Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/qaBXI4wwGXreuW0Ec50OaM6eig8.roa
File: qaBXI4wwGXreuW0Ec50OaM6eig8.roa (raw, json)
Hash identifier: QyvTL1zDVNiNDlo1UO2uwprzV09ftV1cWpvfl0kl1WY=
Subject key identifier: A9:A0:57:23:8C:30:19:7A:DE:B9:6D:04:73:9D:0E:68:CE:9E:8A:0F
Certificate issuer: /CN=52056867e4d2885e99b549ed6fb786330adf8f44
Certificate serial: 0194258F710A78C34292F706798547A5A00F
Authority key identifier: 52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/qaBXI4wwGXreuW0Ec50OaM6eig8.roa
Signing time: Thu 02 Jan 2025 05:49:05 +0000
ROA not before: Thu 02 Jan 2025 05:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12990
IP address blocks: 37.26.160.0/21 maxlen: 21
141.105.16.0/21 maxlen: 21
185.104.64.0/24 maxlen: 24
195.88.186.0/24 maxlen: 24
195.88.187.0/24 maxlen: 24
213.180.128.0/21 maxlen: 21
213.180.136.0/24 maxlen: 24
213.180.137.0/24 maxlen: 24
213.180.138.0/23 maxlen: 23
213.180.140.0/24 maxlen: 24
213.180.141.0/24 maxlen: 24
213.180.142.0/23 maxlen: 23
213.180.144.0/23 maxlen: 23
213.180.146.0/23 maxlen: 23
213.180.148.0/23 maxlen: 23
213.180.150.0/24 maxlen: 24
213.180.151.0/24 maxlen: 24
213.180.152.0/24 maxlen: 24
213.180.153.0/24 maxlen: 24
213.180.154.0/24 maxlen: 24
2a02:c10::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:71:0a:78:c3:42:92:f7:06:79:85:47:a5:a0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52056867e4d2885e99b549ed6fb786330adf8f44
Validity
Not Before: Jan 2 05:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9a057238c30197adeb96d04739d0e68ce9e8a0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:eb:72:24:83:bf:ff:8b:0b:4f:bb:26:37:86:
d9:1e:58:ba:e8:05:d9:07:e6:f3:48:73:62:63:37:
12:97:d3:26:e3:0c:1c:01:55:59:11:be:45:fa:09:
03:b4:e7:37:8b:12:b3:07:94:e2:30:84:88:7d:28:
c8:3e:9e:a1:94:b9:fe:6f:33:c9:d3:be:19:61:18:
a9:d6:63:af:6d:02:a2:dc:1e:50:f3:d4:19:b3:c1:
2e:2d:5e:d7:ee:13:b0:e4:0b:2a:c0:93:68:f9:08:
70:0f:6c:15:0a:83:e7:f4:8f:aa:3d:7a:43:fb:9a:
a1:a9:31:8e:90:8c:97:ef:bc:73:d9:c7:d6:ff:66:
be:13:0f:77:ab:c9:1b:7d:ee:6b:32:4c:dc:dd:3c:
db:17:da:97:88:63:f9:ea:9f:9c:f5:75:cb:46:df:
df:60:74:5f:8c:bd:79:7c:87:27:ef:ac:ff:8d:0c:
ac:47:e0:8c:7e:0a:89:f6:65:b5:50:25:d6:a6:6f:
63:a2:45:0a:48:3a:2b:aa:3d:62:e3:d5:2f:c2:d3:
b2:c7:e9:a0:ec:52:35:2b:54:f6:5a:e8:b4:c1:82:
f9:c6:2f:be:9c:e2:fd:ca:dc:3a:24:35:9e:d5:36:
dd:6c:54:78:be:48:6b:1f:29:32:22:de:2e:dd:4a:
98:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A0:57:23:8C:30:19:7A:DE:B9:6D:04:73:9D:0E:68:CE:9E:8A:0F
X509v3 Authority Key Identifier:
keyid:52:05:68:67:E4:D2:88:5E:99:B5:49:ED:6F:B7:86:33:0A:DF:8F:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/qaBXI4wwGXreuW0Ec50OaM6eig8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/b27d45-08cc-47a1-ac5a-5f4836083a30/1/UgVoZ-TSiF6ZtUntb7eGMwrfj0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.26.160.0/21
141.105.16.0/21
185.104.64.0/24
195.88.186.0/23
213.180.128.0-213.180.154.255
IPv6:
2a02:c10::/32
Signature Algorithm: sha256WithRSAEncryption
da:ca:6b:51:58:4d:92:48:a8:37:c4:ce:21:98:55:c6:51:9b:
2b:2a:f1:c3:10:68:58:3c:26:70:f9:b8:e1:ee:2e:5b:bc:9f:
cb:0a:43:44:b8:03:5c:28:f4:68:68:db:8e:bb:2a:a8:80:f6:
99:35:54:53:af:a2:ed:db:db:7d:7e:2f:7e:56:24:15:0f:ba:
3c:a5:87:9d:da:69:81:c7:7a:18:5b:7e:75:3b:22:b2:01:99:
4c:82:bf:d1:82:c6:ce:fc:1c:40:94:6f:10:10:65:db:14:42:
41:cc:6c:9c:d8:62:39:5f:19:94:c2:af:cb:66:a8:04:da:bb:
5b:08:ba:ed:34:c8:ad:58:5f:74:a4:b3:1d:e8:ea:60:3c:ce:
ab:3a:04:d3:a8:bc:70:88:92:1f:98:81:63:ae:46:02:ed:cd:
83:73:9f:0c:84:07:a8:06:71:ad:94:78:a1:3e:68:6b:46:c0:
31:7b:3a:19:a2:5e:af:51:06:5a:dd:61:ac:ff:c0:e1:1d:53:
9c:6a:eb:05:d6:5f:fb:d3:22:9f:ce:b1:d4:cd:16:45:26:8d:
db:13:1c:27:c9:27:d4:c6:04:95:01:9b:80:5c:df:0d:07:20:
93:c8:63:b3:55:77:11:80:5f:62:d1:e1:b2:54:b5:94:58:66:
79:22:f3:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:07:21 2025 by rpki-client