Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/1qwW0uRF0uaIMOZUzvFdP6iUIGc.roa
File: 1qwW0uRF0uaIMOZUzvFdP6iUIGc.roa (raw, json)
Hash identifier: XnlKdK7HSE5Z4YnaNQLgBs+MxP6gmaSDYHLIExtRWFg=
Subject key identifier: D6:AC:16:D2:E4:45:D2:E6:88:30:E6:54:CE:F1:5D:3F:A8:94:20:67
Certificate issuer: /CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Certificate serial: 0194266B3AC01B5906B12A7261AD20DFA50E
Authority key identifier: A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/1qwW0uRF0uaIMOZUzvFdP6iUIGc.roa
Signing time: Thu 02 Jan 2025 09:49:09 +0000
ROA not before: Thu 02 Jan 2025 09:49:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137
IP address blocks: 192.107.51.0/24 maxlen: 24
192.107.52.0/22 maxlen: 22
192.107.56.0/21 maxlen: 21
192.107.64.0/19 maxlen: 19
192.107.96.0/22 maxlen: 22
192.107.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:3a:c0:1b:59:06:b1:2a:72:61:ad:20:df:a5:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9be16ce7db3be6905b1abef8be21a2319b0e43e
Validity
Not Before: Jan 2 09:49:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d6ac16d2e445d2e68830e654cef15d3fa8942067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:82:f0:ec:ff:bb:4b:f2:6b:fa:9e:e0:32:26:
e6:28:3a:39:19:bd:61:96:61:dc:27:16:a0:37:1a:
6d:6c:9f:f9:48:5b:1b:65:bb:38:5a:6d:ec:9a:4c:
02:85:27:57:3f:db:cd:34:b8:c5:e6:93:48:af:7a:
23:04:ac:7f:de:53:a4:30:6f:e1:6f:b8:e6:b6:a6:
8b:d8:89:63:64:16:62:c4:d8:72:1d:01:21:3b:9b:
1d:7f:d6:74:a5:53:ce:73:07:05:40:f1:1d:2d:e4:
66:fd:4f:14:79:38:a0:ed:d7:9c:2c:f4:e5:18:3b:
15:79:53:6c:4a:0e:ea:bd:89:fb:19:c9:73:ab:60:
ce:6c:f1:60:4d:24:10:d5:37:05:85:d8:91:73:98:
89:a0:6e:9b:57:54:36:f8:14:95:9b:24:bd:ba:a2:
54:47:27:dd:52:aa:0e:6b:5c:33:c5:88:9a:40:4a:
c3:6b:44:03:c1:63:f1:eb:63:93:e3:e7:6a:20:b4:
0f:c0:6a:be:ac:61:5b:7f:68:bb:c8:b3:c3:27:60:
bd:73:aa:44:2e:e5:49:ea:95:0c:88:17:40:b8:e2:
61:92:4c:a3:7d:29:22:d2:76:4e:2a:70:a5:c6:37:
bc:af:fc:c0:24:41:0d:3c:34:9d:f7:32:e3:a8:7c:
87:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AC:16:D2:E4:45:D2:E6:88:30:E6:54:CE:F1:5D:3F:A8:94:20:67
X509v3 Authority Key Identifier:
keyid:A9:BE:16:CE:7D:B3:BE:69:05:B1:AB:EF:8B:E2:1A:23:19:B0:E4:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qb4Wzn2zvmkFsavvi-IaIxmw5D4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/1qwW0uRF0uaIMOZUzvFdP6iUIGc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/16eb59-68a3-4215-809f-79b2e40e2bd8/1/qb4Wzn2zvmkFsavvi-IaIxmw5D4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.107.51.0-192.107.100.255
Signature Algorithm: sha256WithRSAEncryption
59:69:f8:c0:bd:59:94:09:97:2a:fd:f6:d7:55:5c:55:ea:cd:
67:fe:9f:17:65:d1:7f:dc:af:19:df:01:79:3f:b6:16:29:30:
15:be:37:90:3f:df:e7:fc:bb:58:90:fa:96:99:6f:37:fa:4e:
95:98:9e:48:15:79:b5:55:aa:f4:5a:7c:f3:20:fa:3e:e2:a8:
ed:cd:13:b1:f5:73:0c:2f:77:f5:1a:1a:95:0e:f9:af:ec:b1:
0a:4b:ca:25:ba:00:2d:7b:d4:c0:02:63:f8:8c:15:8d:a2:fb:
65:ee:ef:36:fb:2f:d6:1d:ac:0c:b1:03:d2:13:5f:3f:db:20:
ef:71:ca:13:fd:89:ef:4f:0e:04:14:45:fe:08:07:74:46:89:
d5:4b:8d:4c:e7:21:19:25:d9:82:af:93:3b:17:55:0e:37:17:
db:79:e7:d2:43:43:c7:b2:09:b2:be:4c:7f:fa:3f:18:9e:f7:
a5:d4:04:1b:22:15:28:85:66:74:93:35:ce:35:b1:1d:92:da:
ce:4d:5b:57:4f:9d:1b:b8:89:47:29:18:19:3c:6d:ac:76:a0:
79:52:b7:3f:d3:60:d8:24:c4:3a:23:db:cd:1c:8f:97:8e:53:
d7:ae:a2:b5:33:7e:1d:30:1f:66:92:3b:2e:82:0a:85:6a:44:
57:82:89:4d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQmazrAG1kGsSpyYa0g36UOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YmUxNmNlN2RiM2JlNjkwNWIxYWJlZjhiZTIxYTIzMTli
MGU0M2UwHhcNMjUwMTAyMDk0OTA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNmFjMTZkMmU0NDVkMmU2ODgzMGU2NTRjZWYxNWQzZmE4OTQyMDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvILw7P+7S/Jr+p7gMibmKDo5Gb1h
lmHcJxagNxptbJ/5SFsbZbs4Wm3smkwChSdXP9vNNLjF5pNIr3ojBKx/3lOkMG/h
b7jmtqaL2IljZBZixNhyHQEhO5sdf9Z0pVPOcwcFQPEdLeRm/U8UeTig7decLPTl
GDsVeVNsSg7qvYn7Gclzq2DObPFgTSQQ1TcFhdiRc5iJoG6bV1Q2+BSVmyS9uqJU
RyfdUqoOa1wzxYiaQErDa0QDwWPx62OT4+dqILQPwGq+rGFbf2i7yLPDJ2C9c6pE
LuVJ6pUMiBdAuOJhkkyjfSki0nZOKnClxje8r/zAJEENPDSd9zLjqHyH5wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFNasFtLkRdLmiDDmVM7xXT+olCBnMB8GA1UdIwQY
MBaAFKm+Fs59s75pBbGr74viGiMZsOQ+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWI0V3puMnp2bWtGc2F2dmktSWFJeG13NUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xNmViNTktNjhhMy00MjE1LTgwOWYt
NzliMmU0MGUyYmQ4LzEvMXF3VzB1UkYwdWFJTU9aVXp2RmRQNmlVSUdjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xNmViNTktNjhhMy00MjE1LTgwOWYtNzliMmU0MGUyYmQ4
LzEvcWI0V3puMnp2bWtGc2F2dmktSWFJeG13NUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADAazMD
BADAa2QwDQYJKoZIhvcNAQELBQADggEBAFlp+MC9WZQJlyr99tdVXFXqzWf+nxdl
0X/crxnfAXk/thYpMBW+N5A/3+f8u1iQ+paZbzf6TpWYnkgVebVVqvRafPMg+j7i
qO3NE7H1cwwvd/UaGpUO+a/ssQpLyiW6AC171MACY/iMFY2i+2Xu7zb7L9YdrAyx
A9ITXz/bIO9xyhP9ie9PDgQURf4IB3RGidVLjUznIRkl2YKvkzsXVQ43F9t559JD
Q8eyCbK+TH/6Pxie96XUBBsiFSiFZnSTNc41sR2S2s5NW1dPnRu4iUcpGBk8bax2
oHlStz/TYNgkxDoj280cj5eOU9euorUzfh0wH2aSOy6CCoVqRFeCiU0=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:43 2025 by rpki-client