Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/Zqbkpwb9FEC8JI8l2BSIQZw2gNU.roa
File: Zqbkpwb9FEC8JI8l2BSIQZw2gNU.roa (raw, json)
Hash identifier: llK9gBnY2tMLV3DDPcLyEXjo4pojFi3+MnQmjAC9rBg=
Subject key identifier: 66:A6:E4:A7:06:FD:14:40:BC:24:8F:25:D8:14:88:41:9C:36:80:D5
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 01947591A3D353145D1AE074871B3922A9B9
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/Zqbkpwb9FEC8JI8l2BSIQZw2gNU.roa
Signing time: Fri 17 Jan 2025 18:41:06 +0000
ROA not before: Fri 17 Jan 2025 18:41:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44477
IP address blocks: 138.124.6.0/24 maxlen: 24
138.124.7.0/24 maxlen: 24
138.124.36.0/24 maxlen: 24
138.124.37.0/24 maxlen: 24
138.124.40.0/24 maxlen: 24
138.124.43.0/24 maxlen: 24
138.124.44.0/24 maxlen: 24
138.124.82.0/24 maxlen: 24
138.124.83.0/24 maxlen: 24
138.124.84.0/24 maxlen: 24
138.124.85.0/24 maxlen: 24
138.124.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:75:91:a3:d3:53:14:5d:1a:e0:74:87:1b:39:22:a9:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Jan 17 18:41:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=66a6e4a706fd1440bc248f25d81488419c3680d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2d:06:98:1b:d3:ff:eb:85:47:82:29:53:a9:
a9:05:5a:4c:8c:3d:89:a3:07:5c:6b:ab:ba:03:d7:
36:33:36:67:d0:2f:7e:a8:cf:f5:22:40:ad:99:dc:
c2:7e:ef:3d:7d:02:a6:e5:0d:e6:b8:ff:4d:05:d5:
9e:a2:27:45:6c:44:38:73:05:fe:c6:5b:13:4c:11:
f8:ee:d7:c1:f1:ee:63:ba:aa:ac:10:32:1b:e7:13:
39:d1:48:2b:f6:3b:dc:4a:ee:86:f5:d0:63:08:5a:
6c:49:35:ca:fb:e9:6e:ad:82:ed:19:21:b4:33:9e:
85:91:17:41:07:20:2e:3b:5c:0b:48:5e:00:26:72:
0c:f4:e1:41:39:5e:0a:55:32:e3:46:d7:a2:2a:0e:
50:f2:3d:2d:dc:9e:e6:ec:f4:ab:95:0b:fa:29:88:
e2:62:92:b0:85:32:f3:d1:49:71:00:64:3d:2a:55:
b4:bd:4f:1d:b4:4c:d9:07:98:f4:a3:28:4e:43:13:
99:31:d6:6b:9b:4b:04:2f:22:1e:12:8d:7b:bc:e4:
8c:23:af:3b:3f:4b:4e:74:fa:5b:3b:1d:d8:97:2d:
ce:f0:97:82:ec:f1:40:bb:d4:7f:62:93:1b:8a:cf:
fc:0a:c1:cc:74:8e:5a:1d:b4:47:6e:8d:36:ae:1c:
fc:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:A6:E4:A7:06:FD:14:40:BC:24:8F:25:D8:14:88:41:9C:36:80:D5
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/Zqbkpwb9FEC8JI8l2BSIQZw2gNU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.124.6.0/23
138.124.36.0/23
138.124.40.0/24
138.124.43.0-138.124.44.255
138.124.82.0-138.124.85.255
138.124.126.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:5b:ab:7f:fc:7d:1a:91:58:7f:ec:52:01:f8:84:d3:19:b1:
8f:8c:34:0c:e7:ac:30:f7:6f:3a:31:f6:79:e3:9a:42:7f:82:
fa:7c:38:a1:fa:f7:9f:f7:e9:60:09:fe:91:62:0b:c5:3b:a9:
7e:df:84:72:59:1b:0b:d5:8d:d3:b5:93:dd:02:e6:ae:cb:c4:
11:61:a7:e5:48:a7:0c:7b:d0:d5:9d:54:6c:f5:bb:7e:7c:92:
06:3d:71:e7:15:2d:10:70:73:56:77:01:3c:06:fd:9f:fe:8d:
0a:e8:4e:a9:d7:28:9f:08:69:0f:a2:21:d4:a4:1f:bf:84:5b:
94:d2:1a:18:97:0c:d5:f8:41:39:d7:39:65:43:da:cf:6b:42:
9d:de:dc:80:35:3a:b0:fb:f5:f1:11:24:22:a5:01:cc:50:07:
2b:91:9c:ba:f7:37:7a:63:03:b5:21:e3:98:8a:58:9f:2a:d1:
a9:9a:94:1d:32:ea:db:61:a4:24:bc:07:d2:e5:0c:b6:7d:6f:
7b:48:f5:81:97:6d:d8:6c:53:c8:50:47:5f:09:8e:63:c0:a5:
64:ad:a5:9c:ea:cf:fa:ef:3f:7f:b9:23:04:20:62:09:eb:9d:
dd:5d:d4:ef:fc:6a:6f:4e:ba:5c:4b:5d:b0:cb:19:67:23:73:
e7:a3:3c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:28:47 2025 by rpki-client