Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/GQoZ4pQGFFvUB7jxlMg3uA-2HoI.roa
File: GQoZ4pQGFFvUB7jxlMg3uA-2HoI.roa (raw, json)
Hash identifier: JKfsYMUnPWxZ+hnIELajWpHydkFj3Gv1UtrfFLWfQLI=
Subject key identifier: 19:0A:19:E2:94:06:14:5B:D4:07:B8:F1:94:C8:37:B8:0F:B6:1E:82
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019427B56C185FBE13FCEF557F2153732C86
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/GQoZ4pQGFFvUB7jxlMg3uA-2HoI.roa
Signing time: Thu 02 Jan 2025 15:49:48 +0000
ROA not before: Thu 02 Jan 2025 15:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202984
IP address blocks: 185.39.205.0/24 maxlen: 24
2a09:e2c0::/30 maxlen: 30
2a09:e2c4::/30 maxlen: 30
2a10:4107::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:6c:18:5f:be:13:fc:ef:55:7f:21:53:73:2c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jan 2 15:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=190a19e29406145bd407b8f194c837b80fb61e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:78:65:74:2f:fc:47:95:16:45:93:52:f1:0d:
99:3d:77:6c:ce:40:a9:f4:c2:33:a6:a5:8f:7a:79:
8f:94:ba:ab:70:a2:2f:82:da:28:4b:74:81:19:1a:
7d:08:84:b3:05:34:eb:8b:3f:82:e9:dd:ab:e8:8e:
b1:b4:c3:53:8e:65:cf:1a:4c:12:ba:4c:9b:60:46:
d5:5e:7f:11:82:99:dc:d6:c4:f3:50:85:f4:c6:89:
1a:03:41:c5:70:c9:15:86:f2:c5:46:c3:bb:2c:5c:
85:34:7b:ee:68:3e:fe:47:60:bc:88:0e:64:3f:a6:
6d:a6:a2:16:dc:d0:d5:f9:50:a6:8a:b2:db:99:d8:
14:23:1e:0c:ce:5a:ce:76:56:a9:19:d2:57:fd:fb:
80:f9:06:de:1c:28:0b:34:00:88:aa:b4:56:ac:5c:
9b:21:7e:3c:1c:17:e0:cb:fc:d2:1c:5f:e4:e3:ef:
c0:2f:43:d6:24:ae:bb:04:b6:a0:6f:83:0c:8d:c7:
6d:2b:a3:33:01:82:ac:ae:17:26:81:58:c4:55:d1:
ee:8f:9a:76:f2:98:7d:ca:4e:30:7c:81:2e:9a:d0:
fc:45:39:f5:5e:12:06:ba:e5:b6:0b:40:02:02:47:
39:5f:2c:d7:2d:cb:a3:07:88:65:24:37:b2:cf:8d:
61:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0A:19:E2:94:06:14:5B:D4:07:B8:F1:94:C8:37:B8:0F:B6:1E:82
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/GQoZ4pQGFFvUB7jxlMg3uA-2HoI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.205.0/24
IPv6:
2a09:e2c0::/29
2a10:4107::/32
Signature Algorithm: sha256WithRSAEncryption
be:a4:c3:cc:35:4b:6c:e7:e5:c2:60:92:d9:d3:0b:fe:1a:12:
a0:64:0f:2a:80:c2:79:3c:0e:9f:21:0e:c4:eb:e4:36:0e:96:
46:19:a4:0a:a2:33:ca:7c:12:a0:fd:76:8d:c8:02:31:2b:80:
dd:5e:ca:9d:3a:ae:bb:bc:34:f6:1e:3e:44:73:b9:1a:87:3e:
61:04:c5:92:1b:da:87:12:84:6f:65:ea:de:b2:c1:b3:54:2e:
44:0c:ec:bf:9a:dd:e5:ae:20:38:9a:3a:fd:fe:35:35:70:0f:
b4:9c:bf:b4:f2:8f:7f:a2:72:20:5c:fc:c6:9f:d6:41:1f:e4:
c1:e2:55:19:7a:71:83:24:2a:c3:19:96:0e:76:f2:62:0d:d6:
85:a1:3f:c3:5f:27:8b:f9:b1:fe:b2:ef:ce:ba:87:48:87:11:
12:2d:a6:b0:3e:af:34:27:3c:59:98:40:ad:79:29:16:b8:78:
32:4c:7e:43:46:09:88:c5:d7:7b:b4:93:21:4c:50:65:0f:6d:
c4:6c:cf:87:23:85:97:7a:54:aa:a4:26:09:8d:bf:ae:7c:9a:
48:20:f0:d7:fa:98:88:2e:1e:32:2b:5e:b8:56:5a:bf:c1:55:
b8:6c:9a:f0:f9:81:02:6a:8a:d2:3b:ab:f6:ff:a6:ca:34:25:
23:f9:61:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 06:07:46 2025 by rpki-client