Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/qigZWtFurHaD054OcaOqq49am_w.roa
File: qigZWtFurHaD054OcaOqq49am_w.roa (raw, json)
Hash identifier: Sa19eTl0ldE9k7oxfeYcou5g3EZnF3X8bF0Hbur3zdE=
Subject key identifier: AA:28:19:5A:D1:6E:AC:76:83:D3:9E:0E:71:A3:AA:AB:8F:5A:9B:FC
Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Certificate serial: 01941FFA997E078682FD4181C5DB0538170F
Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/qigZWtFurHaD054OcaOqq49am_w.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6461
IP address blocks: 5.182.120.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:99:7e:07:86:82:fd:41:81:c5:db:05:38:17:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa28195ad16eac7683d39e0e71a3aaab8f5a9bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:44:82:0b:a1:86:03:d1:ba:15:6e:5b:10:e1:
15:a6:cc:35:d6:96:ed:ee:63:5a:cb:43:9d:1d:70:
ac:e6:db:91:92:ae:4c:7a:7d:04:73:01:46:95:05:
83:1c:ee:df:5a:eb:23:0c:65:fd:02:d1:bf:d5:49:
3f:f7:ad:af:d7:70:7f:c5:38:01:df:e3:d3:55:7d:
46:f0:5e:ec:d7:95:15:c5:ce:a0:6e:de:66:e6:a7:
37:16:60:12:e3:d6:61:0b:56:0f:c1:b3:6c:e8:b8:
be:97:02:ec:cd:91:f5:9a:22:cb:3e:68:04:f3:12:
87:58:c7:c1:68:60:b3:c6:13:2d:94:fc:3a:20:05:
db:1c:75:4e:eb:b2:7f:53:93:16:40:21:3c:c3:dc:
79:ec:71:0f:11:c8:6a:a8:94:92:9b:08:47:fd:5a:
95:cc:a4:d3:29:57:31:04:55:cf:83:64:86:e9:5d:
b8:55:16:00:63:64:b2:d2:37:a2:69:35:f6:5c:9d:
7d:9d:c5:1a:e0:74:87:20:4d:78:ed:00:04:ba:2d:
4b:c0:55:2e:01:e0:87:1e:15:7c:76:c3:b2:4e:b5:
e9:73:16:13:4b:3e:3f:e2:67:a3:50:2b:ec:dc:59:
43:01:7c:4d:4c:53:df:ef:85:9d:65:ad:06:12:c2:
6c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:28:19:5A:D1:6E:AC:76:83:D3:9E:0E:71:A3:AA:AB:8F:5A:9B:FC
X509v3 Authority Key Identifier:
keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/qigZWtFurHaD054OcaOqq49am_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.120.0/22
Signature Algorithm: sha256WithRSAEncryption
27:4c:11:36:01:e1:a3:05:ca:fb:a1:e2:78:9d:fb:b2:5d:14:
93:95:27:db:5c:d0:c3:73:92:75:55:18:4d:d1:98:c4:e3:c8:
3d:6e:8e:be:90:35:fa:17:fa:2c:5a:4a:4f:31:e1:29:34:4c:
42:02:e4:69:c1:6c:eb:25:7a:57:fc:98:7f:0a:68:b9:a7:4d:
a1:83:c3:31:74:12:c1:26:1a:c5:39:54:86:75:1c:d0:9b:a1:
ba:7c:ce:aa:39:22:c7:6b:bd:a9:d8:58:93:37:e4:c6:f2:44:
b5:40:a8:21:97:e7:a3:5d:6b:00:87:4a:b8:c7:8e:6a:c6:d5:
ac:4e:63:4e:c7:22:d5:18:ad:a5:d3:d6:30:1c:b7:12:9c:bb:
6e:2c:08:ae:cf:71:61:93:2d:fe:f4:5d:b6:67:ce:a8:a1:e5:
f9:29:5d:ad:8b:5a:a0:85:fd:d4:83:5c:ae:cb:43:08:19:b1:
18:a6:74:0c:79:8f:0e:53:16:53:2e:86:c9:4f:33:de:95:0d:
72:53:0d:72:c7:e0:8d:fa:e4:96:42:7c:20:fb:d1:18:ac:ce:
e9:a1:22:03:15:b6:f9:54:ac:c9:2c:44:1d:db:39:48:6b:66:
82:5c:1e:d5:8b:74:dc:18:9f:ba:be:86:e0:d0:27:e0:5e:81:
3d:df:ad:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:27 2025 by rpki-client