Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/qE5CKR1beI5QzGXctw8hwUZF3kQ.roa
File: qE5CKR1beI5QzGXctw8hwUZF3kQ.roa (raw, json)
Hash identifier: GJQ9ToPtMxv6IDjV2YJ/S2be8eseM+f65LcvwP6vzp0=
Subject key identifier: A8:4E:42:29:1D:5B:78:8E:50:CC:65:DC:B7:0F:21:C1:46:45:DE:44
Certificate issuer: /CN=e964d2705a9b26fd482a9c10e926eae7bda41e9b
Certificate serial: 019426D9F4CC0EE5FADBBACCD2EC47F9009B
Authority key identifier: E9:64:D2:70:5A:9B:26:FD:48:2A:9C:10:E9:26:EA:E7:BD:A4:1E:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/qE5CKR1beI5QzGXctw8hwUZF3kQ.roa
Signing time: Thu 02 Jan 2025 11:50:05 +0000
ROA not before: Thu 02 Jan 2025 11:50:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200976
IP address blocks: 185.198.112.0/24 maxlen: 24
185.198.113.0/24 maxlen: 24
185.198.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:f4:cc:0e:e5:fa:db:ba:cc:d2:ec:47:f9:00:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e964d2705a9b26fd482a9c10e926eae7bda41e9b
Validity
Not Before: Jan 2 11:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a84e42291d5b788e50cc65dcb70f21c14645de44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:b7:a3:06:9b:93:0d:d2:52:ee:2a:c0:42:55:
af:3f:ef:8e:58:ef:ff:e4:79:a4:aa:5d:12:8d:c4:
2f:e0:ac:0f:c1:1a:d0:c5:24:4e:86:ec:df:70:3b:
34:4c:ca:38:6d:0f:89:45:50:01:87:0a:41:11:b9:
2f:9c:05:ae:7f:79:cd:a1:4e:4e:29:91:77:31:7d:
05:5a:c5:bd:64:bb:93:20:9c:0e:c9:eb:15:4a:8d:
97:ed:56:86:5a:9e:9f:87:93:54:48:21:47:84:c9:
b7:a8:28:98:44:8f:b2:ba:1e:80:25:5f:57:a9:9e:
5e:49:8e:fc:4c:81:98:54:50:7c:30:f2:89:86:ce:
67:2b:31:1f:a8:6e:88:45:ba:43:e3:e1:fb:59:45:
99:a9:7b:28:15:4c:39:65:cd:99:ad:2a:84:ca:e5:
25:eb:ac:5a:8c:40:18:33:29:73:fd:58:bb:c7:64:
7e:de:c0:93:a9:12:c7:c7:d5:cd:0e:d1:db:31:c9:
49:ef:1b:91:eb:e7:63:88:72:16:ac:82:88:20:ff:
8f:c0:6d:fe:a4:d8:5c:c5:87:1a:ec:bf:bf:bf:6f:
ec:08:25:3d:ad:9c:15:24:a5:ce:29:3f:a5:1b:e6:
b5:e0:5a:1b:27:75:9c:49:8f:4d:69:9d:9d:ce:c5:
d1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4E:42:29:1D:5B:78:8E:50:CC:65:DC:B7:0F:21:C1:46:45:DE:44
X509v3 Authority Key Identifier:
keyid:E9:64:D2:70:5A:9B:26:FD:48:2A:9C:10:E9:26:EA:E7:BD:A4:1E:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6WTScFqbJv1IKpwQ6Sbq572kHps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/qE5CKR1beI5QzGXctw8hwUZF3kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/a6636d-cc53-4cee-84cc-f4e361e4da2d/1/6WTScFqbJv1IKpwQ6Sbq572kHps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.198.112.0-185.198.114.255
Signature Algorithm: sha256WithRSAEncryption
23:e1:f1:00:d1:8c:6b:ba:4b:38:10:b0:70:c3:42:44:f8:6a:
d3:c8:c8:a8:85:7c:b7:dc:c5:38:93:fc:3f:48:b7:9d:7d:86:
9a:ed:84:8c:d3:d8:74:d8:87:c3:f8:44:a0:e8:a3:e8:3f:29:
47:97:01:32:1e:aa:ec:f7:ac:a5:9d:bf:65:47:ea:b0:38:49:
b5:6f:02:ce:2e:98:d5:a4:fe:1c:4e:d5:12:3a:7f:a1:a8:30:
ea:b1:53:5a:16:99:8f:d7:33:ed:fa:cf:be:22:ed:24:18:ab:
9e:8e:b7:a7:29:5a:22:d0:99:82:df:38:5b:bf:7a:a3:7c:f0:
a2:3e:53:3e:e6:28:ef:cf:af:fc:be:6d:5e:c1:ee:86:0c:c9:
b7:53:dc:6a:a8:92:30:e7:75:15:ae:2c:7a:51:59:f5:7e:31:
11:ba:d8:b4:58:50:f5:cf:e0:c4:09:95:e5:09:de:34:15:45:
c9:5f:14:dd:7a:d5:fd:e5:79:94:36:3b:0f:12:15:2f:16:d8:
c6:e6:34:a9:03:04:51:6a:40:53:37:ae:bf:41:d2:7e:e6:26:
81:0f:65:20:ae:9d:8b:f8:91:ab:94:fc:d6:fb:64:75:e8:e8:
dd:58:82:53:17:14:07:e6:2d:55:49:e1:72:d2:cf:5f:a0:db:
1d:e4:f0:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:47 2025 by rpki-client on console.sobornost.net