Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/qd-wHflT1W5Uh1OvqeaUGo08WJk.roa
File: qd-wHflT1W5Uh1OvqeaUGo08WJk.roa (raw, json)
Hash identifier: G9nD1hbUj98EUh6LgOZegklP6ybwuRC9JMmIQ0QCPnQ=
Subject key identifier: A9:DF:B0:1D:F9:53:D5:6E:54:87:53:AF:A9:E6:94:1A:8D:3C:58:99
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0195C3D23B88495846A8EF5F856B530ABDEB
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/qd-wHflT1W5Uh1OvqeaUGo08WJk.roa
Signing time: Sun 23 Mar 2025 16:24:49 +0000
ROA not before: Sun 23 Mar 2025 16:24:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61317
IP address blocks: 45.149.24.0/24 maxlen: 24
89.21.86.0/24 maxlen: 24
89.251.18.0/24 maxlen: 24
89.251.31.0/24 maxlen: 24
109.122.43.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:c3:d2:3b:88:49:58:46:a8:ef:5f:85:6b:53:0a:bd:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Mar 23 16:24:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9dfb01df953d56e548753afa9e6941a8d3c5899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:28:75:f1:4c:c2:75:71:6b:6b:a8:3b:c9:e2:
40:72:25:ba:a9:4d:e7:ab:44:5e:6f:ec:3c:e0:0f:
4c:8b:cf:a5:c5:49:f1:8b:42:16:fe:8c:d9:6f:d5:
78:16:08:56:fc:f5:6f:e6:2b:1c:e0:b8:af:1e:6e:
8e:57:15:e4:6a:56:64:6f:83:c3:a5:69:54:3b:c1:
7a:9e:c3:9e:69:30:38:77:c8:82:53:25:b6:a2:bb:
d1:b0:e3:df:b7:96:a4:5a:29:d0:8d:f9:f9:f4:24:
fd:be:1d:15:17:f6:e9:11:40:9c:87:1a:23:44:c5:
29:28:ba:54:0e:17:4f:5d:aa:17:56:28:5e:19:6b:
8f:ce:6e:22:6b:76:ad:67:b1:83:fc:f7:03:a0:97:
d5:25:45:98:d4:42:d7:bb:3b:dc:d4:29:b8:0c:64:
91:1d:60:61:e9:63:e1:ff:f0:40:fb:90:c2:be:d9:
12:86:6f:dc:fe:40:d9:de:15:93:3a:2e:3d:a9:39:
7f:01:bb:cd:75:de:f1:65:7d:ae:d6:8a:ef:1a:6e:
e3:16:65:6b:f0:7d:43:f3:5d:c8:f7:a4:b6:4e:e0:
3e:2a:2f:2b:85:30:df:4c:12:37:1c:a7:4a:25:09:
75:84:5f:33:d8:1f:20:2d:32:d3:46:75:d0:97:3c:
b1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DF:B0:1D:F9:53:D5:6E:54:87:53:AF:A9:E6:94:1A:8D:3C:58:99
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/qd-wHflT1W5Uh1OvqeaUGo08WJk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.24.0/24
89.21.86.0/24
89.251.18.0/24
89.251.31.0/24
109.122.43.0/24
Signature Algorithm: sha256WithRSAEncryption
25:59:65:45:63:65:fc:17:b1:01:45:27:f1:81:a4:00:9d:fc:
1f:1c:45:56:e7:44:91:29:5f:d3:6a:f8:f5:ac:a4:ca:03:38:
40:1f:ee:5d:a2:27:8e:f6:d5:37:59:a4:e9:ce:f2:9e:ea:06:
84:9d:c5:03:e3:7b:a9:81:b8:16:ea:18:1a:96:fb:25:36:38:
bb:37:54:2e:5e:fc:4a:6a:46:68:ae:82:70:70:98:fc:ab:00:
15:17:1c:51:c5:f5:9e:f7:9d:fb:e8:2a:4c:b4:0a:f4:67:87:
d5:93:4e:b5:5f:4d:33:bb:82:d1:e4:90:c7:d8:ec:8a:a1:30:
eb:d6:75:ab:f1:80:7a:2c:e5:9c:04:06:20:21:ef:a8:39:90:
9a:3f:9b:58:bd:39:18:70:88:c0:dc:ad:64:62:d3:36:d9:63:
3d:88:4e:bc:57:58:af:8f:db:8f:5d:1b:56:51:60:9d:2e:d8:
a6:62:aa:b1:2d:90:be:02:25:c9:4c:01:41:6f:53:31:1f:bf:
99:6f:1d:be:2e:91:c3:08:e4:c2:1d:4a:40:c7:b5:97:59:3c:
fd:12:4c:51:96:19:51:7f:be:aa:9d:2a:14:e3:53:3e:29:31:
18:78:98:03:19:0f:be:98:7d:9d:64:18:da:14:df:66:5d:41:
17:16:54:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:08:15 2025 by rpki-client