Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/qNzot_iXbh6DSzamOdXKmaEdTPc.roa
File: qNzot_iXbh6DSzamOdXKmaEdTPc.roa (raw, json)
Hash identifier: KPNAj9Fiq2o5IusE8T6s0LTOMqUIo9alIB1wRVL8VnM=
Subject key identifier: A8:DC:E8:B7:F8:97:6E:1E:83:4B:36:A6:39:D5:CA:99:A1:1D:4C:F7
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019427484DD2B741D566A615F4F178283BE9
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/qNzot_iXbh6DSzamOdXKmaEdTPc.roa
Signing time: Thu 02 Jan 2025 13:50:37 +0000
ROA not before: Thu 02 Jan 2025 13:50:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214678
IP address blocks: 45.67.244.0/22 maxlen: 22
77.247.120.0/22 maxlen: 22
89.42.112.0/23 maxlen: 23
185.226.192.0/23 maxlen: 23
185.227.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:4d:d2:b7:41:d5:66:a6:15:f4:f1:78:28:3b:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 2 13:50:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8dce8b7f8976e1e834b36a639d5ca99a11d4cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:9a:09:6a:bd:5f:0f:d6:35:5a:c7:57:15:b2:
a4:5a:41:95:a0:a2:ea:71:32:eb:b4:2b:07:97:0b:
bb:81:19:0e:51:38:b6:37:93:69:2a:03:96:ba:a8:
48:ba:d1:b6:7c:52:c3:54:0e:66:cb:3c:ce:28:d1:
d5:da:fc:15:91:f9:56:28:f8:df:65:39:57:d6:05:
0d:6a:8c:76:0e:7d:9f:cb:4a:2e:1b:b4:86:67:89:
45:70:ce:14:22:d2:7a:4e:22:4d:27:b9:01:20:7c:
10:8d:f3:fa:39:57:f3:c6:cb:13:e4:89:0c:5e:60:
da:ec:36:8e:8e:5d:58:f6:b9:5c:0e:75:7e:da:2b:
c1:c0:68:e4:ca:b5:0a:4d:42:6c:9a:1e:7f:f6:4b:
6f:6a:1d:88:b1:a4:03:ac:b6:96:8f:e8:68:21:b6:
c0:f0:e1:63:0d:ab:08:5f:46:31:53:e5:b0:98:f4:
af:7a:87:bc:7e:36:d6:8a:b4:74:4d:f5:e5:3d:f4:
bc:62:b4:1b:93:da:ae:d0:d4:79:44:98:02:5f:e4:
38:92:75:2b:dd:69:c5:5b:b0:32:83:74:56:9d:a0:
78:b6:87:f7:a3:a6:ee:2c:e7:5d:8c:3e:3e:46:7c:
09:e6:75:88:b2:ed:19:cc:e9:62:e0:a6:3c:67:db:
91:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DC:E8:B7:F8:97:6E:1E:83:4B:36:A6:39:D5:CA:99:A1:1D:4C:F7
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/qNzot_iXbh6DSzamOdXKmaEdTPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.244.0/22
77.247.120.0/22
89.42.112.0/23
185.226.192.0/23
185.227.103.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:ce:08:6b:3e:10:1f:4d:f4:26:b9:8d:8c:5d:1a:21:52:f9:
82:08:8d:11:26:02:a8:a2:45:1f:a7:43:15:1d:44:21:79:46:
44:f8:d2:2b:03:6b:64:f0:fa:02:9d:32:2c:87:0a:41:9d:74:
ae:d1:74:7a:ae:26:2c:88:56:36:c2:10:d6:d2:6e:8a:3c:59:
40:24:64:80:2e:2f:0d:f4:97:e1:df:c0:fa:30:e9:12:28:0c:
fa:64:34:b4:48:cc:61:aa:70:c0:e0:bc:d4:7a:e7:6c:de:d5:
f2:f7:9b:9e:a6:a0:67:9d:4e:00:65:15:b3:04:16:af:cf:e5:
9c:6c:6d:9d:27:e1:d9:fe:8c:cf:b8:e4:76:e0:89:23:fe:cb:
33:46:fb:fa:60:8c:05:89:31:4a:d5:f2:85:21:12:31:45:42:
ca:3a:4e:6d:3b:63:fe:1b:c1:f4:c1:84:fa:6e:09:44:a1:24:
f6:91:e7:21:24:c4:d5:4a:62:a5:80:f8:89:42:c3:26:7d:a7:
bc:c6:36:9e:6d:d1:ad:08:bf:8a:36:a7:85:e4:52:ef:a0:25:
27:6e:78:e3:d8:0c:d7:ab:26:69:af:01:e9:2f:b6:e0:dd:81:
bd:5f:96:0e:7e:06:32:2a:a3:7e:a2:0a:5a:bf:3c:98:61:0e:
6f:43:78:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:17:33 2025 by rpki-client