Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/qZwCUBdyVxKjYkXaP33nuRnJFFk.roa
File: qZwCUBdyVxKjYkXaP33nuRnJFFk.roa (raw, json)
Hash identifier: Qf8N9OYdk9LMClm+JkhJP4J83VvdWMZetrJHTxylpz8=
Subject key identifier: A9:9C:02:50:17:72:57:12:A3:62:45:DA:3F:7D:E7:B9:19:C9:14:59
Certificate issuer: /CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Certificate serial: 01949844161707FA56E0EFD017E7649F9140
Authority key identifier: 7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/qZwCUBdyVxKjYkXaP33nuRnJFFk.roa
Signing time: Fri 24 Jan 2025 12:23:06 +0000
ROA not before: Fri 24 Jan 2025 12:23:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59796
IP address blocks: 5.252.32.0/24 maxlen: 24
5.252.33.0/24 maxlen: 24
5.252.34.0/24 maxlen: 24
5.252.35.0/24 maxlen: 24
160.79.120.0/24 maxlen: 24
160.79.121.0/24 maxlen: 24
160.79.122.0/24 maxlen: 24
160.79.123.0/24 maxlen: 24
185.121.240.0/22 maxlen: 22
185.121.240.0/24 maxlen: 24
185.121.241.0/24 maxlen: 24
185.121.242.0/24 maxlen: 24
185.121.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:98:44:16:17:07:fa:56:e0:ef:d0:17:e7:64:9f:91:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e26b1ef7410072ce96e82d7581be436e639a7c4
Validity
Not Before: Jan 24 12:23:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a99c025017725712a36245da3f7de7b919c91459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c3:9e:aa:d7:f6:c6:b9:b4:22:ad:54:86:83:
73:5f:7a:06:ba:ca:8d:22:1f:2e:f7:ff:ef:46:e1:
9a:1e:7e:a4:fe:dd:ce:0c:1d:32:9b:ba:43:20:72:
f1:e9:2e:04:74:d6:d8:3f:95:a4:05:a7:25:9a:37:
a7:7b:aa:be:bc:06:48:9a:10:ea:39:ba:9c:cd:e3:
7d:fc:9a:2a:df:ca:60:a1:15:af:fb:12:bf:47:e3:
30:d7:92:f9:be:45:81:a9:37:a0:13:88:3a:72:f1:
c7:1d:33:1e:f9:ed:a0:40:28:b9:dc:ce:08:74:a9:
49:4d:f9:f8:5f:51:20:86:6d:2d:b0:04:81:b7:0c:
df:1d:f7:24:62:c5:0d:c4:90:69:6a:4d:b7:1a:70:
b4:3e:c4:48:27:3f:49:12:48:fe:c9:c1:47:a1:a9:
22:66:4d:97:f2:9f:39:fe:2f:2d:74:78:a9:a3:7b:
78:09:96:83:8e:ca:6c:2f:83:37:e2:c3:10:ac:d2:
ff:5b:70:c8:fe:cc:7a:3e:96:3e:00:62:a8:52:d7:
0a:fa:b8:f6:df:89:04:a0:4e:65:6a:50:25:70:13:
e6:ac:96:bd:a1:97:30:99:61:d0:a0:c5:4c:35:0d:
1a:3b:fd:ad:4e:59:68:f4:01:89:ac:80:83:c8:d0:
b3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9C:02:50:17:72:57:12:A3:62:45:DA:3F:7D:E7:B9:19:C9:14:59
X509v3 Authority Key Identifier:
keyid:7E:26:B1:EF:74:10:07:2C:E9:6E:82:D7:58:1B:E4:36:E6:39:A7:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiax73QQByzpboLXWBvkNuY5p8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/qZwCUBdyVxKjYkXaP33nuRnJFFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/cac63c-55e5-4154-8876-8c32c351ee70/1/fiax73QQByzpboLXWBvkNuY5p8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.32.0/22
160.79.120.0/22
185.121.240.0/22
Signature Algorithm: sha256WithRSAEncryption
0d:79:d1:b6:de:37:5f:a0:e3:56:18:7d:c0:b8:1a:09:8a:1a:
b0:ec:6c:f7:96:25:0a:76:e2:87:1a:74:5f:e7:fa:21:f6:dd:
77:c6:42:52:20:b8:54:e6:27:02:77:11:6d:be:24:b5:69:3e:
cd:59:91:23:87:39:19:0b:8f:d2:4b:2a:4f:30:7e:4c:9e:21:
11:1e:4c:33:39:b9:36:4a:46:1e:94:4f:cd:2c:b4:64:66:c1:
de:25:b3:18:5a:e3:f4:5d:5c:fd:6b:58:5c:bb:3c:ed:9c:bb:
9b:71:1f:98:16:e1:e6:cc:e2:b1:c7:b2:6b:ec:9b:f9:d2:36:
e2:a6:86:c6:e0:2f:55:31:5f:08:40:24:ba:95:e9:18:59:aa:
97:9b:89:34:c6:41:89:e5:cb:21:97:ef:8d:5a:ed:27:f7:53:
51:d8:8d:8c:45:5c:06:d1:5c:f5:c4:e5:c2:ca:14:e2:df:57:
54:c5:35:44:94:86:da:ea:a4:14:af:9f:ce:00:20:b3:40:39:
26:c9:cf:b1:42:fb:c9:6f:34:36:26:72:cb:f9:8e:f3:3d:6c:
7f:c3:73:9e:ef:0f:55:d2:80:7f:48:63:b5:02:f2:b4:c3:dd:
33:61:53:69:1a:29:12:f2:fc:5f:02:e1:2b:b9:bc:2d:23:7e:
ca:21:c8:50
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZSYRBYXB/pW4O/QF+dkn5FAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjZiMWVmNzQxMDA3MmNlOTZlODJkNzU4MWJlNDM2ZTYz
OWE3YzQwHhcNMjUwMTI0MTIyMzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTljMDI1MDE3NzI1NzEyYTM2MjQ1ZGEzZjdkZTdiOTE5YzkxNDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MOeqtf2xrm0Iq1UhoNzX3oGusqN
Ih8u9//vRuGaHn6k/t3ODB0ym7pDIHLx6S4EdNbYP5WkBaclmjene6q+vAZImhDq
ObqczeN9/Joq38pgoRWv+xK/R+Mw15L5vkWBqTegE4g6cvHHHTMe+e2gQCi53M4I
dKlJTfn4X1Eghm0tsASBtwzfHfckYsUNxJBpak23GnC0PsRIJz9JEkj+ycFHoaki
Zk2X8p85/i8tdHipo3t4CZaDjspsL4M34sMQrNL/W3DI/sx6PpY+AGKoUtcK+rj2
34kEoE5lalAlcBPmrJa9oZcwmWHQoMVMNQ0aO/2tTllo9AGJrICDyNCzEwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKmcAlAXclcSo2JF2j9957kZyRRZMB8GA1UdIwQY
MBaAFH4mse90EAcs6W6C11gb5DbmOafEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYt
OGMzMmMzNTFlZTcwLzEvcVp3Q1VCZHlWeEtqWWtYYVAzM251Um5KRkZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9jYWM2M2MtNTVlNS00MTU0LTg4NzYtOGMzMmMzNTFlZTcw
LzEvZmlheDczUVFCeXpwYm9MWFdCdmtOdVk1cDhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCBfwgAwQC
oE94AwQCuXnwMA0GCSqGSIb3DQEBCwUAA4IBAQANedG23jdfoONWGH3AuBoJihqw
7Gz3liUKduKHGnRf5/oh9t13xkJSILhU5icCdxFtviS1aT7NWZEjhzkZC4/SSypP
MH5MniERHkwzObk2SkYelE/NLLRkZsHeJbMYWuP0XVz9a1hcuzztnLubcR+YFuHm
zOKxx7Jr7Jv50jbipobG4C9VMV8IQCS6lekYWaqXm4k0xkGJ5cshl++NWu0n91NR
2I2MRVwG0Vz1xOXCyhTi31dUxTVElIba6qQUr5/OACCzQDkmyc+xQvvJbzQ2JnLL
+Y7zPWx/w3Oe7w9V0oB/SGO1AvK0w90zYVNpGikS8vxfAuErubwtI37KIchQ
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:43 2025 by rpki-client