Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Q3YpqgRO1Fh1HhylIgiC8qNR8wA.roa
File: Q3YpqgRO1Fh1HhylIgiC8qNR8wA.roa (raw, json)
Hash identifier: G6SyziaGxbwzscihz84Ka68fsz+4omJsvY+ZX6p29S8=
Subject key identifier: 43:76:29:AA:04:4E:D4:58:75:1E:1C:A5:22:08:82:F2:A3:51:F3:00
Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Certificate serial: 0190A12414017B894ACA1B07EEBE05CF9F63
Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Q3YpqgRO1Fh1HhylIgiC8qNR8wA.roa
Signing time: Thu 11 Jul 2024 09:33:34 +0000
ROA not before: Thu 11 Jul 2024 09:33:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198160
IP address blocks: 185.236.10.0/24 maxlen: 24
185.236.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:a1:24:14:01:7b:89:4a:ca:1b:07:ee:be:05:cf:9f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370
Validity
Not Before: Jul 11 09:33:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=437629aa044ed458751e1ca5220882f2a351f300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0c:91:8d:8e:c4:b4:08:5b:8b:b1:63:8b:bc:
c2:38:f6:fa:be:7f:bb:2a:ab:6f:8f:56:14:29:01:
f7:2e:10:7c:d7:9f:52:f7:47:c4:e7:fb:7b:ee:e3:
98:e1:eb:58:87:71:6c:7c:2c:99:85:ff:fc:ed:62:
38:82:69:fd:a8:d8:40:8e:bd:87:ea:78:c0:71:a3:
24:66:ca:53:af:56:d7:14:95:24:90:7b:3d:f7:39:
a1:60:a7:b8:20:66:1d:1c:c1:3c:05:7e:d6:47:f1:
95:ce:a0:9e:94:c4:e5:f8:ca:52:59:10:e8:32:f3:
56:f1:ac:d1:a2:f0:54:fd:df:15:c8:a2:d0:b4:8d:
20:6e:57:26:2d:94:c2:67:7c:55:31:1a:8e:23:f6:
c3:0f:d5:17:69:4a:4c:f6:87:fe:ae:7d:f1:61:1a:
73:f6:ab:78:6e:59:1c:2a:45:a9:fb:9f:47:42:3b:
85:78:e5:cd:31:f5:fd:69:9d:dd:c0:52:28:84:3a:
d6:35:17:51:69:41:8f:2b:f6:db:ff:b0:fa:b1:93:
e4:0a:26:d2:f9:35:54:cf:a2:68:ee:18:21:b7:9b:
af:1c:ec:78:2e:1c:48:8b:59:34:0b:2b:40:49:ce:
24:af:c3:59:08:11:3b:09:bb:1b:ed:bd:05:44:e2:
52:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:76:29:AA:04:4E:D4:58:75:1E:1C:A5:22:08:82:F2:A3:51:F3:00
X509v3 Authority Key Identifier:
keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/Q3YpqgRO1Fh1HhylIgiC8qNR8wA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.236.10.0/23
Signature Algorithm: sha256WithRSAEncryption
7e:44:91:ef:9d:0d:10:e5:11:3c:3b:1a:a3:0d:00:20:09:20:
40:c1:a7:f0:c6:33:bb:d8:3c:45:39:07:c5:1b:dd:bc:99:50:
06:4b:47:b3:f1:26:38:bb:eb:3d:f0:69:23:6a:13:b4:2f:f8:
6c:d9:da:65:72:85:cf:2a:06:2a:37:6f:23:2c:e3:b8:b4:a9:
71:77:c1:0d:d8:eb:6f:52:19:0d:cb:03:48:54:aa:8d:95:25:
d2:33:9a:de:d8:bd:9b:7b:5a:a5:c9:01:42:8d:c6:5c:c1:dc:
2e:12:93:5b:44:27:bf:f2:07:43:e1:28:8b:2e:56:02:4b:21:
14:8b:20:4d:a3:e8:a3:32:24:38:32:e5:9a:e8:cb:8a:6b:ea:
17:c3:bd:3d:7a:96:70:d8:dd:b1:8c:4c:c6:20:41:8f:85:d7:
eb:64:7f:ee:9b:17:b2:ff:80:e1:4d:95:b8:ee:13:a2:c1:e5:
70:5f:55:ff:07:f8:66:17:cd:49:47:8d:a3:8c:f4:10:20:25:
8a:d9:d9:f3:3e:d1:87:03:c8:26:41:6f:75:f0:27:82:19:6c:
57:a2:7a:41:40:0b:aa:ad:8a:26:a6:4c:e5:1f:84:9f:bd:b3:
60:a0:f6:ab:37:1e:f5:4b:fe:49:62:29:a3:49:d0:34:c8:8c:
34:12:b4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 03:05:59 2025 by rpki-client