Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/qp2CFB-rlp7yaFJZ3zaiO0IRBRQ.roa
File: qp2CFB-rlp7yaFJZ3zaiO0IRBRQ.roa (raw, json)
Hash identifier: 7nVbbD0R/AHoLBApFW8ukkReUjJD75xOW37QxM+Azc4=
Subject key identifier: AA:9D:82:14:1F:AB:96:9E:F2:68:52:59:DF:36:A2:3B:42:11:05:14
Certificate issuer: /CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Certificate serial: 019422FBA9964D076FACA711411444117127
Authority key identifier: B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/qp2CFB-rlp7yaFJZ3zaiO0IRBRQ.roa
Signing time: Wed 01 Jan 2025 17:48:25 +0000
ROA not before: Wed 01 Jan 2025 17:48:25 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 185.100.1.0/24 maxlen: 24
185.100.2.0/24 maxlen: 24
217.30.89.0/24 maxlen: 24
217.30.90.0/24 maxlen: 24
2a10:eec0:d::/48 maxlen: 48
2a10:eec0:e::/47 maxlen: 47
2a10:eec0:10::/44 maxlen: 44
2a10:eec0:20::/43 maxlen: 43
2a10:eec0:40::/42 maxlen: 42
2a10:eec0:80::/41 maxlen: 41
2a10:eec0:100::/40 maxlen: 40
2a10:eec0:200::/39 maxlen: 39
2a10:eec0:400::/38 maxlen: 38
2a10:eec0:800::/37 maxlen: 37
2a10:eec0:1000::/36 maxlen: 36
2a10:eec0:2000::/35 maxlen: 35
2a10:eec0:4000::/34 maxlen: 34
2a10:eec0:8000::/33 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:a9:96:4d:07:6f:ac:a7:11:41:14:44:11:71:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4380b9b8c070457ed54bc45d12dddd244e06d52
Validity
Not Before: Jan 1 17:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa9d82141fab969ef2685259df36a23b42110514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2a:8e:b3:00:9f:88:10:3f:e8:44:fe:5c:84:
25:34:41:47:d6:56:3f:ea:3c:3e:75:6e:cb:57:f4:
0d:36:65:00:e8:b7:4e:3c:68:83:e1:5a:59:cb:6b:
d2:ca:47:52:82:2e:bd:9b:41:4c:19:56:0a:ab:2f:
5c:26:b6:b8:0f:94:9a:70:78:41:0e:20:ad:36:70:
9a:5a:45:ee:83:b7:1b:d7:78:9c:12:82:4a:e7:60:
9d:2a:f1:3a:62:bc:43:e5:bf:2f:75:38:be:f8:60:
fb:c1:be:ea:b9:a1:e7:25:e7:4a:8e:b2:4c:dd:66:
45:51:06:e4:40:f2:f6:39:e6:a5:fb:8d:92:5c:58:
f5:46:e5:4b:3c:18:f4:39:a0:8d:e0:f4:76:59:61:
8a:21:c3:4c:e9:e3:df:2e:80:54:e8:01:a6:db:1d:
d4:a0:7d:9e:9a:96:88:c1:ad:55:fe:ec:c6:65:d7:
12:cd:ff:d1:32:94:f7:d9:78:c5:e0:25:ba:93:20:
26:25:26:1d:ba:f4:fd:03:c9:50:7a:48:e5:95:bd:
85:90:4f:0e:24:e8:d1:ae:c6:84:15:ed:8b:c9:20:
ac:66:98:e6:9b:90:d9:90:07:72:99:d8:d4:1e:0a:
c2:ea:e9:30:2b:05:9e:ea:2a:f1:e4:c2:9e:a3:a5:
b0:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9D:82:14:1F:AB:96:9E:F2:68:52:59:DF:36:A2:3B:42:11:05:14
X509v3 Authority Key Identifier:
keyid:B4:38:0B:9B:8C:07:04:57:ED:54:BC:45:D1:2D:DD:D2:44:E0:6D:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDgLm4wHBFftVLxF0S3d0kTgbVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/qp2CFB-rlp7yaFJZ3zaiO0IRBRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/bc92e6-c8ee-48f0-ae7f-36ccb5a06195/1/tDgLm4wHBFftVLxF0S3d0kTgbVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.100.1.0-185.100.2.255
217.30.89.0-217.30.90.255
IPv6:
2a10:eec0:d::-2a10:eec0:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
6f:08:dc:29:89:50:fd:20:f6:54:71:61:84:c8:35:24:c8:c6:
5c:ac:09:07:ef:89:1f:a2:c4:51:82:dd:2e:ce:8b:1a:24:b7:
24:58:1e:b5:ad:33:eb:55:b1:ec:65:e4:c3:ce:e4:f6:a7:34:
1c:59:aa:bc:bb:22:37:3a:dd:3d:81:c0:e5:c0:d2:7e:59:58:
f8:2c:9e:1c:c0:bd:28:92:8c:80:18:53:91:81:79:fc:e6:d4:
0f:e9:a1:4a:7b:50:e9:85:d2:0c:39:48:7f:78:ca:54:75:3d:
a5:71:b2:7d:98:3a:90:7b:8b:43:d4:1c:b1:0f:9f:45:cd:84:
a0:2a:6b:0f:05:f6:90:7f:60:1d:2f:59:9c:e0:3a:55:7c:84:
9e:b2:d5:9b:39:23:87:18:0c:18:72:43:08:b4:72:33:2e:93:
38:28:b3:a6:c8:95:e5:e7:6d:eb:79:e6:fd:d9:a7:d3:b0:c1:
23:f4:2b:55:02:fb:41:4a:75:d6:80:37:63:ae:66:f8:8b:b2:
31:ff:08:a4:3a:af:f4:f8:19:e9:53:79:62:30:81:bf:30:51:
b5:14:64:ef:4b:3f:b3:27:9f:73:c7:00:d5:ae:5a:f8:b2:e4:
3e:2b:c3:a0:6c:03:eb:60:ca:3d:f1:7e:3e:65:66:eb:8e:ca:
9f:e5:01:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:20:31 2025 by rpki-client