Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/QQkrDLd3B1UByENYGL6o5oOIWsA.roa
File: QQkrDLd3B1UByENYGL6o5oOIWsA.roa (raw, json)
Hash identifier: 1xC1z76+34a4h5+Czjx0AIf1EXfAYUfXERkjdc7p/NQ=
Subject key identifier: 41:09:2B:0C:B7:77:07:55:01:C8:43:58:18:BE:A8:E6:83:88:5A:C0
Certificate issuer: /CN=a44c267fa754cd6509e9f807273123bee96c525d
Certificate serial: 01856F8C4D419503D09FB5A8E638898215B9
Authority key identifier: A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/QQkrDLd3B1UByENYGL6o5oOIWsA.roa
Signing time: Sun 01 Jan 2023 22:55:43 +0000
ROA not before: Sun 01 Jan 2023 22:55:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 45.12.82.0/24 maxlen: 24
45.137.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8c:4d:41:95:03:d0:9f:b5:a8:e6:38:89:82:15:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a44c267fa754cd6509e9f807273123bee96c525d
Validity
Not Before: Jan 1 22:55:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=41092b0cb777075501c8435818bea8e683885ac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:df:ab:80:c7:1d:f1:dd:bf:fd:47:4e:f6:26:
55:e9:98:20:c7:75:3c:bd:ad:08:a6:99:1a:d0:c7:
88:e0:3c:58:90:27:e2:4a:de:dc:05:9c:62:f0:8c:
d9:9b:28:8e:1e:56:70:3f:27:6b:bd:c8:40:05:f9:
cc:bf:d1:a9:3b:f9:ea:6b:5b:1c:2c:bd:85:6b:6c:
1a:f2:b9:99:be:12:87:cd:88:fa:b7:b2:6d:c3:4e:
8c:c3:0c:4d:30:a2:5e:bf:d1:66:55:e2:c0:c8:da:
21:50:d2:29:a6:22:41:fd:b3:d7:cb:b2:d3:69:95:
94:07:77:50:43:b7:61:fa:08:f2:21:64:9c:ff:dc:
9a:1a:5a:05:fc:0d:2d:c2:40:d6:15:ed:71:f2:7c:
b4:c7:1e:6e:32:c7:eb:df:aa:ad:9e:e7:82:2f:0d:
07:bc:e8:5f:be:08:3b:c2:96:3f:0e:e0:dc:75:f4:
4b:83:13:9b:11:c0:de:9a:11:be:41:54:41:2d:e4:
60:ce:e5:8c:10:cb:c8:17:a5:d8:26:b3:8a:e1:28:
21:5e:e9:ae:b6:8f:78:d5:49:6f:a3:6f:07:86:52:
87:3d:64:2f:4e:a3:70:c4:66:9f:87:6d:80:59:09:
2f:96:7a:58:63:ca:e9:40:c2:64:7e:b2:53:90:e3:
0d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:09:2B:0C:B7:77:07:55:01:C8:43:58:18:BE:A8:E6:83:88:5A:C0
X509v3 Authority Key Identifier:
keyid:A4:4C:26:7F:A7:54:CD:65:09:E9:F8:07:27:31:23:BE:E9:6C:52:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pEwmf6dUzWUJ6fgHJzEjvulsUl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/QQkrDLd3B1UByENYGL6o5oOIWsA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/ab26a5-67b9-4667-855b-48af08004b5f/1/pEwmf6dUzWUJ6fgHJzEjvulsUl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.12.82.0/24
45.137.97.0/24
Signature Algorithm: sha256WithRSAEncryption
89:8f:97:8d:e2:11:b2:d8:7d:33:54:de:d1:e9:29:fe:da:2c:
a3:05:28:75:e2:f1:a1:1a:c7:e7:b9:bf:66:d8:28:c2:6c:41:
cd:14:45:9f:1d:0d:b0:7e:42:76:bf:eb:54:48:17:fd:21:49:
f0:be:9d:bf:2b:cd:1a:8d:5c:a1:86:1d:18:df:5e:ad:4c:88:
1f:7a:59:3d:07:09:35:3c:cd:2a:40:cb:88:8e:e7:b4:bf:59:
be:4d:c3:cb:bd:9d:fd:bf:4a:c8:84:bd:fa:7c:d5:12:92:9f:
ff:6e:3f:0c:a7:7b:62:79:a0:25:a3:83:be:e9:60:da:4f:0f:
01:89:3d:30:26:fa:dd:6f:b1:72:d3:d5:6a:da:35:22:77:b1:
88:db:73:fe:e0:96:5e:de:1d:33:18:ba:cf:ff:1c:75:5e:9a:
d7:3e:18:68:a7:b2:f6:59:f3:a2:4b:2b:44:56:d3:73:e1:2a:
3e:bb:46:3a:8d:8a:68:12:20:05:ff:a2:9e:7a:bc:b9:d5:b7:
bc:8f:46:f2:bb:06:dc:83:79:2e:43:75:8f:0e:e6:a8:23:dd:
05:c2:39:4d:aa:5e:c4:42:de:6c:06:33:44:dc:da:2a:81:90:
9b:72:cf:cb:af:31:15:2a:76:fc:82:76:c1:9f:6d:98:b0:d2:
88:ef:12:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:26:40 2025 by rpki-client