Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/qbL9OL5sc-w50AXrG2tZRkZnW2s.roa
File: qbL9OL5sc-w50AXrG2tZRkZnW2s.roa (raw, json)
Hash identifier: Q4+OtthvOte+9IlGsVQn+tB7AZLUhi+dropNGViFYc0=
Subject key identifier: A9:B2:FD:38:BE:6C:73:EC:39:D0:05:EB:1B:6B:59:46:46:67:5B:6B
Certificate issuer: /CN=49240b59bbf6906a555e1074c5ae73ec62dffc5f
Certificate serial: 01942369228AEC21E4C564B536F7671D1099
Authority key identifier: 49:24:0B:59:BB:F6:90:6A:55:5E:10:74:C5:AE:73:EC:62:DF:FC:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/qbL9OL5sc-w50AXrG2tZRkZnW2s.roa
Signing time: Wed 01 Jan 2025 19:48:00 +0000
ROA not before: Wed 01 Jan 2025 19:48:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59708
IP address blocks: 185.4.104.0/22 maxlen: 24
185.4.104.0/24 maxlen: 24
185.4.105.0/24 maxlen: 24
185.4.106.0/24 maxlen: 24
185.4.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:22:8a:ec:21:e4:c5:64:b5:36:f7:67:1d:10:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49240b59bbf6906a555e1074c5ae73ec62dffc5f
Validity
Not Before: Jan 1 19:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9b2fd38be6c73ec39d005eb1b6b594646675b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1b:f5:92:cc:d6:30:88:b0:e0:8e:6c:61:62:
69:cb:60:75:7a:4a:5f:d1:dc:9a:f4:75:03:8d:91:
29:83:40:e4:93:80:c4:fa:17:87:5d:e2:b6:c4:47:
fb:97:41:08:9e:c1:b8:c1:a5:48:d7:8a:03:a4:ec:
4a:fe:34:3b:df:b5:bf:3a:f4:81:33:3e:23:18:ba:
3b:7e:45:cf:ba:df:c5:50:1d:d9:fe:4d:2e:2d:ad:
88:e0:5f:8f:2d:6b:a1:e6:c6:59:36:da:95:65:ad:
b3:30:35:48:c2:61:85:8c:24:25:82:25:8d:4f:4f:
6e:d2:32:17:e7:6a:ee:8b:7e:53:e4:bb:d8:ed:13:
8b:4f:98:b4:03:f0:5c:b1:f4:28:86:65:09:73:b3:
bf:c5:0b:7c:99:a7:4b:27:c4:90:10:74:7d:9f:fd:
93:19:70:85:c8:13:c1:41:4f:ce:91:93:9c:78:c9:
31:4e:b1:5e:32:8f:76:16:b5:60:f9:e4:33:c3:02:
82:3b:2d:f1:ec:c0:e0:b6:ee:bb:43:48:ac:fd:85:
71:e3:30:0c:29:2d:12:a1:e0:1e:d4:8d:a9:53:79:
22:b6:d9:bb:09:c1:73:1a:fd:1e:d9:0d:42:59:dd:
a7:b4:76:7d:aa:9b:87:ff:33:a1:6a:81:df:1a:7b:
86:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B2:FD:38:BE:6C:73:EC:39:D0:05:EB:1B:6B:59:46:46:67:5B:6B
X509v3 Authority Key Identifier:
keyid:49:24:0B:59:BB:F6:90:6A:55:5E:10:74:C5:AE:73:EC:62:DF:FC:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSQLWbv2kGpVXhB0xa5z7GLf_F8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/qbL9OL5sc-w50AXrG2tZRkZnW2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/226be8-c7b7-47f0-b0d5-d14af2cb8fde/1/SSQLWbv2kGpVXhB0xa5z7GLf_F8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.4.104.0/22
Signature Algorithm: sha256WithRSAEncryption
69:d2:ab:b2:eb:25:1f:37:39:1b:2d:49:f3:7f:ca:11:11:27:
3b:83:4e:e1:11:96:0a:cd:a2:53:04:17:f9:0e:e7:56:4d:5b:
e0:18:38:8b:cc:f9:cb:e5:6f:43:2a:59:8a:d7:d8:1f:76:c2:
c1:ef:40:18:99:de:d3:4c:ee:a1:8d:e7:2c:4a:93:f3:ed:af:
f8:50:fd:85:1b:08:b6:9d:16:18:01:bf:34:e3:3a:11:02:cd:
82:91:b4:87:86:b9:73:ae:37:e2:4f:bd:73:af:f6:ef:3a:de:
1c:08:74:8b:0f:3c:89:f5:01:75:da:a4:43:f7:65:85:91:27:
de:0c:9e:37:db:ca:dd:e4:2b:c7:7c:6d:ff:00:d5:67:63:e6:
fa:44:77:99:67:ae:df:4c:24:ca:e9:b2:70:6f:db:71:64:7b:
ae:f8:ad:28:9c:d2:d8:fb:8a:6b:a7:a4:9a:f4:0f:41:6b:20:
52:d1:2c:ac:42:77:d9:72:68:6e:5b:ab:31:38:19:79:61:24:
88:37:fb:b4:29:14:b3:e0:20:5c:b6:d7:c8:3f:fd:1d:cc:ae:
d3:84:ef:37:63:3d:b7:78:7d:49:68:ad:9e:1f:27:67:4e:e4:
86:fe:d5:66:5a:c9:53:c0:a9:96:7f:fc:ca:22:9d:e3:64:99:
eb:7f:6f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:41 2025 by rpki-client on console.sobornost.net