Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/qBf7Ld8e0ZEc7SC83qsc-EpQ6wo.roa
File: qBf7Ld8e0ZEc7SC83qsc-EpQ6wo.roa (raw, json)
Hash identifier: 1F0G1lB8+dsYp3xA4GqGoykNUR9+r6OUzve6mTfWaFI=
Subject key identifier: A8:17:FB:2D:DF:1E:D1:91:1C:ED:20:BC:DE:AB:1C:F8:4A:50:EB:0A
Certificate issuer: /CN=e19cbb88d2b1a896658506778662e75c732a67e7
Certificate serial: 019421B2441C597036A5C36463BFD37B82EF
Authority key identifier: E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/qBf7Ld8e0ZEc7SC83qsc-EpQ6wo.roa
Signing time: Wed 01 Jan 2025 11:48:38 +0000
ROA not before: Wed 01 Jan 2025 11:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59659
IP address blocks: 5.159.120.0/21 maxlen: 21
185.220.88.0/22 maxlen: 22
2a07:c9c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:44:1c:59:70:36:a5:c3:64:63:bf:d3:7b:82:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e19cbb88d2b1a896658506778662e75c732a67e7
Validity
Not Before: Jan 1 11:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a817fb2ddf1ed1911ced20bcdeab1cf84a50eb0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b5:9d:07:e0:bd:e8:90:f4:61:77:6e:05:04:
4b:0e:5f:74:f3:77:ad:07:82:6b:7a:8f:3b:1a:2d:
4f:ae:38:f9:5b:de:d2:98:6a:c6:e0:ee:8c:74:04:
f4:6f:2b:29:00:0c:d7:e6:bf:bd:32:64:73:39:20:
a0:c1:49:5e:dc:05:38:cc:f4:4e:85:7b:a2:d4:c5:
8d:cc:6e:dd:b5:37:c3:fb:2d:f9:e3:56:bd:d9:a1:
53:b2:3a:9f:f4:5a:4c:00:e9:fe:c8:fc:a4:7c:90:
ad:99:d7:be:52:29:d5:0e:c1:95:b3:0d:89:84:48:
36:d7:32:0b:27:f5:f6:51:1a:82:45:04:16:cf:c0:
a5:de:b6:20:a3:63:5a:00:3f:a5:c3:a7:14:6d:c1:
41:96:7b:e0:0a:18:b4:8f:7e:4f:47:ad:49:8b:a0:
ca:ee:72:43:d0:3d:61:f0:ac:0b:e2:b8:e8:60:1a:
5f:1c:42:48:5e:94:76:be:7c:a6:1a:7b:56:ae:be:
ae:02:11:db:68:30:85:c0:14:21:38:94:da:6e:21:
b3:ab:e7:9c:6d:4e:fe:c4:46:b8:bd:53:33:ff:33:
e7:27:01:8b:2a:37:92:e0:80:2a:9f:e6:6b:1c:5e:
cb:e7:74:97:f8:83:c3:f1:f3:26:63:b5:65:d1:8e:
57:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:17:FB:2D:DF:1E:D1:91:1C:ED:20:BC:DE:AB:1C:F8:4A:50:EB:0A
X509v3 Authority Key Identifier:
keyid:E1:9C:BB:88:D2:B1:A8:96:65:85:06:77:86:62:E7:5C:73:2A:67:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/qBf7Ld8e0ZEc7SC83qsc-EpQ6wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ad1216-b71d-4557-a086-efea63d06f80/1/4Zy7iNKxqJZlhQZ3hmLnXHMqZ-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.120.0/21
185.220.88.0/22
IPv6:
2a07:c9c0::/29
Signature Algorithm: sha256WithRSAEncryption
09:9f:b3:8e:ff:72:09:77:5f:dc:ff:8c:e6:c0:81:26:5e:65:
9d:12:a8:81:b3:0a:b9:8d:b9:c0:a5:9a:17:ef:6f:f8:44:a2:
8e:b4:fa:79:27:9c:7f:0f:15:3a:29:5a:84:0f:5b:06:5b:cd:
ce:12:47:d1:04:54:1b:39:61:11:a6:6b:21:2e:b1:d8:8b:a9:
7b:8f:00:3d:8c:0b:6a:05:f5:16:80:af:ab:cb:73:ac:39:83:
15:89:ae:f5:7d:e8:6c:8d:1d:c0:85:ce:32:dd:b2:56:6d:6b:
e9:f5:79:b9:a4:f1:44:0d:cd:72:4b:12:ba:df:75:3b:9d:0f:
9a:0f:49:ca:8a:01:56:db:b1:72:eb:7b:f2:2f:ba:ae:20:12:
12:72:49:8f:c2:3f:4c:41:44:e3:ba:03:69:a7:d9:b6:a4:32:
f5:85:66:7a:22:32:db:7c:76:62:6b:58:2e:35:ad:99:b6:a5:
5a:45:37:0b:74:a2:80:df:a5:a9:44:f5:7f:4a:96:a4:98:e3:
f7:24:73:b7:35:c5:6a:f8:77:a2:5f:1f:c7:27:9f:c7:da:bc:
0e:19:91:d6:a3:9c:d2:8a:60:da:85:2f:3b:1f:c9:ac:34:83:
ed:7a:6a:b8:79:08:ff:4f:58:22:71:5e:a9:94:c6:85:e3:be:
a7:1e:5f:57
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQhskQcWXA2pcNkY7/Te4LvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxOWNiYjg4ZDJiMWE4OTY2NTg1MDY3Nzg2NjJlNzVjNzMy
YTY3ZTcwHhcNMjUwMTAxMTE0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODE3ZmIyZGRmMWVkMTkxMWNlZDIwYmNkZWFiMWNmODRhNTBlYjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7WdB+C96JD0YXduBQRLDl9083et
B4Jreo87Gi1Prjj5W97SmGrG4O6MdAT0byspAAzX5r+9MmRzOSCgwUle3AU4zPRO
hXui1MWNzG7dtTfD+y3541a92aFTsjqf9FpMAOn+yPykfJCtmde+UinVDsGVsw2J
hEg21zILJ/X2URqCRQQWz8Cl3rYgo2NaAD+lw6cUbcFBlnvgChi0j35PR61Ji6DK
7nJD0D1h8KwL4rjoYBpfHEJIXpR2vnymGntWrr6uAhHbaDCFwBQhOJTabiGzq+ec
bU7+xEa4vVMz/zPnJwGLKjeS4IAqn+ZrHF7L53SX+IPD8fMmY7Vl0Y5X7wIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFKgX+y3fHtGRHO0gvN6rHPhKUOsKMB8GA1UdIwQY
MBaAFOGcu4jSsaiWZYUGd4Zi51xzKmfnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFp5N2lOS3hxSlpsaFFaM2htTG5YSE1xWi1jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9hZDEyMTYtYjcxZC00NTU3LWEwODYt
ZWZlYTYzZDA2ZjgwLzEvcUJmN0xkOGUwWkVjN1NDODNxc2MtRXBRNndvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9hZDEyMTYtYjcxZC00NTU3LWEwODYtZWZlYTYzZDA2Zjgw
LzEvNFp5N2lOS3hxSlpsaFFaM2htTG5YSE1xWi1jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQDBZ94AwQC
udxYMA0EAgACMAcDBQMqB8nAMA0GCSqGSIb3DQEBCwUAA4IBAQAJn7OO/3IJd1/c
/4zmwIEmXmWdEqiBswq5jbnApZoX72/4RKKOtPp5J5x/DxU6KVqED1sGW83OEkfR
BFQbOWERpmshLrHYi6l7jwA9jAtqBfUWgK+ry3OsOYMVia71fehsjR3Ahc4y3bJW
bWvp9Xm5pPFEDc1ySxK633U7nQ+aD0nKigFW27Fy63vyL7quIBISckmPwj9MQUTj
ugNpp9m2pDL1hWZ6IjLbfHZia1guNa2ZtqVaRTcLdKKA36WpRPV/SpakmOP3JHO3
NcVq+HeiXx/HJ5/H2rwOGZHWo5zSimDahS87H8msNIPtemq4eQj/T1gicV6plMaF
476nHl9X
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:25 2025 by rpki-client on console.sobornost.net