Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/qt_Z2wCGA0A9YmfnQnZ7p27MZyg.roa
File: qt_Z2wCGA0A9YmfnQnZ7p27MZyg.roa (raw, json)
Hash identifier: FGD/Vy+4zovM3KuGAkxgyqfG1/qifvorP4gPjMkt/NA=
Subject key identifier: AA:DF:D9:DB:00:86:03:40:3D:62:67:E7:42:76:7B:A7:6E:CC:67:28
Certificate issuer: /CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Certificate serial: 018E57C13C06EFE623313C715EF33ACF561F
Authority key identifier: 96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/qt_Z2wCGA0A9YmfnQnZ7p27MZyg.roa
Signing time: Tue 19 Mar 2024 17:27:45 +0000
ROA not before: Tue 19 Mar 2024 17:27:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 5.42.72.0/21 maxlen: 21
5.42.80.0/21 maxlen: 21
5.42.94.0/23 maxlen: 23
5.42.100.0/23 maxlen: 23
5.42.102.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:57:c1:3c:06:ef:e6:23:31:3c:71:5e:f3:3a:cf:56:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96062f5ddb18f96d78492b3538d7745cc4714a26
Validity
Not Before: Mar 19 17:27:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aadfd9db008603403d6267e742767ba76ecc6728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:96:01:53:75:be:0b:a4:f1:9c:af:2c:cd:57:
cd:2f:52:3b:8e:04:6a:e1:24:ad:c6:7b:fe:79:05:
2b:a9:40:ab:d1:b2:2d:b4:1f:bc:af:04:49:07:cb:
be:a5:d5:94:7d:1b:bb:a9:c8:a8:54:79:48:a9:f6:
a5:4a:70:26:30:4c:d0:7d:ec:cf:96:e5:a7:8e:bc:
d2:e2:97:d7:41:e0:9c:5e:b4:05:34:36:0d:a3:d5:
97:66:d9:f0:58:ee:dc:8b:fd:83:9e:41:3d:66:f1:
d6:b0:45:89:80:57:ff:8f:0d:79:d4:d1:a8:97:67:
2f:58:de:b5:41:98:01:8d:fa:3b:f9:33:54:52:d8:
8f:bf:d4:fd:b8:0a:ce:b4:f7:20:f9:4c:59:ca:44:
22:b2:dc:34:7f:f3:b1:7e:8a:4a:be:f2:42:6d:a8:
b2:18:3e:7d:21:9e:a7:4e:1b:2a:60:88:f4:b7:90:
e5:47:8d:3e:3a:14:70:48:f0:98:bc:5f:53:8e:60:
c4:3f:43:3e:54:b5:16:52:5c:17:93:18:7c:82:27:
88:32:ff:02:b1:48:8f:04:7f:be:6a:2f:f4:0e:15:
b1:9c:76:36:b4:11:21:db:9c:b0:e8:2a:a3:39:2c:
1b:35:60:ff:4a:94:37:50:9a:21:3d:2d:0e:12:ff:
03:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DF:D9:DB:00:86:03:40:3D:62:67:E7:42:76:7B:A7:6E:CC:67:28
X509v3 Authority Key Identifier:
keyid:96:06:2F:5D:DB:18:F9:6D:78:49:2B:35:38:D7:74:5C:C4:71:4A:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lgYvXdsY-W14SSs1ONd0XMRxSiY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/qt_Z2wCGA0A9YmfnQnZ7p27MZyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/e05975-da8e-460b-9ebb-3fcb5f3f3c59/1/lgYvXdsY-W14SSs1ONd0XMRxSiY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.42.72.0-5.42.87.255
5.42.94.0/23
5.42.100.0/22
Signature Algorithm: sha256WithRSAEncryption
34:9d:4b:59:87:aa:92:7f:6c:77:ae:99:52:ee:96:b8:1f:50:
2f:56:4f:58:48:76:3b:7c:26:10:29:ed:a1:19:a9:b4:f5:26:
2c:33:09:11:ee:a5:5e:c9:93:5c:ad:40:93:3e:e1:68:08:ff:
03:c9:e0:83:c0:56:73:99:71:41:59:7f:df:74:69:0f:db:3f:
5b:d5:0c:af:1d:e8:f9:1f:10:7d:42:67:8e:3c:4c:a4:0f:10:
bc:53:a2:c5:4f:4c:cf:bd:d7:57:68:21:25:ea:6b:62:27:ab:
d9:6a:d0:6d:63:ab:50:cb:ab:f2:ac:1a:11:15:c4:4e:78:01:
91:b9:e1:32:76:46:80:a6:73:e2:02:28:02:64:d5:0c:1f:30:
9d:6b:59:a6:b1:88:45:72:7f:79:60:db:52:75:24:95:6e:02:
a6:9e:3a:26:44:a1:27:ad:6f:30:46:5a:b4:d8:7b:c5:d9:e9:
d4:63:38:df:53:d5:31:2d:c7:d9:f9:8d:b3:94:3a:d3:17:8d:
9a:fa:1d:e9:bf:30:ea:e2:8c:97:78:ee:f9:5d:bb:a0:84:a9:
fd:f7:79:c9:c6:21:b3:a5:8e:b7:a7:fb:5b:63:2a:99:88:8e:
40:db:d3:29:3d:43:d6:8c:51:f2:31:65:f1:1d:c3:d9:95:e5:
d7:00:c9:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:51 2025 by rpki-client