Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/cQNCKEPPhAFzmHj-XbDsRfptwBU.roa
File: cQNCKEPPhAFzmHj-XbDsRfptwBU.roa (raw, json)
Hash identifier: ymcXQ0jfpJoz4wb2MWPQfmWBhQPG8KLXmWx/brPfkUI=
Subject key identifier: 71:03:42:28:43:CF:84:01:73:98:78:FE:5D:B0:EC:45:FA:6D:C0:15
Certificate issuer: /CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Certificate serial: 01942067CD7D9C2016A0298872FA1245B115
Authority key identifier: BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/cQNCKEPPhAFzmHj-XbDsRfptwBU.roa
Signing time: Wed 01 Jan 2025 05:47:41 +0000
ROA not before: Wed 01 Jan 2025 05:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30722
IP address blocks: 185.82.224.0/22 maxlen: 22
2a05:9540::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:cd:7d:9c:20:16:a0:29:88:72:fa:12:45:b1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfd09a87743817c56f8088007a5746eb69ff2e30
Validity
Not Before: Jan 1 05:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7103422843cf8401739878fe5db0ec45fa6dc015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:bb:00:0f:60:31:26:8e:be:59:d9:2e:d1:
a7:96:67:80:3f:6c:f9:f6:13:f8:6e:eb:47:5b:ce:
75:6c:d9:8e:97:ab:1e:e8:3a:42:09:f5:1e:fd:f7:
ec:02:66:6b:7f:2c:5d:96:5f:c9:96:d6:ba:ed:de:
14:b7:9a:25:b2:2d:a6:5d:a4:d3:b6:03:36:c6:f3:
4d:82:4f:88:c7:eb:9b:d9:a3:29:cd:1f:68:42:58:
fa:fb:62:71:1d:46:e3:79:f9:86:f4:94:af:a5:76:
78:d4:d8:bc:06:8c:dd:ff:56:c1:fc:98:f1:ba:2b:
c9:68:e6:f5:ec:ad:41:3f:54:a2:eb:89:b4:ad:ff:
60:08:1d:df:31:b5:cf:53:94:6a:31:44:f9:1a:3c:
61:f2:9c:d5:b3:59:9d:91:0f:70:c9:c3:b5:73:52:
f5:70:a4:7f:8e:c1:ad:a6:27:69:a6:17:59:94:7d:
15:2b:ff:31:30:d0:57:63:bb:d8:64:c2:0c:f7:87:
14:07:85:29:1f:be:e9:70:8c:0e:e4:40:e5:21:35:
ae:b8:e0:e3:50:09:38:9d:d8:2b:8d:32:63:43:d3:
95:db:d1:8f:d6:40:46:45:98:29:77:19:42:02:d5:
b8:73:ce:d3:cd:7b:db:b1:0d:60:da:2f:62:68:34:
4c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:03:42:28:43:CF:84:01:73:98:78:FE:5D:B0:EC:45:FA:6D:C0:15
X509v3 Authority Key Identifier:
keyid:BF:D0:9A:87:74:38:17:C5:6F:80:88:00:7A:57:46:EB:69:FF:2E:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v9Cah3Q4F8VvgIgAeldG62n_LjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/cQNCKEPPhAFzmHj-XbDsRfptwBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/092570-512a-44fa-a4fe-dbca8c31ebc8/1/v9Cah3Q4F8VvgIgAeldG62n_LjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.224.0/22
IPv6:
2a05:9540::/29
Signature Algorithm: sha256WithRSAEncryption
6f:71:71:9f:40:72:a4:97:11:03:75:83:37:f6:7e:bc:94:b7:
c2:b3:42:df:5f:22:2f:08:f6:18:e9:9c:8b:1f:f1:4f:e1:cc:
05:b6:d2:10:b4:47:2a:5e:9a:74:2d:64:17:56:c6:cd:2b:fd:
ae:95:b6:db:2f:bc:01:25:5c:22:a5:9f:95:38:d6:8a:54:9a:
a4:16:e5:0d:dc:19:02:c8:f2:cf:5c:14:3c:8e:ce:7f:00:2f:
dc:40:41:f3:e6:07:d3:fe:fa:8b:6b:08:35:cf:95:a4:ab:9c:
f3:34:ad:b8:1a:bc:26:1b:fa:40:96:38:65:c9:10:d7:c2:61:
83:57:24:38:13:b7:de:12:bb:88:90:c2:89:1f:b3:81:c9:83:
c1:56:0c:d5:e9:65:1d:87:11:e5:10:b9:a0:0e:56:d6:40:86:
45:56:7a:7e:d9:63:9f:72:d2:f8:ce:65:d8:aa:09:0b:66:77:
c0:03:21:bd:d3:8d:39:df:d6:a5:91:f6:eb:c3:8d:97:f1:af:
b3:f3:8d:1a:67:f0:f4:a9:fd:b9:ee:85:b1:db:ed:b2:6b:15:
a6:21:46:f1:ac:01:5e:01:62:1a:bb:3c:64:6b:ab:29:6f:48:
97:55:f9:e3:5d:4c:20:e4:5f:2f:20:2e:dc:d0:eb:a3:03:b5:
bd:7d:e7:8f
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQgZ819nCAWoCmIcvoSRbEVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZDA5YTg3NzQzODE3YzU2ZjgwODgwMDdhNTc0NmViNjlm
ZjJlMzAwHhcNMjUwMTAxMDU0NzQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTAzNDIyODQzY2Y4NDAxNzM5ODc4ZmU1ZGIwZWM0NWZhNmRjMDE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDK7AA9gMSaOvlnZLtGnlmeAP2z5
9hP4butHW851bNmOl6se6DpCCfUe/ffsAmZrfyxdll/Jlta67d4Ut5olsi2mXaTT
tgM2xvNNgk+Ix+ub2aMpzR9oQlj6+2JxHUbjefmG9JSvpXZ41Ni8Bozd/1bB/Jjx
uivJaOb17K1BP1Si64m0rf9gCB3fMbXPU5RqMUT5Gjxh8pzVs1mdkQ9wycO1c1L1
cKR/jsGtpidpphdZlH0VK/8xMNBXY7vYZMIM94cUB4UpH77pcIwO5EDlITWuuODj
UAk4ndgrjTJjQ9OV29GP1kBGRZgpdxlCAtW4c87TzXvbsQ1g2i9iaDRMqwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFHEDQihDz4QBc5h4/l2w7EX6bcAVMB8GA1UdIwQY
MBaAFL/Qmod0OBfFb4CIAHpXRutp/y4wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjlDYWgzUTRGOFZ2Z0lnQWVsZEc2Mm5fTGpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi8wOTI1NzAtNTEyYS00NGZhLWE0ZmUt
ZGJjYThjMzFlYmM4LzEvY1FOQ0tFUFBoQUZ6bUhqLVhiRHNSZnB0d0JVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi8wOTI1NzAtNTEyYS00NGZhLWE0ZmUtZGJjYThjMzFlYmM4
LzEvdjlDYWgzUTRGOFZ2Z0lnQWVsZEc2Mm5fTGpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVLgMA0E
AgACMAcDBQMqBZVAMA0GCSqGSIb3DQEBCwUAA4IBAQBvcXGfQHKklxEDdYM39n68
lLfCs0LfXyIvCPYY6ZyLH/FP4cwFttIQtEcqXpp0LWQXVsbNK/2ulbbbL7wBJVwi
pZ+VONaKVJqkFuUN3BkCyPLPXBQ8js5/AC/cQEHz5gfT/vqLawg1z5Wkq5zzNK24
GrwmG/pAljhlyRDXwmGDVyQ4E7feEruIkMKJH7OByYPBVgzV6WUdhxHlELmgDlbW
QIZFVnp+2WOfctL4zmXYqgkLZnfAAyG9040539alkfbrw42X8a+z840aZ/D0qf25
7oWx2+2yaxWmIUbxrAFeAWIauzxka6spb0iXVfnjXUwg5F8vIC7c0OujA7W9feeP
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:05:58 2025 by rpki-client