-8b93-15bb10dddffb/1/CQERarp6ssFZK2GiBiypwJw-MEM.roa
File: CQERarp6ssFZK2GiBiypwJw-MEM.roa (raw, json)
Hash identifier: JQhmyg/+ilyVgogzTsLW71G2p29hB9jSg4w6KyZ6lx4=
Subject key identifier: 09:01:11:6A:BA:7A:B2:C1:59:2B:61:A2:06:2C:A9:C0:9C:3E:30:43
Certificate issuer: /CN=e84edd1dca36afb77ff89e9ae858110ab313894a
Certificate serial: 018571FA0263F81808BF32A44A193CDF9360
Authority key identifier: E8:4E:DD:1D:CA:36:AF:B7:7F:F8:9E:9A:E8:58:11:0A:B3:13:89:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E7dHco2r7d_-J6a6FgRCrMTiUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/133c6c-46ce-4447-8b93-15bb10dddffb/1/CQERarp6ssFZK2GiBiypwJw-MEM.roa
Signing time: Mon 02 Jan 2023 10:14:48 +0000
ROA not before: Mon 02 Jan 2023 10:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48504
IP address blocks: 185.117.36.0/22 maxlen: 24
2a04:b440::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:02:63:f8:18:08:bf:32:a4:4a:19:3c:df:93:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e84edd1dca36afb77ff89e9ae858110ab313894a
Validity
Not Before: Jan 2 10:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0901116aba7ab2c1592b61a2062ca9c09c3e3043
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3a:c2:47:9a:cd:4d:ec:0f:dc:29:a9:84:b8:
a7:06:ac:fc:f5:dc:ff:80:46:d4:12:5c:54:b6:1e:
a7:74:1b:2d:04:47:bb:20:d5:9f:59:e2:09:9e:43:
cf:5b:18:31:da:5b:50:00:c4:29:32:1a:8b:d4:9f:
70:30:36:fc:bd:df:41:3f:da:b0:b0:ba:a1:ee:18:
b9:6f:96:22:16:7d:90:fb:24:b9:c3:f6:7e:07:ea:
56:93:18:68:f3:cf:4d:93:5b:52:a3:52:91:d0:fa:
54:1f:e8:44:9d:91:e3:21:65:b2:cf:0d:cb:91:33:
11:67:32:33:da:1a:b1:9d:74:e6:7b:e7:fd:b0:c6:
05:20:4f:3a:00:6b:db:e1:6d:ed:83:dd:d1:ba:77:
bf:d7:dd:58:05:6f:59:af:93:c9:af:cb:8d:1c:0e:
59:00:bf:2a:9c:5d:92:85:f3:0d:e8:be:a1:64:31:
de:b6:98:27:c2:46:c1:e5:41:6a:e7:a0:44:cd:db:
75:83:cb:7f:e6:91:05:39:9c:38:69:be:5e:96:bc:
79:a0:11:66:da:3d:40:b0:78:39:51:a8:e6:38:f4:
8d:76:b8:01:9a:35:21:74:3e:56:dc:5c:fb:cd:db:
6a:37:ad:59:a2:92:a6:c8:15:11:99:9b:21:45:a9:
70:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:01:11:6A:BA:7A:B2:C1:59:2B:61:A2:06:2C:A9:C0:9C:3E:30:43
X509v3 Authority Key Identifier:
keyid:E8:4E:DD:1D:CA:36:AF:B7:7F:F8:9E:9A:E8:58:11:0A:B3:13:89:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E7dHco2r7d_-J6a6FgRCrMTiUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/133c6c-46ce-4447-8b93-15bb10dddffb/1/CQERarp6ssFZK2GiBiypwJw-MEM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/133c6c-46ce-4447-8b93-15bb10dddffb/1/6E7dHco2r7d_-J6a6FgRCrMTiUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.117.36.0/22
IPv6:
2a04:b440::/29
Signature Algorithm: sha256WithRSAEncryption
5e:53:4f:00:61:e8:62:bc:fd:59:67:c4:96:7f:a7:f0:b0:41:
5f:f6:08:b8:ee:a6:38:d1:9c:02:e2:03:c0:1d:bc:f3:8f:d8:
a9:30:66:ad:c3:88:ff:0d:1b:63:8f:94:65:85:15:ea:a6:26:
5f:fc:08:66:37:0b:68:0d:c8:90:58:44:34:b5:0f:b1:02:b7:
da:b4:c4:ff:79:4e:b2:4f:87:93:a5:6b:1d:8c:2b:27:46:bb:
e4:41:6f:84:ae:82:66:4e:ab:76:a8:e7:c1:f5:77:ad:16:20:
14:76:9a:5c:d7:2b:a0:bc:0a:0c:86:6b:b3:28:15:8a:fd:e1:
21:ed:6d:d2:be:6a:89:36:e0:92:53:c8:a6:4d:40:48:2d:b7:
5f:f4:15:8b:e1:48:49:40:ef:04:74:bb:80:7a:f1:1d:dd:19:
e6:fe:0f:be:c8:e7:81:39:c1:2a:81:89:a5:47:6e:59:ef:62:
33:4a:85:2c:d9:cc:2c:2f:f6:dc:90:15:ee:f5:00:6b:a0:e5:
b9:5b:c4:6d:59:c4:e2:5c:14:af:2d:e9:74:fd:aa:3b:82:65:
48:13:bb:20:31:1a:c7:e4:5f:74:ff:c8:76:4c:5d:1a:2c:00:
9b:ca:69:36:83:a6:a1:c8:96:db:e4:6f:f8:78:27:91:74:97:
23:80:10:1d
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYVx+gJj+BgIvzKkShk835NgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NGVkZDFkY2EzNmFmYjc3ZmY4OWU5YWU4NTgxMTBhYjMx
Mzg5NGEwHhcNMjMwMTAyMTAxNDQ4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTAxMTE2YWJhN2FiMmMxNTkyYjYxYTIwNjJjYTljMDljM2UzMDQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTrCR5rNTewP3CmphLinBqz89dz/
gEbUElxUth6ndBstBEe7INWfWeIJnkPPWxgx2ltQAMQpMhqL1J9wMDb8vd9BP9qw
sLqh7hi5b5YiFn2Q+yS5w/Z+B+pWkxho889Nk1tSo1KR0PpUH+hEnZHjIWWyzw3L
kTMRZzIz2hqxnXTme+f9sMYFIE86AGvb4W3tg93Rune/191YBW9Zr5PJr8uNHA5Z
AL8qnF2ShfMN6L6hZDHetpgnwkbB5UFq56BEzdt1g8t/5pEFOZw4ab5elrx5oBFm
2j1AsHg5UajmOPSNdrgBmjUhdD5W3Fz7zdtqN61ZopKmyBURmZshRalwmQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFAkBEWq6erLBWSthogYsqcCcPjBDMB8GA1UdIwQY
MBaAFOhO3R3KNq+3f/iemuhYEQqzE4lKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkU3ZEhjbzJyN2RfLUo2YTZGZ1JDck1UaVVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8xMzNjNmMtNDZjZS00NDQ3LThiOTMt
MTViYjEwZGRkZmZiLzEvQ1FFUmFycDZzc0ZaSzJHaUJpeXB3SnctTUVNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8xMzNjNmMtNDZjZS00NDQ3LThiOTMtMTViYjEwZGRkZmZi
LzEvNkU3ZEhjbzJyN2RfLUo2YTZGZ1JDck1UaVVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuXUkMA0E
AgACMAcDBQMqBLRAMA0GCSqGSIb3DQEBCwUAA4IBAQBeU08AYehivP1ZZ8SWf6fw
sEFf9gi47qY40ZwC4gPAHbzzj9ipMGatw4j/DRtjj5RlhRXqpiZf/AhmNwtoDciQ
WEQ0tQ+xArfatMT/eU6yT4eTpWsdjCsnRrvkQW+EroJmTqt2qOfB9XetFiAUdppc
1yugvAoMhmuzKBWK/eEh7W3SvmqJNuCSU8imTUBILbdf9BWL4UhJQO8EdLuAevEd
3Rnm/g++yOeBOcEqgYmlR25Z72IzSoUs2cwsL/bckBXu9QBroOW5W8RtWcTiXBSv
Lel0/ao7gmVIE7sgMRrH5F90/8h2TF0aLACbymk2g6ahyJbb5G/4eCeRdJcjgBAd
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:14:39 2025 by rpki-client