Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/Qqhw1hFjAH2cjMyIzDFuLuhBB38.roa
File: Qqhw1hFjAH2cjMyIzDFuLuhBB38.roa (raw, json)
Hash identifier: N8UT7eSxYsrDW5XIIE4cv48SYlBhyKYdxt2C78AnGxs=
Subject key identifier: 42:A8:70:D6:11:63:00:7D:9C:8C:CC:88:CC:31:6E:2E:E8:41:07:7F
Certificate issuer: /CN=fb751302af7b5cd6bef3717b68367e02b617d2dc
Certificate serial: 0194258F730E2810EFD27AD168C85978193C
Authority key identifier: FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/Qqhw1hFjAH2cjMyIzDFuLuhBB38.roa
Signing time: Thu 02 Jan 2025 05:49:05 +0000
ROA not before: Thu 02 Jan 2025 05:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211067
IP address blocks: 185.213.192.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:73:0e:28:10:ef:d2:7a:d1:68:c8:59:78:19:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb751302af7b5cd6bef3717b68367e02b617d2dc
Validity
Not Before: Jan 2 05:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42a870d61163007d9c8ccc88cc316e2ee841077f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:24:e7:6a:a2:e5:1b:a9:07:e9:9e:16:9d:ff:
c7:e3:d6:37:01:3c:2d:3b:0e:b4:95:8b:5d:9d:d9:
4c:74:60:41:b1:5e:f5:f9:05:23:80:c1:ce:bb:e2:
5f:d5:fe:b6:58:f7:c5:59:da:1e:38:e6:ee:80:3f:
00:ed:b2:4b:7b:6b:10:d3:40:7b:69:74:aa:78:19:
ce:b9:d0:66:73:85:12:83:5a:da:3d:44:4c:f9:d1:
be:67:20:32:29:38:d7:31:f6:cc:31:d9:13:f1:aa:
7d:c3:a4:d2:60:20:75:45:dc:ca:f6:a1:05:4a:96:
b5:89:26:5f:7a:8b:84:02:83:3d:f9:af:33:3a:84:
7c:30:cd:ec:8c:75:e4:25:14:b9:05:8f:92:43:a5:
91:7b:a4:9c:23:9b:85:29:a4:df:7a:24:23:50:00:
6f:a6:37:60:7a:44:85:c5:f7:c5:bd:5f:83:ed:36:
db:bc:12:de:7e:b3:73:37:00:01:1e:29:f5:75:9c:
a1:d1:d2:2f:4a:a5:91:fe:41:23:b6:4b:7b:44:91:
5b:1f:c5:2c:79:dc:dc:29:45:81:bd:38:b2:a4:c4:
8b:e2:24:66:cd:0c:0d:6f:12:8c:ba:e7:19:0f:f4:
a3:e1:05:a6:bc:e4:7a:76:9f:33:8c:ad:0d:e9:9a:
46:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A8:70:D6:11:63:00:7D:9C:8C:CC:88:CC:31:6E:2E:E8:41:07:7F
X509v3 Authority Key Identifier:
keyid:FB:75:13:02:AF:7B:5C:D6:BE:F3:71:7B:68:36:7E:02:B6:17:D2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-3UTAq97XNa-83F7aDZ-ArYX0tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/Qqhw1hFjAH2cjMyIzDFuLuhBB38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/5d4004-aac0-4ead-a580-c664b4e86ab5/1/1-3UTAq97XNa-83F7aDZ-ArYX0tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.213.192.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:e8:34:12:81:58:ba:ff:71:57:6e:a4:56:78:c0:98:1d:9a:
05:6f:3a:b8:86:19:57:e4:70:6b:4d:99:61:b5:e7:a0:85:80:
20:80:d9:ca:bc:29:a3:e4:bd:f9:17:e5:88:c7:83:d2:55:66:
55:b9:11:1c:dd:79:89:82:53:f3:1c:c1:21:b7:69:e0:a7:7d:
3c:3a:b2:6d:3e:07:87:c7:be:04:2e:30:bd:59:0d:1b:97:85:
e1:a1:37:a4:22:5a:80:b7:af:f4:07:5b:e7:18:8b:ff:f6:38:
50:f4:90:49:15:56:a0:f3:18:12:e6:e7:65:1e:23:81:8b:05:
c5:f5:66:6f:e5:12:62:14:ea:17:8f:69:00:d6:bd:0b:e4:9c:
d5:00:11:b2:f8:df:36:c7:c4:44:a7:f8:89:93:a0:0e:3e:90:
2f:24:da:de:47:35:fd:76:88:cd:cc:e4:67:cf:45:8e:35:e8:
95:76:d3:e5:6d:86:14:5c:8b:16:52:bd:24:a0:2e:ce:f5:62:
94:77:74:66:5e:41:49:80:87:2d:36:4c:d5:c6:19:69:fa:f0:
48:99:bc:1c:2b:22:15:51:60:f8:d9:aa:d6:ac:16:fa:84:3c:
65:2a:94:99:c9:4f:c1:29:3d:e1:9b:fb:0e:44:48:1d:65:d9:
c3:cd:65:cc
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQlj3MOKBDv0nrRaMhZeBk8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiNzUxMzAyYWY3YjVjZDZiZWYzNzE3YjY4MzY3ZTAyYjYx
N2QyZGMwHhcNMjUwMTAyMDU0OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmE4NzBkNjExNjMwMDdkOWM4Y2NjODhjYzMxNmUyZWU4NDEwNzdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSTnaqLlG6kH6Z4Wnf/H49Y3ATwt
Ow60lYtdndlMdGBBsV71+QUjgMHOu+Jf1f62WPfFWdoeOObugD8A7bJLe2sQ00B7
aXSqeBnOudBmc4USg1raPURM+dG+ZyAyKTjXMfbMMdkT8ap9w6TSYCB1RdzK9qEF
Spa1iSZfeouEAoM9+a8zOoR8MM3sjHXkJRS5BY+SQ6WRe6ScI5uFKaTfeiQjUABv
pjdgekSFxffFvV+D7TbbvBLefrNzNwABHin1dZyh0dIvSqWR/kEjtkt7RJFbH8Us
edzcKUWBvTiypMSL4iRmzQwNbxKMuucZD/Sj4QWmvOR6dp8zjK0N6ZpGdQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFEKocNYRYwB9nIzMiMwxbi7oQQd/MB8GA1UdIwQY
MBaAFPt1EwKve1zWvvNxe2g2fgK2F9LcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS0zVVRBcTk3WE5hLTgzRjdhRFotQXJZWDB0dy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjUvNWQ0MDA0LWFhYzAtNGVhZC1hNTgw
LWM2NjRiNGU4NmFiNS8xL1FxaHcxaEZqQUgyY2pNeUl6REZ1THVoQkIzOC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYjUvNWQ0MDA0LWFhYzAtNGVhZC1hNTgwLWM2NjRiNGU4NmFi
NS8xLzEtM1VUQXE5N1hOYS04M0Y3YURaLUFyWVgwdHcuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAC51cAw
DQYJKoZIhvcNAQELBQADggEBAAvoNBKBWLr/cVdupFZ4wJgdmgVvOriGGVfkcGtN
mWG156CFgCCA2cq8KaPkvfkX5YjHg9JVZlW5ERzdeYmCU/McwSG3aeCnfTw6sm0+
B4fHvgQuML1ZDRuXheGhN6QiWoC3r/QHW+cYi//2OFD0kEkVVqDzGBLm52UeI4GL
BcX1Zm/lEmIU6hePaQDWvQvknNUAEbL43zbHxESn+ImToA4+kC8k2t5HNf12iM3M
5GfPRY416JV20+VthhRcixZSvSSgLs71YpR3dGZeQUmAhy02TNXGGWn68EiZvBwr
IhVRYPjZqtasFvqEPGUqlJnJT8EpPeGb+w5ESB1l2cPNZcw=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:31:42 2025 by rpki-client on console.sobornost.net