Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/sqdOc7-M7QU86XO1yAKiwMuvsco.roa
File: sqdOc7-M7QU86XO1yAKiwMuvsco.roa (raw, json)
Hash identifier: 4t7FQR32kz8QRW7VeCwZCRvr2/GExaIS17Ti7Kq3gb8=
Subject key identifier: B2:A7:4E:73:BF:8C:ED:05:3C:E9:73:B5:C8:02:A2:C0:CB:AF:B1:CA
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01952F3C1AB5A3F62E58A1D8EC78FF5FE4B0
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/sqdOc7-M7QU86XO1yAKiwMuvsco.roa
Signing time: Sat 22 Feb 2025 19:57:02 +0000
ROA not before: Sat 22 Feb 2025 19:57:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8342
IP address blocks: 147.45.38.0/24 maxlen: 24
147.45.39.0/24 maxlen: 24
147.45.61.0/24 maxlen: 24
147.45.62.0/24 maxlen: 24
147.45.63.0/24 maxlen: 24
147.45.88.0/21 maxlen: 21
147.45.117.0/24 maxlen: 24
147.45.120.0/22 maxlen: 22
147.45.127.0/24 maxlen: 24
147.45.205.0/24 maxlen: 24
193.233.60.0/24 maxlen: 24
193.233.62.0/24 maxlen: 24
193.233.124.0/22 maxlen: 24
193.233.170.0/24 maxlen: 24
193.233.236.0/24 maxlen: 24
193.233.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:2f:3c:1a:b5:a3:f6:2e:58:a1:d8:ec:78:ff:5f:e4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 22 19:57:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b2a74e73bf8ced053ce973b5c802a2c0cbafb1ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:29:46:5d:ca:b2:6c:3c:01:08:25:05:72:09:
39:1c:0f:50:c5:1e:bf:7e:15:ec:43:e0:bd:26:a8:
a9:e7:01:e8:7d:f8:7c:4c:b8:67:52:90:60:a8:dd:
19:0e:31:3a:fc:85:bc:c3:00:c2:0d:d8:f7:9f:7b:
28:0a:f7:90:97:22:aa:1a:ff:bd:b5:f5:f1:40:24:
50:45:ba:04:be:47:30:3a:2d:c4:1d:c3:dc:cd:df:
01:d9:d9:97:87:9e:55:27:ff:98:11:d3:02:dc:f4:
37:8d:62:a3:db:36:e0:e5:a2:d9:bc:07:a9:57:f8:
84:38:36:2d:a0:1c:23:8e:cf:cf:c1:e1:0e:6b:a6:
01:6c:23:d1:40:d7:19:4d:94:03:47:e0:e5:d3:cf:
67:d9:b6:37:ad:e0:c4:81:60:43:cb:e3:de:85:b9:
ea:f4:b8:87:93:9b:8c:85:7d:81:f0:8c:89:a0:63:
7b:16:86:e2:99:bb:38:dd:bf:13:95:67:b2:32:cf:
e7:5c:d9:4e:1d:73:49:04:52:c4:3e:64:e4:09:72:
20:a1:40:6c:60:0c:be:db:59:fb:25:6d:70:a0:96:
a2:77:29:cb:60:de:9b:73:60:d8:2f:d6:e2:bc:c1:
18:92:16:ff:0e:b9:83:52:95:71:d7:62:db:6d:16:
e6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A7:4E:73:BF:8C:ED:05:3C:E9:73:B5:C8:02:A2:C0:CB:AF:B1:CA
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/sqdOc7-M7QU86XO1yAKiwMuvsco.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.38.0/23
147.45.61.0-147.45.63.255
147.45.88.0/21
147.45.117.0/24
147.45.120.0/22
147.45.127.0/24
147.45.205.0/24
193.233.60.0/24
193.233.62.0/24
193.233.124.0/22
193.233.170.0/24
193.233.236.0/24
193.233.239.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:aa:ff:fd:57:29:a0:ba:14:23:bf:44:6e:df:a3:cc:23:2c:
d1:c2:5b:4f:2a:7d:51:4a:2d:09:82:52:51:1c:73:42:85:c1:
5d:22:6a:31:70:6d:d3:3e:66:9f:01:87:49:47:b7:2b:eb:e5:
85:5a:e0:e0:7b:95:b4:83:da:23:1a:89:6e:31:09:e0:9d:44:
7b:2b:66:e6:42:b2:16:0b:a6:bc:92:28:16:8a:c0:31:ad:ce:
e6:da:1f:69:3f:7d:c2:7c:db:83:75:02:18:62:77:90:27:be:
f3:e2:a1:20:ba:33:3c:5d:e9:06:cc:c5:17:6b:51:e7:ac:85:
88:24:2c:57:23:23:4b:83:24:62:66:01:9c:19:08:60:19:36:
a7:15:09:80:f6:0b:63:83:6d:86:74:0c:bf:0c:2f:b7:9f:b3:
51:fd:51:32:e2:02:50:17:a7:b6:18:34:31:8b:23:44:6f:45:
7b:03:ac:e7:40:80:8b:dc:bc:04:48:96:68:dd:24:84:6e:c2:
c6:cd:b6:44:b9:fc:9b:c8:ef:42:6f:4d:ae:5e:9b:28:cf:44:
52:0c:24:93:b8:ca:8a:f6:58:8e:e1:9d:04:fa:f7:93:a2:c2:
28:c2:ce:c1:a7:77:ec:ad:bb:e5:8e:d4:cb:51:79:8d:69:8c:
bf:22:85:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:09:56 2025 by rpki-client