Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/qjMWC-5cgR3_FzvTJ8fV4seYOFk.roa
File: qjMWC-5cgR3_FzvTJ8fV4seYOFk.roa (raw, json)
Hash identifier: fwjzyDVkTfLPWzdH9pq6+z0fYQ+pKyYb7cgFc8eFsFw=
Subject key identifier: AA:33:16:0B:EE:5C:81:1D:FF:17:3B:D3:27:C7:D5:E2:C7:98:38:59
Certificate issuer: /CN=279159ef22f82b936731664ee67c3b6ea96ef443
Certificate serial: 019420D61AF9D02396E2CFE06E6F88DF242D
Authority key identifier: 27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/qjMWC-5cgR3_FzvTJ8fV4seYOFk.roa
Signing time: Wed 01 Jan 2025 07:48:10 +0000
ROA not before: Wed 01 Jan 2025 07:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43754
IP address blocks: 5.22.192.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:1a:f9:d0:23:96:e2:cf:e0:6e:6f:88:df:24:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279159ef22f82b936731664ee67c3b6ea96ef443
Validity
Not Before: Jan 1 07:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa33160bee5c811dff173bd327c7d5e2c7983859
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:8d:2e:e0:e0:2c:95:48:65:3f:16:b1:6f:
8a:23:c9:37:bd:f1:99:04:19:f7:8e:f6:18:40:61:
93:22:26:26:66:67:13:94:6e:e3:30:6b:5f:e6:50:
61:d5:78:2e:f0:93:60:ed:a7:8e:37:a3:6b:e9:96:
70:87:1b:b2:4f:19:1c:a1:e1:96:05:4f:6f:d3:4e:
93:7f:e2:46:87:9e:47:38:db:1e:63:d6:97:68:e9:
35:60:1c:1b:d6:fb:1a:a1:a1:84:b5:42:95:a7:00:
5a:17:b4:04:56:98:e9:99:fc:65:d1:07:a9:88:12:
8c:3f:dc:0b:ab:6e:35:bb:08:e7:ee:5a:68:1e:c0:
20:aa:42:eb:3a:bf:53:09:ae:fe:30:ac:43:7f:4c:
6c:e6:4e:bc:b8:cd:50:9f:5e:10:cf:a8:14:aa:16:
85:75:48:d6:49:ee:ff:1d:13:52:60:e3:d7:52:e1:
0a:4a:d8:1d:9e:c9:cc:0d:08:82:fd:34:c0:90:94:
f2:1e:f6:f1:dd:e7:58:af:a5:56:0c:13:fd:51:9f:
96:6b:8f:aa:82:ab:67:9b:94:89:c9:b2:6f:e0:ce:
f7:53:50:44:89:57:aa:87:04:43:e8:d9:3e:f7:f3:
2d:f7:10:93:3b:52:18:40:ad:6a:4b:85:4f:3b:88:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:33:16:0B:EE:5C:81:1D:FF:17:3B:D3:27:C7:D5:E2:C7:98:38:59
X509v3 Authority Key Identifier:
keyid:27:91:59:EF:22:F8:2B:93:67:31:66:4E:E6:7C:3B:6E:A9:6E:F4:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/qjMWC-5cgR3_FzvTJ8fV4seYOFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/5c15be-aef2-4c31-bfb4-31baf6eede8a/1/J5FZ7yL4K5NnMWZO5nw7bqlu9EM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.22.192.0/21
Signature Algorithm: sha256WithRSAEncryption
60:2f:5d:b9:1a:93:51:d8:ad:0d:94:e6:ca:f1:62:64:de:da:
78:04:53:86:40:cc:d7:97:45:fc:de:cf:7a:90:80:3e:9c:60:
5f:d3:b1:c5:f0:d0:f6:4a:b9:eb:6a:a5:2d:0c:ab:78:fc:ed:
5f:9a:10:6e:61:10:cf:35:27:ff:99:c0:ae:0d:cb:39:11:26:
c0:ef:a9:52:48:61:f6:0f:c1:81:4b:6d:18:dc:00:f2:b0:16:
69:c0:35:72:41:ac:db:a9:59:20:c0:c9:e7:23:f9:9d:0d:bd:
f6:37:c4:5d:99:c7:cb:46:5b:4d:f7:1d:a8:57:84:02:3b:55:
ae:97:13:9e:5c:b5:ac:57:42:67:f7:71:80:e2:b5:b6:55:b7:
c2:4a:0c:fb:cd:69:d7:08:9d:9b:25:a4:9c:8b:59:ef:03:5e:
5c:8a:15:8c:12:00:1c:44:f5:0d:c2:6a:f2:cb:b6:98:e6:ed:
bf:2f:92:f5:dc:71:9f:b3:2c:97:af:7b:d1:84:2b:fc:fe:38:
df:3a:b0:56:6b:1f:58:4d:c5:d3:ac:56:98:d2:22:b2:91:e9:
1f:8f:46:0f:71:9c:5d:0b:6c:b6:5a:de:30:32:f3:34:fb:a7:
3f:54:d9:b6:64:4d:88:a6:ab:a1:d1:cb:d1:84:e9:d2:39:2e:
99:c4:d0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 03:49:08 2025 by rpki-client