Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Qd1wvgzlCij5UEnZGRhTJaGMimE.roa
File: Qd1wvgzlCij5UEnZGRhTJaGMimE.roa (raw, json)
Hash identifier: 9dLgHWT4coyEUHSFhX5Lx2OUbW22F+3NtYWyHdTczC0=
Subject key identifier: 41:DD:70:BE:0C:E5:0A:28:F9:50:49:D9:19:18:53:25:A1:8C:8A:61
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019427483BE96531EE361E624A71D1C9B89E
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Qd1wvgzlCij5UEnZGRhTJaGMimE.roa
Signing time: Thu 02 Jan 2025 13:50:32 +0000
ROA not before: Thu 02 Jan 2025 13:50:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49353
IP address blocks: 171.22.164.0/22 maxlen: 24
2a05:a780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:3b:e9:65:31:ee:36:1e:62:4a:71:d1:c9:b8:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41dd70be0ce50a28f95049d919185325a18c8a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c5:a4:6d:40:a4:4b:45:e4:4e:0c:76:a5:1b:
73:23:47:5e:ef:05:ab:6a:b6:c3:74:4b:a3:b0:e0:
ce:90:7f:0a:39:59:fb:90:fc:9d:81:7d:f9:4f:e2:
33:a5:a3:f7:95:1b:57:5c:ef:5f:23:4c:0b:18:89:
ff:d7:00:15:43:5c:75:b1:82:37:ca:26:8c:55:0e:
2e:69:3d:c4:f0:a5:5e:dd:b2:29:a2:a8:c8:74:34:
39:61:37:99:fe:73:1c:bf:51:92:af:77:36:4f:aa:
56:aa:33:d7:b1:dc:22:95:01:93:99:cc:2c:94:03:
aa:2b:48:1d:d9:0d:80:b1:0d:58:af:82:6a:e7:62:
01:77:e6:58:b0:1c:93:0b:25:7a:86:f2:fd:5a:33:
c3:0b:5e:c9:90:71:7d:87:d3:ec:37:0d:f0:23:ab:
35:56:a2:66:5b:81:02:2f:16:27:fb:d8:84:83:89:
12:bb:9a:2c:4d:34:e9:a5:cc:83:d6:c2:3a:63:38:
8b:43:79:d4:f4:6e:88:7c:ab:bd:11:f5:dc:f4:5f:
43:0f:fd:09:e2:4f:66:a5:88:bb:7f:a1:b4:f1:b6:
14:b5:2a:96:56:fc:a9:cb:b9:11:25:e7:ee:45:76:
05:29:05:ae:cb:d0:b1:92:56:aa:26:9c:85:e5:28:
ba:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DD:70:BE:0C:E5:0A:28:F9:50:49:D9:19:18:53:25:A1:8C:8A:61
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Qd1wvgzlCij5UEnZGRhTJaGMimE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.164.0/22
IPv6:
2a05:a780::/29
Signature Algorithm: sha256WithRSAEncryption
11:f7:33:23:ab:29:9c:76:52:73:7f:3e:9e:db:7f:0d:98:de:
fc:38:92:2d:17:fb:58:0a:ff:3c:87:e0:05:ab:ce:92:03:d1:
58:06:d4:af:80:a0:b6:38:e6:cf:8d:b8:84:05:98:48:10:78:
0f:6b:33:50:ea:78:ee:ea:5c:a8:f9:04:68:5f:c0:c5:bf:a6:
80:9c:97:3f:c8:fb:40:2c:f3:d1:bf:2b:27:37:e7:d2:82:1b:
84:60:a3:e8:9e:1f:03:69:57:ee:d5:26:05:c8:56:45:1d:f5:
db:9f:e2:6c:f0:49:30:0d:18:6f:82:28:5f:a9:93:40:91:37:
da:a1:7f:90:c2:00:4d:ea:47:e6:01:a7:a4:94:86:d3:40:56:
72:f0:ae:94:42:cb:47:5e:14:d0:a2:3a:a8:13:12:6e:e9:e8:
3c:f0:ea:1c:6e:2f:10:4e:10:c2:37:0e:a5:3e:19:ce:29:be:
15:f8:da:c7:ab:7c:b6:1f:31:ce:a7:c5:d0:6a:ad:06:09:b8:
06:62:96:d4:a7:9c:6b:b4:70:b1:52:7d:e6:02:45:16:72:0c:
e5:65:a1:67:84:05:93:23:21:9c:19:c4:87:32:c8:7d:04:4f:
72:b9:98:8a:a8:90:90:86:24:63:34:c9:52:50:88:3a:60:eb:
ea:a3:15:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:44 2025 by rpki-client