Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/CqQsoC1jFsSbLss7hEFtLKrKDMY.roa
File: CqQsoC1jFsSbLss7hEFtLKrKDMY.roa (raw, json)
Hash identifier: 7YVK/zmpOd/tEBFOBPOhNo6QF1d67oChKSOQOYEoacg=
Subject key identifier: 0A:A4:2C:A0:2D:63:16:C4:9B:2E:CB:3B:84:41:6D:2C:AA:CA:0C:C6
Certificate issuer: /CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Certificate serial: 019420D64C6CC3C291CFCFA2F3719EF225A3
Authority key identifier: E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/CqQsoC1jFsSbLss7hEFtLKrKDMY.roa
Signing time: Wed 01 Jan 2025 07:48:22 +0000
ROA not before: Wed 01 Jan 2025 07:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47681
IP address blocks: 185.191.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4c:6c:c3:c2:91:cf:cf:a2:f3:71:9e:f2:25:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d6c6e8bced40bd032d17718c1b1e39ae841ae8
Validity
Not Before: Jan 1 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0aa42ca02d6316c49b2ecb3b84416d2caaca0cc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:b8:8d:b7:5f:e4:9a:a2:d0:8c:83:60:a6:8f:
f7:cf:c4:58:bf:b4:f1:39:67:1e:d1:13:15:73:a1:
f2:dc:45:86:94:b6:09:0d:0b:a3:31:dc:a5:a1:60:
44:98:a0:f8:7c:01:76:4e:d7:c6:83:3c:7d:82:e3:
40:2c:8d:38:6c:7e:54:f5:ad:da:11:f0:4e:6c:30:
69:1d:a6:7d:dd:2a:47:15:b0:3b:50:67:f9:4b:30:
97:06:2d:dc:06:88:32:bf:cd:f2:af:39:8b:2a:7f:
ff:bf:64:53:db:24:ca:55:22:c4:df:89:90:a8:1d:
80:cf:fb:1e:5f:b0:77:73:92:6b:cb:13:e4:77:c1:
23:5f:1b:d5:df:a8:8c:a6:f4:e7:69:7a:ed:b4:84:
97:38:ea:53:72:a7:f4:b4:b3:b1:34:3f:4c:80:83:
ae:1a:ae:07:b8:8f:18:62:04:1f:30:60:5d:0f:f4:
97:db:5e:e3:75:2c:96:9a:bd:f6:ff:e8:0f:28:c1:
57:3d:f1:f8:24:c2:07:16:f3:58:9f:be:4d:2d:e8:
ac:ad:6f:00:ff:11:0b:94:b0:80:91:b5:8c:91:2c:
84:f7:31:9c:e7:f9:4c:17:32:4f:1a:c2:cf:8e:a7:
1c:aa:03:62:14:ff:3c:1f:0a:f5:c2:29:90:f5:89:
ae:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A4:2C:A0:2D:63:16:C4:9B:2E:CB:3B:84:41:6D:2C:AA:CA:0C:C6
X509v3 Authority Key Identifier:
keyid:E5:D6:C6:E8:BC:ED:40:BD:03:2D:17:71:8C:1B:1E:39:AE:84:1A:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dbG6LztQL0DLRdxjBseOa6EGug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/CqQsoC1jFsSbLss7hEFtLKrKDMY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/0894f7-e24d-4728-8cad-bd249b625797/1/5dbG6LztQL0DLRdxjBseOa6EGug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.184.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:7a:00:cf:68:c7:29:a5:04:ed:10:74:f5:97:c8:ab:d7:1b:
23:2c:df:48:4a:4a:d5:ec:b2:48:32:cd:bf:7b:34:29:2d:7d:
0e:13:f5:73:62:21:ba:5f:76:b5:e5:98:69:f2:31:b0:0f:41:
62:1c:c2:32:f0:af:e0:24:dd:5e:b0:a4:0d:ee:7c:0d:58:5d:
a2:b6:12:2d:3d:f9:a4:bd:cc:fe:5f:bf:3d:f2:c0:3e:22:3f:
8e:5a:7e:23:aa:e3:fe:08:78:24:a9:da:4e:e1:8b:95:de:bd:
0e:6e:fe:b6:05:de:e5:5c:80:be:98:ea:b0:6b:b0:3b:a1:34:
bf:2f:56:de:93:a4:79:92:8e:0e:b4:ea:e2:c0:22:09:b9:25:
5e:42:f6:25:1d:0a:34:16:7b:a2:4d:da:4c:d1:99:09:c0:6e:
fb:a2:6a:fb:6f:fe:7d:77:c3:37:d3:dd:7d:15:4a:8d:37:97:
bf:c4:25:50:55:fe:71:b8:4b:68:26:45:de:a9:9a:e6:fd:bc:
fe:13:ad:f7:7d:9d:e8:72:c4:20:4d:81:48:12:8e:c4:6d:5c:
05:9d:fd:2d:78:3b:8b:97:c9:a7:0e:8d:93:4b:8f:b2:f2:52:
16:40:4f:38:23:44:ec:19:37:0e:a6:4c:92:e4:cc:f1:80:8a:
86:30:bd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:33 2025 by rpki-client on console.sobornost.net