Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/dQPCUyfRgXI2CJkCt0SpYUsgCvY.roa
File: dQPCUyfRgXI2CJkCt0SpYUsgCvY.roa (raw, json)
Hash identifier: GqkrkB+v/kxjy5/qBpp0Cz+zZPTcGmByplfjUUUfttA=
Subject key identifier: 75:03:C2:53:27:D1:81:72:36:08:99:02:B7:44:A9:61:4B:20:0A:F6
Certificate issuer: /CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Certificate serial: 019426D927FBEBDBFD759514DE3B2D9C1CD3
Authority key identifier: D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/dQPCUyfRgXI2CJkCt0SpYUsgCvY.roa
Signing time: Thu 02 Jan 2025 11:49:13 +0000
ROA not before: Thu 02 Jan 2025 11:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.1.163.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:27:fb:eb:db:fd:75:95:14:de:3b:2d:9c:1c:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d895fa70e3f7df361151d55379d4d9b85dadfd3d
Validity
Not Before: Jan 2 11:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7503c25327d1817236089902b744a9614b200af6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:18:ad:5b:18:ac:27:11:31:00:6c:a4:fa:b3:
a2:ad:86:d2:02:7f:75:b1:7f:b3:85:d3:e2:05:6a:
fb:d3:71:49:57:3f:db:1c:8a:a3:af:39:c6:62:1b:
59:d5:d2:04:23:18:cf:99:76:67:fe:f4:5c:43:cb:
09:2f:a4:c6:25:50:3f:ac:e1:8f:c4:8d:df:82:70:
11:e6:b5:46:2f:fd:4c:f9:55:e1:28:a0:4e:10:b4:
46:d8:28:81:ea:4a:60:77:62:20:5f:18:86:d9:0d:
e3:33:63:8b:27:22:3c:54:88:6f:44:46:e9:05:85:
0a:79:cc:a0:31:5c:62:ba:44:c7:2a:3d:75:56:ca:
51:0d:68:f5:06:f4:ef:60:7b:eb:56:db:63:1c:69:
4c:c0:d7:dc:ff:e0:a2:8a:4d:e3:07:f8:28:86:71:
21:cd:6e:fb:57:6e:8a:64:66:2b:6d:2c:ad:0e:a3:
28:16:81:7a:7d:51:3d:1f:93:d5:4c:b8:d9:b0:2b:
83:bb:ef:14:26:7e:29:1e:a7:f5:37:1a:06:52:11:
5b:51:ab:41:30:f1:81:15:43:a7:2f:78:b0:9d:dc:
5b:f5:0c:b5:93:c3:3d:81:35:ad:b9:23:4f:64:61:
96:a0:52:7c:cb:41:fa:9b:f5:33:ae:c4:b1:9e:9f:
c3:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:03:C2:53:27:D1:81:72:36:08:99:02:B7:44:A9:61:4B:20:0A:F6
X509v3 Authority Key Identifier:
keyid:D8:95:FA:70:E3:F7:DF:36:11:51:D5:53:79:D4:D9:B8:5D:AD:FD:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2JX6cOP33zYRUdVTedTZuF2t_T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/dQPCUyfRgXI2CJkCt0SpYUsgCvY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/70b504-c2d4-4387-9b75-f45b8dbe2f97/1/2JX6cOP33zYRUdVTedTZuF2t_T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.163.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:67:fd:6f:6c:51:41:df:2e:6b:a5:d0:7d:44:73:13:2c:2b:
f1:81:ee:c5:3f:72:77:47:99:c0:e4:c7:f5:48:60:f5:0b:19:
75:44:4f:3c:06:ed:d6:c9:94:1a:55:fe:9b:7c:18:a2:a8:8f:
cc:49:eb:a5:b7:b7:59:1a:cd:6a:e6:cf:77:15:de:d1:8e:8b:
ec:2a:cf:b7:b8:93:ce:05:1c:d4:11:ba:26:1e:86:59:37:c8:
55:61:ca:1d:02:db:90:a6:fc:8a:90:1a:6e:19:a2:2d:c4:c3:
6b:31:e8:af:d8:ba:19:71:d8:7d:e7:d0:a1:f0:9d:ef:e8:7b:
03:29:83:45:5b:d6:12:63:c7:40:f7:45:1d:eb:9d:fd:10:28:
96:eb:02:5a:fb:f9:3c:ee:28:38:32:4e:02:d5:7e:41:28:83:
ca:27:03:04:9a:94:79:2a:3e:92:ee:1f:ca:0d:dc:82:80:ea:
85:1a:a3:75:00:19:48:a6:74:e6:74:01:25:9c:17:a8:09:2d:
89:e3:ff:e3:6c:d3:b2:9d:84:e6:85:71:41:fc:d1:83:88:f7:
dc:d1:7c:f6:08:2a:89:fe:b3:26:b3:4e:75:a4:fd:e4:c6:b4:
f6:70:05:8c:0b:f7:e2:d8:88:7e:b2:ce:7c:11:85:e3:25:01:
20:87:f9:fd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2Sf769v9dZUU3jstnBzTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ4OTVmYTcwZTNmN2RmMzYxMTUxZDU1Mzc5ZDRkOWI4NWRh
ZGZkM2QwHhcNMjUwMTAyMTE0OTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NTAzYzI1MzI3ZDE4MTcyMzYwODk5MDJiNzQ0YTk2MTRiMjAwYWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xitWxisJxExAGyk+rOirYbSAn91
sX+zhdPiBWr703FJVz/bHIqjrznGYhtZ1dIEIxjPmXZn/vRcQ8sJL6TGJVA/rOGP
xI3fgnAR5rVGL/1M+VXhKKBOELRG2CiB6kpgd2IgXxiG2Q3jM2OLJyI8VIhvREbp
BYUKecygMVxiukTHKj11VspRDWj1BvTvYHvrVttjHGlMwNfc/+Ciik3jB/gohnEh
zW77V26KZGYrbSytDqMoFoF6fVE9H5PVTLjZsCuDu+8UJn4pHqf1NxoGUhFbUatB
MPGBFUOnL3iwndxb9Qy1k8M9gTWtuSNPZGGWoFJ8y0H6m/UzrsSxnp/DUwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHUDwlMn0YFyNgiZArdEqWFLIAr2MB8GA1UdIwQY
MBaAFNiV+nDj9982EVHVU3nU2bhdrf09MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMkpYNmNPUDMzellSVWRWVGVkVFp1RjJ0X1QwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83MGI1MDQtYzJkNC00Mzg3LTliNzUt
ZjQ1YjhkYmUyZjk3LzEvZFFQQ1V5ZlJnWEkyQ0prQ3QwU3BZVXNnQ3ZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83MGI1MDQtYzJkNC00Mzg3LTliNzUtZjQ1YjhkYmUyZjk3
LzEvMkpYNmNPUDMzellSVWRWVGVkVFp1RjJ0X1QwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuQGjMA0G
CSqGSIb3DQEBCwUAA4IBAQArZ/1vbFFB3y5rpdB9RHMTLCvxge7FP3J3R5nA5Mf1
SGD1Cxl1RE88Bu3WyZQaVf6bfBiiqI/MSeult7dZGs1q5s93Fd7RjovsKs+3uJPO
BRzUEbomHoZZN8hVYcodAtuQpvyKkBpuGaItxMNrMeiv2LoZcdh959Ch8J3v6HsD
KYNFW9YSY8dA90Ud6539ECiW6wJa+/k87ig4Mk4C1X5BKIPKJwMEmpR5Kj6S7h/K
DdyCgOqFGqN1ABlIpnTmdAElnBeoCS2J4//jbNOynYTmhXFB/NGDiPfc0Xz2CCqJ
/rMms051pP3kxrT2cAWMC/fi2Ih+ss58EYXjJQEgh/n9
-----END CERTIFICATE-----
Generated at Sat Apr 12 02:34:36 2025 by rpki-client