Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/qvfFT1waDERLpkfbuL979IFfQzo.roa
File: qvfFT1waDERLpkfbuL979IFfQzo.roa (raw, json)
Hash identifier: paMjx2cHD10xNMb2RegQEWwQPemRR0QtwqJzV/kovDg=
Subject key identifier: AA:F7:C5:4F:5C:1A:0C:44:4B:A6:47:DB:B8:BF:7B:F4:81:5F:43:3A
Certificate issuer: /CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Certificate serial: 01942444FD0D16A11C95ABFC085DF76CB8F6
Authority key identifier: E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/qvfFT1waDERLpkfbuL979IFfQzo.roa
Signing time: Wed 01 Jan 2025 23:48:08 +0000
ROA not before: Wed 01 Jan 2025 23:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59466
IP address blocks: 45.84.172.0/22 maxlen: 22
85.187.180.0/22 maxlen: 22
85.187.187.0/24 maxlen: 24
85.187.188.0/23 maxlen: 23
85.187.190.0/24 maxlen: 24
185.96.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:fd:0d:16:a1:1c:95:ab:fc:08:5d:f7:6c:b8:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e71d709d8b184c5a50c9431dccaf649bc8684704
Validity
Not Before: Jan 1 23:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aaf7c54f5c1a0c444ba647dbb8bf7bf4815f433a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:01:ef:4f:ff:90:20:13:e5:90:fd:fd:4f:84:
b5:1e:e0:04:6b:69:61:35:5e:65:ba:74:bd:84:9f:
9d:a9:a9:9d:52:cf:aa:92:bc:55:75:9c:68:38:55:
68:46:24:31:f3:97:96:e1:d8:37:dc:19:d9:fe:e9:
c1:bd:93:3e:28:31:64:a8:49:48:20:fc:1b:3f:26:
57:d3:c5:c2:47:a7:da:a1:d4:75:9f:be:bd:2a:a8:
85:b3:8d:fd:f4:e5:47:f8:97:1a:31:65:b7:45:6f:
aa:14:f8:c1:c4:06:4b:0f:11:e1:e0:21:1d:b7:17:
16:99:a8:ad:14:dd:44:24:a1:c8:1d:82:5e:22:09:
a2:6f:ea:5d:9b:45:06:96:17:3c:12:c4:c9:08:35:
66:ea:47:83:f4:98:31:a1:9f:b9:75:ef:31:48:0d:
79:2a:de:f4:65:6b:6a:a3:d1:82:f4:43:c8:30:fd:
2a:88:fd:79:e0:48:a4:9a:e5:48:13:2e:95:7b:ac:
98:61:ef:af:1f:54:2b:41:79:10:5e:cb:12:63:e7:
28:0f:c2:ec:e3:e1:72:a9:07:58:b1:33:fd:77:4a:
57:37:d8:3b:ac:f3:9c:48:e6:b5:e9:5c:20:6b:0c:
ed:e5:cc:c0:81:31:dc:0b:0e:85:e1:a4:e5:f9:1f:
08:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:F7:C5:4F:5C:1A:0C:44:4B:A6:47:DB:B8:BF:7B:F4:81:5F:43:3A
X509v3 Authority Key Identifier:
keyid:E7:1D:70:9D:8B:18:4C:5A:50:C9:43:1D:CC:AF:64:9B:C8:68:47:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5x1wnYsYTFpQyUMdzK9km8hoRwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/qvfFT1waDERLpkfbuL979IFfQzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4799f6-765f-4ad2-8c43-1c5b1012d2c3/1/5x1wnYsYTFpQyUMdzK9km8hoRwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.172.0/22
85.187.180.0/22
85.187.187.0-85.187.190.255
185.96.164.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:71:79:f4:ae:9f:d2:db:d8:c0:92:7c:79:e0:cf:a5:14:0b:
77:95:c0:c0:5e:96:d4:aa:00:0c:8f:97:15:4d:03:21:e4:07:
7c:51:6d:c6:a9:a0:3d:34:43:ba:23:82:34:d4:38:03:b7:38:
dc:04:73:9a:b2:3c:56:f5:ee:74:f2:26:41:a2:81:f0:81:68:
0f:ff:44:3c:cd:45:cd:18:95:96:0e:56:a2:b6:a6:0a:8f:25:
09:78:6e:51:40:13:a5:77:34:70:d9:ad:41:26:4f:ec:70:60:
d5:a0:65:11:8c:90:e2:d8:06:6c:8f:21:87:23:a3:83:71:08:
d7:04:02:25:74:60:0e:d7:aa:5f:64:12:51:47:81:93:d9:50:
aa:48:45:3f:73:49:33:95:ad:c7:ff:12:8f:ee:c7:44:42:3b:
ef:9a:3e:ff:36:50:4a:54:00:78:ca:70:d1:f5:81:23:f5:80:
00:bd:0a:bd:63:aa:92:68:fe:ff:70:e6:15:d7:fa:61:26:87:
61:d5:bc:20:1d:a6:80:cc:dc:33:ac:48:8b:cc:1d:63:7b:8e:
08:e9:e1:b7:23:75:eb:8b:dc:56:fd:ee:e6:5b:23:84:ea:a0:
5f:4e:c2:3a:fc:da:51:40:00:58:47:bd:8d:27:cb:8f:f2:d7:
af:86:80:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:21 2025 by rpki-client