Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qrIqUlAupxfvCdt9ifdUcroRM3Q.roa
File: qrIqUlAupxfvCdt9ifdUcroRM3Q.roa (raw, json)
Hash identifier: 6hFobn7lCcWIQuCCiZmH+pfmoFWXWT7NVbau5HvQRr4=
Subject key identifier: AA:B2:2A:52:50:2E:A7:17:EF:09:DB:7D:89:F7:54:72:BA:11:33:74
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 0194221FFD6F335FBBBDD677509FB3F5F24B
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qrIqUlAupxfvCdt9ifdUcroRM3Q.roa
Signing time: Wed 01 Jan 2025 13:48:29 +0000
ROA not before: Wed 01 Jan 2025 13:48:29 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44103
IP address blocks: 5.83.149.0/24 maxlen: 24
77.90.23.0/24 maxlen: 24
178.18.152.0/22 maxlen: 32
178.18.152.0/24 maxlen: 32
178.18.153.0/24 maxlen: 32
178.18.154.0/24 maxlen: 32
178.18.155.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:fd:6f:33:5f:bb:bd:d6:77:50:9f:b3:f5:f2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jan 1 13:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aab22a52502ea717ef09db7d89f75472ba113374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:fd:cd:81:90:d7:49:bd:71:3f:07:8b:10:65:
ce:5c:3e:f5:d6:bb:cb:a2:38:65:c5:cc:70:b3:20:
53:cb:c1:44:a2:9c:e2:80:d1:e9:e4:ad:8e:98:40:
b2:24:2e:d0:4a:8e:be:48:75:38:2b:e0:f5:ec:f8:
72:e3:90:06:a6:10:da:e8:47:42:7c:63:09:77:80:
d8:d9:26:ac:21:b2:18:06:7d:60:5b:a7:5f:73:8b:
63:e3:d8:1a:67:a6:3c:af:c4:34:b4:1f:1a:b7:9b:
9c:38:2b:df:43:58:f5:df:b0:67:1e:4d:61:e5:08:
c1:24:68:f6:47:fd:02:2d:8a:4e:b8:77:bf:d1:85:
f8:e2:6c:a2:3c:ef:eb:5e:7e:2c:99:c8:63:89:79:
4d:6a:10:e2:73:75:7f:3e:ac:fa:ac:42:b0:9d:c9:
2b:17:5b:9a:84:16:57:cb:5a:be:a2:89:c7:fe:be:
3a:66:09:2a:01:f3:4a:82:e9:91:3b:11:05:4c:f1:
49:7d:ff:72:d3:0b:ec:7c:1c:1e:8f:04:cd:df:3d:
02:6f:92:7d:18:22:e1:87:69:cf:34:0a:ce:c1:97:
58:5f:bb:72:01:7a:e3:bf:2e:6e:6c:39:56:a2:7a:
79:ff:57:72:34:49:4f:3c:e0:c5:da:59:28:9e:07:
dc:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B2:2A:52:50:2E:A7:17:EF:09:DB:7D:89:F7:54:72:BA:11:33:74
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qrIqUlAupxfvCdt9ifdUcroRM3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.149.0/24
77.90.23.0/24
178.18.152.0/22
Signature Algorithm: sha256WithRSAEncryption
4a:a5:eb:ff:f1:4d:02:d1:00:38:26:d7:c7:14:ce:a6:48:7d:
5e:0a:3e:e1:b3:60:c8:6e:87:13:ac:05:fa:1f:2d:35:54:3f:
f5:4b:b0:c8:6f:58:db:02:b6:44:74:b6:12:69:50:6f:fd:0e:
08:76:c0:43:73:77:89:00:c8:7b:03:cd:25:d8:ac:1a:a0:d2:
fd:1f:6d:5f:f8:3d:08:71:d6:61:87:92:d5:0a:68:c1:93:40:
c3:ef:dc:21:0d:e8:80:da:a8:62:64:d5:cb:e5:4b:2f:99:f5:
7d:02:ae:1f:f1:be:43:f9:b6:a6:5a:e5:28:9e:5e:e9:25:2f:
01:e2:43:df:58:08:b2:ec:d2:67:7b:04:89:dd:7c:4a:95:7c:
05:b8:ab:74:68:6a:ef:04:42:5d:48:e2:14:41:e8:e6:9b:7b:
e2:7a:c2:01:e0:36:6e:e5:3d:f1:3d:a8:1c:48:69:fc:78:e3:
81:0e:81:04:9b:cc:e2:ed:51:77:f2:44:72:e4:b6:f6:c8:cd:
52:fb:e3:bb:50:3f:3f:42:16:73:ea:f0:0b:e8:f5:8e:dd:1c:
23:05:ee:b1:c4:e1:e5:c3:a9:ec:10:eb:40:66:4e:03:f4:99:
23:81:9d:75:66:da:fc:01:b0:fa:48:fb:f2:ed:15:2c:48:1d:
b9:59:cf:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:23:00 2025 by rpki-client