Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/qMk5SWEWxJYoN8Mr9HAsVwJMTQU.roa
File: qMk5SWEWxJYoN8Mr9HAsVwJMTQU.roa (raw, json)
Hash identifier: ZyjeMjKD50/xK3zRAMqvHikBzjpEwTPAttK9PpJQ+ms=
Subject key identifier: A8:C9:39:49:61:16:C4:96:28:37:C3:2B:F4:70:2C:57:02:4C:4D:05
Certificate issuer: /CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Certificate serial: 3525F1F7
Authority key identifier: 40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/qMk5SWEWxJYoN8Mr9HAsVwJMTQU.roa
Signing time: Sat 01 Jan 2022 10:56:42 +0000
ROA not before: Sat 01 Jan 2022 10:56:42 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29259
IP address blocks: 83.170.0.0/18 maxlen: 18
84.11.0.0/16 maxlen: 16
195.158.212.0/22 maxlen: 24
2001:1b10::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 891679223 (0x3525f1f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40a249eadeb2a928fe0c2e75c918248b5a1a28b9
Validity
Not Before: Jan 1 10:56:42 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a8c939496116c4962837c32bf4702c57024c4d05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a4:35:2c:e7:cf:ba:69:99:5f:cc:44:ae:2a:
75:9e:6b:29:e1:a9:e8:00:99:d1:0e:83:c0:2d:02:
aa:d7:b5:7d:b5:a9:b8:45:ef:08:87:fc:e3:d4:42:
d3:00:b3:dc:32:a8:c6:ef:c9:24:31:5f:51:ee:dc:
0d:72:c7:fa:f2:67:06:8e:6f:d1:c4:2b:e6:c8:a6:
4c:09:27:ee:fc:0a:75:85:9e:51:1a:90:5d:65:21:
6a:f5:3c:7e:9e:cc:94:e8:39:43:d2:43:c2:47:1d:
16:14:ef:56:f4:43:7b:14:ee:83:46:aa:3c:b4:0b:
4d:ae:00:76:b0:9f:83:72:3f:fc:5f:ba:9e:69:e7:
c1:e3:04:ed:48:27:2e:68:0d:f6:b0:b1:69:cf:1b:
56:09:79:eb:f2:12:cf:95:7f:e4:bf:9f:3e:01:ac:
3a:97:c0:a2:cb:16:0a:c9:2c:43:00:05:e7:a4:b3:
e9:bf:00:ff:94:6e:4f:17:75:ba:0b:dd:39:27:76:
7e:05:89:17:ad:81:c4:0f:0c:48:a6:ea:87:ec:60:
ef:fc:15:4f:43:51:b0:57:e4:11:4d:fd:5d:36:cd:
53:fc:c3:8a:e9:84:3f:8f:fe:c3:5e:c2:c1:09:d5:
84:70:4d:2b:3e:d5:00:0c:43:eb:c6:01:1c:d8:2b:
c2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C9:39:49:61:16:C4:96:28:37:C3:2B:F4:70:2C:57:02:4C:4D:05
X509v3 Authority Key Identifier:
keyid:40:A2:49:EA:DE:B2:A9:28:FE:0C:2E:75:C9:18:24:8B:5A:1A:28:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QKJJ6t6yqSj-DC51yRgki1oaKLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/qMk5SWEWxJYoN8Mr9HAsVwJMTQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ae5488-119d-40aa-ae40-8330e7e32e19/1/QKJJ6t6yqSj-DC51yRgki1oaKLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.170.0.0/18
84.11.0.0/16
195.158.212.0/22
IPv6:
2001:1b10::/32
Signature Algorithm: sha256WithRSAEncryption
0b:00:cf:35:12:ce:79:09:ea:ba:07:37:28:e5:bc:67:55:e9:
40:22:3b:99:35:f6:76:ed:e6:2d:a9:1d:51:c0:c2:64:78:09:
b9:07:52:97:e9:4c:9a:a7:51:24:1d:6a:b6:cb:51:71:1c:81:
19:44:13:7b:8d:1d:be:11:52:e6:ef:f4:04:e2:90:45:e1:d8:
c7:90:79:34:e4:7c:64:89:a8:11:76:8c:4e:b2:c4:b7:c3:65:
f3:a4:7d:1f:25:e7:ac:fb:72:8b:a1:b2:f5:63:98:71:26:ee:
d7:ea:db:e8:2f:b6:e7:e6:ce:10:61:af:86:40:9a:4f:f6:f1:
48:de:ee:32:01:42:09:9c:bc:fb:8e:86:a3:a1:0d:48:99:67:
4f:33:fd:ae:82:1d:83:af:8c:d2:6c:09:6e:2d:03:05:a1:29:
95:1a:dd:d3:0b:c3:72:fb:a7:27:e6:c1:ef:23:46:e3:2b:9d:
c5:3c:8c:a9:56:7f:b3:9b:d3:88:0e:d4:f9:9c:0b:db:37:d3:
aa:f8:16:47:a9:44:4e:75:c5:e4:2b:93:c0:9e:90:d3:f4:19:
82:50:6c:7b:be:75:03:d0:b7:56:ec:67:c6:18:c8:e6:c2:af:
10:f1:83:f0:2c:0b:e5:9a:cc:7a:ae:38:7f:36:a3:23:9a:b7:
eb:46:6d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:59:28 2025 by rpki-client