Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/QikrQfPZcEuLXxNM9QRFuZqmwX8.roa
File: QikrQfPZcEuLXxNM9QRFuZqmwX8.roa (raw, json)
Hash identifier: GTgZFx+2E4BxRZ/cmNVpT3kb9A3tv7hfyB2pD3LWoag=
Subject key identifier: 42:29:2B:41:F3:D9:70:4B:8B:5F:13:4C:F5:04:45:B9:9A:A6:C1:7F
Certificate issuer: /CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Certificate serial: 019490F869A766A2165126C11022F3ABEFC5
Authority key identifier: 17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/QikrQfPZcEuLXxNM9QRFuZqmwX8.roa
Signing time: Thu 23 Jan 2025 02:23:06 +0000
ROA not before: Thu 23 Jan 2025 02:23:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213840
IP address blocks: 45.156.221.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:90:f8:69:a7:66:a2:16:51:26:c1:10:22:f3:ab:ef:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17d03f298180cc109f19d4b1992c7d71c56c8dcc
Validity
Not Before: Jan 23 02:23:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42292b41f3d9704b8b5f134cf50445b99aa6c17f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:36:da:d4:07:13:97:d2:79:af:17:aa:c6:96:
2d:c9:d6:5d:3b:af:3e:c7:44:70:9d:c6:1c:24:29:
54:b1:99:b6:2f:a6:bc:de:6d:91:07:30:ee:8c:be:
1a:b1:6a:e3:b5:ce:40:0b:fb:27:f8:c2:5d:ce:85:
58:db:4c:ab:5e:54:60:3f:f6:28:c0:53:a8:9f:1f:
d6:1c:b9:d3:66:a2:22:ba:00:b1:7d:9a:20:58:bf:
9f:2f:55:1d:2d:9a:6f:f2:49:45:01:08:8d:38:56:
da:bc:0b:e6:dc:d9:0f:d4:a3:a1:52:de:89:1f:3c:
a5:99:9f:79:98:f6:b9:15:aa:6f:05:15:88:11:0d:
09:45:b7:17:fc:70:13:9f:ba:da:b2:18:de:fe:1f:
01:80:a9:41:7f:20:69:05:2b:b2:59:36:e3:8b:9d:
50:7f:7c:03:59:ae:f3:02:22:ab:11:75:fe:d4:11:
ae:00:22:eb:43:14:c2:35:56:b0:11:41:d3:1b:50:
d1:32:a8:9b:06:67:be:85:8f:e4:28:a7:ad:38:41:
c5:ee:d1:52:d0:a9:e2:f0:a2:f7:82:fe:c7:4b:0b:
82:cc:6d:e1:fc:71:3d:aa:5d:b4:8d:08:c9:65:a4:
c9:30:34:fb:bb:d5:7a:1a:ca:d5:39:f5:8e:5e:22:
ce:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:29:2B:41:F3:D9:70:4B:8B:5F:13:4C:F5:04:45:B9:9A:A6:C1:7F
X509v3 Authority Key Identifier:
keyid:17:D0:3F:29:81:80:CC:10:9F:19:D4:B1:99:2C:7D:71:C5:6C:8D:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F9A_KYGAzBCfGdSxmSx9ccVsjcw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/QikrQfPZcEuLXxNM9QRFuZqmwX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/82e253-0177-4a20-befe-918ac6462679/1/F9A_KYGAzBCfGdSxmSx9ccVsjcw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.221.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:bb:7f:2e:3b:70:33:47:f6:ae:58:52:85:e5:85:fc:9a:93:
c2:34:38:c2:16:a3:b1:22:18:5f:bc:f0:72:80:89:7c:8b:fd:
56:98:d4:b5:57:06:11:d1:dc:65:94:65:60:c0:42:93:83:73:
4c:e9:41:22:f9:ab:aa:4f:bb:15:22:10:34:b0:36:2b:9b:25:
30:d0:c2:59:db:22:48:34:30:ca:10:bb:d8:fa:31:99:6b:77:
e3:4d:37:46:70:c7:c5:03:38:3f:96:47:42:3d:77:37:76:17:
8d:d7:01:10:2e:1a:3a:0e:bf:07:01:94:88:41:99:80:5c:dc:
66:ac:d9:43:cf:90:63:90:f1:b9:96:61:6f:ac:53:c1:bf:b7:
5d:bd:4e:ef:7d:49:01:ff:a4:ed:42:cb:0d:9a:ae:2a:1d:62:
c1:f2:22:86:d1:9c:24:f8:b4:3e:bd:5f:b0:1b:39:10:9b:56:
77:01:a4:db:7c:82:82:1b:0a:1b:ee:a5:be:12:0b:68:d0:0e:
cb:e0:ee:58:0a:ed:2f:a5:f5:8e:11:03:b4:a7:e3:f3:14:0c:
9a:87:13:25:b8:e0:a4:20:97:a7:98:51:61:9c:2d:dd:25:3a:
ab:c9:9a:9c:a9:d3:61:20:ce:97:4f:1b:13:36:b6:62:fa:fc:
2e:09:42:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 10:55:32 2025 by rpki-client