Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/qW4XqeEJAz2-8OT7mnEXYXShjc4.roa
File: qW4XqeEJAz2-8OT7mnEXYXShjc4.roa (raw, json)
Hash identifier: 10srlJKwUidKjLqdQk+sAndy64HLx43+huFi1jyYsos=
Subject key identifier: A9:6E:17:A9:E1:09:03:3D:BE:F0:E4:FB:9A:71:17:61:74:A1:8D:CE
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 018235DCDD26532480FF718CBACB9D581B09
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/qW4XqeEJAz2-8OT7mnEXYXShjc4.roa
Signing time: Mon 25 Jul 2022 14:57:23 +0000
ROA not before: Mon 25 Jul 2022 14:57:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 400377
IP address blocks: 152.89.250.0/24 maxlen: 24
152.89.249.0/24 maxlen: 24
45.158.8.0/22 maxlen: 22
195.206.235.0/24 maxlen: 24
176.105.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:35:dc:dd:26:53:24:80:ff:71:8c:ba:cb:9d:58:1b:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: Jul 25 14:57:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a96e17a9e109033dbef0e4fb9a71176174a18dce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:07:d8:9c:91:3d:56:6b:7c:ec:d3:7a:66:54:
16:9f:b0:a2:7f:98:26:9c:3f:4d:d1:5f:a9:32:7b:
e7:34:94:d7:0c:ab:42:d4:b2:54:1e:02:0a:dd:a7:
fa:76:f7:51:59:42:d7:70:14:59:58:a9:a8:23:7b:
fe:f5:e2:55:7e:77:3f:62:c7:d7:64:74:4a:95:d2:
e5:a6:c0:f0:89:6e:20:00:aa:3d:a2:0a:95:3d:4a:
95:c7:cc:1e:b9:d2:8e:ee:dd:6d:9b:55:e7:55:21:
6b:c1:b4:53:83:7f:20:f5:d8:d7:aa:8b:9b:07:b3:
99:1b:16:ba:d1:d5:07:6e:85:1b:46:aa:04:2f:4c:
ef:72:35:54:4d:f3:92:2b:f5:bb:8e:af:f0:fb:06:
da:10:8b:bd:1b:0f:43:fb:1b:f7:ce:84:51:ab:cf:
00:c3:ae:d0:a7:65:ae:e0:ed:10:b4:9e:ae:44:3e:
9a:bc:30:84:d4:0a:ab:58:fa:fb:29:61:47:74:9b:
ec:10:2b:ce:fd:07:76:91:1a:6e:ca:ad:fe:2b:95:
32:e5:6b:57:72:f7:ac:2a:b4:23:bd:c3:6e:54:b1:
d3:dd:82:fd:7e:73:ea:f1:c1:eb:a8:03:1d:ac:ef:
e2:18:0c:9a:f6:2a:14:5f:6d:bd:24:be:fa:ef:6f:
88:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6E:17:A9:E1:09:03:3D:BE:F0:E4:FB:9A:71:17:61:74:A1:8D:CE
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/qW4XqeEJAz2-8OT7mnEXYXShjc4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.8.0/22
152.89.249.0-152.89.250.255
176.105.224.0/24
195.206.235.0/24
Signature Algorithm: sha256WithRSAEncryption
78:d5:66:01:e5:b6:05:b7:cf:a1:23:de:6f:a8:a8:fd:7f:aa:
bb:86:b2:66:9c:79:5c:d0:1c:3e:86:53:8e:74:ed:6d:d9:dc:
72:dd:30:3c:62:2c:9c:71:e6:75:fc:85:cc:1b:09:b6:a5:3e:
6f:99:61:70:91:5f:ad:45:6e:98:11:29:fe:41:13:84:29:29:
60:73:65:87:e6:08:be:f7:af:f9:cc:26:1d:cd:b9:37:62:95:
97:13:ca:da:d7:94:a6:81:a3:dd:ca:10:36:a3:07:27:7f:9f:
46:c0:05:24:fb:8f:22:c4:47:2d:b6:47:32:43:3b:14:36:48:
d5:99:4b:01:84:bf:78:1b:fe:98:e0:4b:50:b0:d7:2d:fd:25:
23:2f:00:b7:a7:0d:19:2d:bf:2d:7a:c8:bb:af:27:7a:69:2a:
5f:28:5d:24:24:ce:e1:15:cc:fa:f5:49:20:c4:91:74:ac:ae:
eb:3d:d7:1d:1d:ad:93:ad:c8:fd:ad:15:0f:e5:72:4d:e6:2a:
3d:1a:19:af:27:d8:de:44:e9:37:40:ba:48:f4:65:da:54:18:
55:d8:ca:a3:d7:c0:f9:c5:6a:14:da:9a:0e:5a:e9:fe:3c:ba:
bf:33:7a:ce:ec:08:47:4e:4b:29:fd:6a:6c:7a:27:ea:c7:ba:
84:9e:01:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:24:16 2025 by rpki-client