Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/Q3_uNhirqJ7Bk9NtXl3eVrdBCzw.roa
File: Q3_uNhirqJ7Bk9NtXl3eVrdBCzw.roa (raw, json)
Hash identifier: 0/Vyhy1R/OkAOBC9blQ+o7238jYUr5Pu0HfZsEBCqFA=
Subject key identifier: 43:7F:EE:36:18:AB:A8:9E:C1:93:D3:6D:5E:5D:DE:56:B7:41:0B:3C
Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Certificate serial: 019426D9EBAF1A62374101CCE51A271B8C66
Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/Q3_uNhirqJ7Bk9NtXl3eVrdBCzw.roa
Signing time: Thu 02 Jan 2025 11:50:03 +0000
ROA not before: Thu 02 Jan 2025 11:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1299
IP address blocks: 46.245.176.0/21 maxlen: 24
86.105.222.0/23 maxlen: 24
89.38.36.0/23 maxlen: 24
91.90.144.0/20 maxlen: 24
91.230.172.0/22 maxlen: 24
109.70.216.0/21 maxlen: 24
185.187.64.0/22 maxlen: 24
2a00:14e0::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:eb:af:1a:62:37:41:01:cc:e5:1a:27:1b:8c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20
Validity
Not Before: Jan 2 11:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=437fee3618aba89ec193d36d5e5dde56b7410b3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ac:91:19:ce:da:65:21:8c:9d:9e:f1:7f:2c:
cc:b2:9b:97:0b:ad:4e:3f:3d:b5:df:32:b7:d6:40:
9f:ee:ba:27:62:fc:e9:69:40:9d:80:63:24:72:9b:
14:40:fa:29:9c:ce:0b:bb:64:dc:36:ba:d3:c0:83:
20:20:e1:45:85:08:45:90:6e:0f:75:f0:81:17:d7:
d7:7a:b2:f5:fd:8f:91:a4:bd:24:54:e7:4f:bd:77:
11:c8:99:da:59:06:50:2e:d1:70:c7:fe:46:1e:0e:
7d:41:ac:b4:1f:ae:fd:1c:55:01:98:67:6d:28:e7:
bb:93:d0:d8:8d:94:99:bf:0b:85:fa:02:06:4f:1f:
f2:ac:f4:46:3b:0e:1a:5c:5a:55:46:87:69:5e:64:
97:ae:44:8b:66:b8:3a:92:93:86:d4:d2:ea:a2:8a:
d2:4b:a9:ef:e6:6b:0a:b1:6a:4f:9b:6c:1b:00:58:
bb:62:2b:a6:61:e5:b5:6c:72:2d:55:d3:bc:d6:65:
69:99:b3:a6:1d:0e:b7:09:ea:cc:63:8b:a1:9d:f5:
a9:04:b8:c4:aa:23:fc:f2:42:f7:6e:7f:2d:80:42:
d4:d0:3e:27:7b:3f:9e:65:a9:ad:44:ff:4c:19:bb:
cf:83:14:2f:09:fc:f3:8f:61:64:bd:41:96:9d:45:
b2:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7F:EE:36:18:AB:A8:9E:C1:93:D3:6D:5E:5D:DE:56:B7:41:0B:3C
X509v3 Authority Key Identifier:
keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/Q3_uNhirqJ7Bk9NtXl3eVrdBCzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.176.0/21
86.105.222.0/23
89.38.36.0/23
91.90.144.0/20
91.230.172.0/22
109.70.216.0/21
185.187.64.0/22
IPv6:
2a00:14e0::/29
Signature Algorithm: sha256WithRSAEncryption
53:31:40:6c:ce:22:bb:45:c8:dc:bc:8d:78:36:6e:bf:e9:ee:
d3:d8:1c:95:ce:09:dd:b2:52:ed:9f:53:cb:ad:94:a5:57:0a:
d9:80:58:d5:01:27:d2:14:ba:07:42:47:90:d1:77:d0:bb:1d:
08:91:ee:de:a2:a8:53:07:30:a9:f8:33:11:f2:f6:ed:e7:02:
55:88:1c:f2:60:36:6e:83:83:9b:c1:99:64:5f:3a:90:d7:d1:
b9:a2:9e:c9:e4:ac:ce:fe:52:85:ad:93:04:4b:f2:24:a7:73:
f9:ba:42:4e:f4:1a:8a:7d:02:bd:00:6b:98:3c:ad:bb:83:93:
a9:94:02:4c:f0:22:53:64:9f:2f:75:71:82:2a:d4:32:fc:4b:
72:14:a7:a8:22:85:0e:d6:3b:c5:5b:aa:ca:2d:92:43:34:fb:
89:a6:23:1f:fa:21:fe:49:74:ff:df:e1:b9:cc:47:be:3e:47:
60:ae:a9:6d:55:4d:bd:bf:c8:b9:c2:4f:a0:61:60:40:91:49:
9d:d1:0d:85:84:be:d5:d3:f0:79:7d:81:b2:df:ca:73:ef:65:
6e:e6:69:7e:36:e5:b0:72:95:9f:32:49:d3:c7:f4:8c:b6:dc:
69:91:17:c4:19:d5:50:61:07:5b:c3:ab:25:76:e6:41:6f:a0:
e7:72:d6:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:35:08 2025 by rpki-client