Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/QW6EBuI_dhyyLJ3wV9aeJWp4GGw.roa
File: QW6EBuI_dhyyLJ3wV9aeJWp4GGw.roa (raw, json)
Hash identifier: kJIYmw+PDepj2s94oQnZQEUkVAypbF9Bk2s4tGuvApc=
Subject key identifier: 41:6E:84:06:E2:3F:76:1C:B2:2C:9D:F0:57:D6:9E:25:6A:78:18:6C
Certificate issuer: /CN=6327607563493337687ad69ce1064e636265be3f
Certificate serial: 018C4AF50577BC9ADE6E947D2A4B775645C6
Authority key identifier: 63:27:60:75:63:49:33:37:68:7A:D6:9C:E1:06:4E:63:62:65:BE:3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YydgdWNJMzdoetac4QZOY2Jlvj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/QW6EBuI_dhyyLJ3wV9aeJWp4GGw.roa
Signing time: Fri 08 Dec 2023 19:43:40 +0000
ROA not before: Fri 08 Dec 2023 19:43:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49515
IP address blocks: 104.160.12.0/24 maxlen: 24
104.160.13.0/24 maxlen: 24
5.157.31.0/24 maxlen: 24
5.157.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4a:f5:05:77:bc:9a:de:6e:94:7d:2a:4b:77:56:45:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6327607563493337687ad69ce1064e636265be3f
Validity
Not Before: Dec 8 19:43:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=416e8406e23f761cb22c9df057d69e256a78186c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:73:e6:df:4d:e9:f9:49:1e:e4:0a:fc:f3:3e:
8a:ed:9c:09:bc:71:a7:09:a7:e4:b0:7b:b5:db:ea:
21:e6:5f:76:a1:a7:72:4a:ad:e2:98:37:e1:15:81:
69:d8:7b:a2:c5:05:ae:38:78:f3:dd:6f:c5:69:fa:
f3:7d:b0:28:b8:2f:59:8e:4e:9e:12:10:4d:90:76:
15:66:6a:63:30:11:47:22:6c:b0:48:83:35:94:0a:
8a:97:52:f4:99:76:5c:e2:f1:1c:89:29:45:c6:76:
88:39:c7:77:53:c6:94:5c:bc:57:99:5c:4c:57:66:
8c:7e:ef:08:55:6b:ff:61:48:0d:ad:71:1d:48:2c:
70:f6:23:c8:d2:e0:eb:59:69:67:9b:64:87:a1:05:
18:f6:78:04:8d:81:90:74:d9:b9:ec:25:69:33:07:
9e:2d:e1:9f:5f:43:94:4d:9e:1a:f6:57:b5:e3:23:
e3:18:50:df:b5:8a:b6:e6:8c:bb:1d:8b:ce:2e:8f:
a7:64:f7:49:93:df:6c:cb:48:9f:52:fc:3d:5b:2f:
b6:c4:a1:49:0e:28:0e:60:21:1d:9f:c2:48:08:37:
c5:56:38:cf:5b:b4:1e:b1:45:26:97:61:54:ee:b5:
e4:46:48:c3:09:0d:81:ba:a7:6f:f2:a9:f3:6c:a4:
47:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:6E:84:06:E2:3F:76:1C:B2:2C:9D:F0:57:D6:9E:25:6A:78:18:6C
X509v3 Authority Key Identifier:
keyid:63:27:60:75:63:49:33:37:68:7A:D6:9C:E1:06:4E:63:62:65:BE:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YydgdWNJMzdoetac4QZOY2Jlvj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/QW6EBuI_dhyyLJ3wV9aeJWp4GGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/72a67b-1d1c-4235-a487-fc9093fedb1b/1/YydgdWNJMzdoetac4QZOY2Jlvj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.157.30.0/23
104.160.12.0/23
Signature Algorithm: sha256WithRSAEncryption
71:33:3a:21:b4:2b:2e:a2:b0:06:cc:d9:d8:c7:92:9d:df:a4:
b9:4c:06:8c:cc:51:90:d6:1b:46:bf:ac:47:17:95:60:f9:09:
31:0d:c4:8a:64:22:57:b7:dc:36:95:c2:88:99:ee:c5:c5:44:
b7:85:a4:23:c7:b7:d4:8e:38:41:a8:0d:7c:e4:55:4f:28:2b:
a0:c5:bd:2f:11:bf:da:08:54:65:ac:ac:ca:b1:48:f0:d1:87:
a6:2d:8d:97:e4:c0:d6:91:2e:e9:cd:cc:24:c1:aa:31:50:9e:
99:e2:84:ff:1e:cb:93:ce:6b:e7:8c:32:38:1d:a5:a1:82:8d:
55:af:b6:41:25:f7:92:3c:ee:c1:ff:0d:58:56:fe:8b:58:0f:
f2:01:3b:5f:5c:f3:71:dd:75:85:2c:a9:64:a1:f1:a6:27:27:
6a:46:3b:4b:f8:f3:47:50:22:79:76:72:3d:a8:cf:8e:73:d1:
91:df:0a:b3:fe:02:b9:ad:c6:a8:12:c0:d1:d3:4a:a3:79:fe:
6d:8d:b6:e3:cb:a7:ab:cd:70:b4:64:b3:3c:4a:a2:d1:b9:aa:
a9:b0:f4:f1:50:23:61:61:a1:73:2e:e1:f2:56:cd:3e:2b:7f:
e5:89:80:30:4d:cd:ae:6c:05:99:5e:23:0d:ac:4d:c7:7e:ef:
8e:a2:66:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:30 2025 by rpki-client