Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/qdg3ZQOJoZfYoV2XLJPQx8CstqA.roa
File: qdg3ZQOJoZfYoV2XLJPQx8CstqA.roa (raw, json)
Hash identifier: gtltCS9oNQCh/M9RLbb0IKPPWJch7foRejTLWNn2Has=
Subject key identifier: A9:D8:37:65:03:89:A1:97:D8:A1:5D:97:2C:93:D0:C7:C0:AC:B6:A0
Certificate issuer: /CN=57c670c8db32dd748df797c5c93013d8c91fa839
Certificate serial: 0195B370341A00E78D51F4627075CA69FBBD
Authority key identifier: 57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/qdg3ZQOJoZfYoV2XLJPQx8CstqA.roa
Signing time: Thu 20 Mar 2025 12:03:49 +0000
ROA not before: Thu 20 Mar 2025 12:03:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205090
IP address blocks: 109.69.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:b3:70:34:1a:00:e7:8d:51:f4:62:70:75:ca:69:fb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57c670c8db32dd748df797c5c93013d8c91fa839
Validity
Not Before: Mar 20 12:03:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9d837650389a197d8a15d972c93d0c7c0acb6a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1b:65:94:4a:04:af:51:94:17:08:aa:06:50:
d3:2b:80:1e:12:0b:00:f1:35:59:7e:bc:54:c3:10:
e1:92:b0:84:5d:9d:99:11:ac:a2:3b:93:ac:27:96:
d0:ea:87:b8:92:af:09:12:49:99:86:87:48:4f:b0:
cd:c1:6b:b8:a5:a0:87:95:58:f7:03:49:14:ca:02:
42:30:20:58:32:9a:91:54:eb:15:76:5c:ca:7d:df:
92:cd:dc:cc:03:bf:5f:98:52:0d:96:07:f2:9b:83:
38:f7:ff:bf:ff:26:ce:59:5c:04:7f:5b:23:73:f6:
c6:49:c5:69:e7:6c:f3:8f:7a:29:74:9d:7d:23:3c:
73:d1:5e:c0:c3:04:38:d8:2e:8a:1e:74:c5:8f:80:
a5:f9:64:81:09:54:65:40:27:9b:82:d8:5d:5b:a6:
96:87:21:0f:d2:b3:02:6e:2f:71:1a:9b:d0:11:ad:
a5:a6:c2:06:43:b7:fa:0d:74:a8:63:d0:4d:88:ed:
4a:39:aa:3e:d5:2c:ce:6f:81:af:b1:7c:94:08:d5:
c5:fd:38:17:9f:e8:2f:96:94:64:b2:2a:1f:e9:31:
46:60:19:d2:b2:6a:16:31:d8:00:31:64:73:f1:fc:
b1:48:43:1d:de:cc:e4:cc:dc:22:6a:90:ff:44:9b:
19:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D8:37:65:03:89:A1:97:D8:A1:5D:97:2C:93:D0:C7:C0:AC:B6:A0
X509v3 Authority Key Identifier:
keyid:57:C6:70:C8:DB:32:DD:74:8D:F7:97:C5:C9:30:13:D8:C9:1F:A8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V8ZwyNsy3XSN95fFyTAT2MkfqDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/qdg3ZQOJoZfYoV2XLJPQx8CstqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/5a6fda-7896-4c50-affd-30495f403784/1/V8ZwyNsy3XSN95fFyTAT2MkfqDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.69.62.0/24
Signature Algorithm: sha256WithRSAEncryption
80:69:fe:c2:76:6d:2f:b8:29:60:52:d7:2d:51:11:cf:50:53:
39:fc:08:e9:35:21:43:9d:c2:d9:34:6b:b2:18:2c:45:30:4a:
15:eb:8b:d5:b4:b0:51:83:dc:f2:78:8f:1c:4b:43:a6:98:a3:
4f:52:7b:2a:09:43:bf:6d:82:16:e7:03:4e:13:fe:fa:c0:8e:
57:c2:78:46:7c:bf:62:72:c4:da:1c:49:e7:47:ed:97:94:aa:
af:64:65:38:5b:36:b3:2b:89:0d:04:da:b6:e2:0b:bb:20:0c:
f1:bc:2c:3e:ab:d4:a5:c5:88:20:81:e0:0e:68:fb:e3:b6:e2:
e6:61:46:09:7e:bb:51:74:49:d6:1a:41:02:28:d8:b1:29:b5:
56:df:d6:d1:f5:9a:a9:ae:35:3e:05:67:5c:5a:b7:9b:0d:41:
21:87:5f:ee:cd:38:9c:5c:72:e7:53:4f:93:c4:a0:15:60:3d:
f1:42:fb:c1:eb:d5:8d:a5:2f:0a:96:cc:4e:bd:40:3a:68:ec:
be:3a:f5:10:e6:79:41:08:71:d0:9f:a7:7a:c6:05:59:43:04:
82:3f:00:31:24:ee:6e:32:e8:a1:aa:8a:2a:91:7e:1c:5d:d6:
47:9b:af:20:3e:4e:a3:06:8a:58:ed:78:37:2d:80:26:4e:09:
ce:40:a9:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:30:01 2025 by rpki-client