Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/Q5quNHtUe1gA-TqHlWvHzX8gMwA.roa
File: Q5quNHtUe1gA-TqHlWvHzX8gMwA.roa (raw, json)
Hash identifier: OcDB3dr6mB13HmStrHlq8aYMZtKWBgjyeIYXKmgVBnM=
Subject key identifier: 43:9A:AE:34:7B:54:7B:58:00:F9:3A:87:95:6B:C7:CD:7F:20:33:00
Certificate issuer: /CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Certificate serial: 01941FFA5A1DD1A419B03625AF473B286842
Authority key identifier: 9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/Q5quNHtUe1gA-TqHlWvHzX8gMwA.roa
Signing time: Wed 01 Jan 2025 03:48:08 +0000
ROA not before: Wed 01 Jan 2025 03:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 53766
IP address blocks: 136.144.96.0/23 maxlen: 23
136.144.98.0/23 maxlen: 23
136.144.100.0/23 maxlen: 23
136.144.102.0/23 maxlen: 23
136.144.104.0/23 maxlen: 23
136.144.106.0/23 maxlen: 23
136.144.108.0/24 maxlen: 24
136.144.109.0/24 maxlen: 24
136.144.110.0/24 maxlen: 24
136.144.111.0/24 maxlen: 24
136.144.112.0/24 maxlen: 24
136.144.113.0/24 maxlen: 24
136.144.114.0/24 maxlen: 24
136.144.115.0/24 maxlen: 24
136.144.116.0/24 maxlen: 24
136.144.117.0/24 maxlen: 24
136.144.118.0/24 maxlen: 24
136.144.119.0/24 maxlen: 24
136.144.120.0/24 maxlen: 24
136.144.121.0/24 maxlen: 24
136.144.122.0/24 maxlen: 24
136.144.123.0/24 maxlen: 24
136.144.124.0/24 maxlen: 24
136.144.125.0/24 maxlen: 24
136.144.126.0/24 maxlen: 24
136.144.127.0/24 maxlen: 24
159.100.160.0/20 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:5a:1d:d1:a4:19:b0:36:25:af:47:3b:28:68:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ae389b1cc399e216fced8d39ec3ee89fc20b839
Validity
Not Before: Jan 1 03:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=439aae347b547b5800f93a87956bc7cd7f203300
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8a:ad:3e:18:e8:46:31:f5:06:3f:47:b0:16:
e7:64:c8:b0:40:b0:ec:07:91:92:95:fb:0b:50:1c:
90:00:fa:00:26:c5:d7:0f:6a:ef:1c:84:af:70:78:
60:49:7e:74:1a:a6:ec:28:1e:2a:12:d1:99:ec:b5:
e7:d6:95:50:f2:19:e6:f7:40:3c:a6:d3:ce:91:7a:
2d:59:9b:44:1c:42:81:2f:2f:76:5b:d0:d7:b7:e8:
2a:69:90:a2:3e:3e:20:29:4f:88:f8:0d:6f:db:97:
5f:76:3b:61:49:e1:ab:23:d7:19:dc:64:f3:c8:5f:
58:ce:8a:db:7d:c7:80:8a:98:66:2f:07:c8:6b:88:
09:38:32:a9:d7:9a:f4:63:64:42:fa:ca:77:ec:16:
3b:7e:fe:d7:1f:de:ac:e3:a9:8d:ab:cb:31:93:52:
48:75:c0:13:e4:87:a9:ef:b5:b9:6c:c6:f8:2f:59:
b0:9a:43:04:ca:39:e0:e6:94:70:2b:e8:92:67:3a:
4e:36:3c:8b:d7:b0:31:a1:42:78:07:00:90:83:19:
db:c7:21:c6:96:a3:60:e4:65:59:08:ac:7b:4a:43:
15:cc:d5:25:3e:06:0b:e7:d7:85:c7:98:f1:0b:f9:
3b:5f:2c:03:dc:17:30:80:20:94:96:97:a4:3d:79:
4b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9A:AE:34:7B:54:7B:58:00:F9:3A:87:95:6B:C7:CD:7F:20:33:00
X509v3 Authority Key Identifier:
keyid:9A:E3:89:B1:CC:39:9E:21:6F:CE:D8:D3:9E:C3:EE:89:FC:20:B8:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/muOJscw5niFvztjTnsPuifwguDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/Q5quNHtUe1gA-TqHlWvHzX8gMwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d5a9b-b21e-421e-bce8-389f92195beb/1/muOJscw5niFvztjTnsPuifwguDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
136.144.96.0/19
159.100.160.0/20
Signature Algorithm: sha256WithRSAEncryption
53:12:8a:08:a9:f0:fd:66:63:99:8f:be:f1:74:4b:a7:2c:69:
aa:85:13:5c:dd:ad:86:44:b3:d9:0b:ba:5c:9f:fe:36:ad:e7:
e9:ff:a1:60:12:14:27:fe:ac:4d:bf:7a:01:3e:3e:08:a2:e0:
9e:23:65:03:1e:07:69:d2:9b:9d:2d:89:91:f7:88:f8:db:ab:
c9:19:68:e0:cd:a6:cb:90:87:ba:22:b0:65:f0:66:7f:7d:22:
ca:44:c7:8d:86:97:17:12:d0:3d:15:60:41:11:85:12:d0:3f:
7b:b8:84:26:61:58:01:00:12:8f:0e:6c:f4:31:25:1e:ec:4e:
db:b9:f0:66:d4:3f:be:da:67:0f:42:5f:a4:34:bf:03:0a:99:
d1:ed:74:47:16:16:ff:e2:20:1a:14:55:59:8c:ef:7b:34:99:
b0:49:e2:b6:41:b2:13:56:83:c9:bb:4a:aa:e0:c7:89:3d:8a:
da:75:41:9a:5d:c6:ed:b5:df:16:22:2e:87:1a:66:3d:99:2d:
b1:e4:f4:8d:ca:da:a0:a1:c2:ec:22:67:b3:17:d4:24:bd:28:
d1:fb:4d:a6:3e:87:c7:be:d6:4d:a5:0f:f0:69:b4:c5:ee:5c:
ce:ab:f6:0d:2a:99:0c:45:96:5a:e0:f5:11:f4:87:08:a1:4a:
95:ee:01:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:54:34 2025 by rpki-client