Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/6716ad-839e-4d68-a59b-fc065ac96cff/1/qRwF0jySRsMwpXAsyIWeXbWb_Ck.roa
File: qRwF0jySRsMwpXAsyIWeXbWb_Ck.roa (raw, json)
Hash identifier: gTx8jsa8WlS8Ljtq6FoKs4iV1eA7bCER5YDR9VoSyMc=
Subject key identifier: A9:1C:05:D2:3C:92:46:C3:30:A5:70:2C:C8:85:9E:5D:B5:9B:FC:29
Certificate issuer: /CN=ab2d4da2f52ac5d8c4c03ccc30615fa0a39088d7
Certificate serial: 06406F37
Authority key identifier: AB:2D:4D:A2:F5:2A:C5:D8:C4:C0:3C:CC:30:61:5F:A0:A3:90:88:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy1NovUqxdjEwDzMMGFfoKOQiNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/6716ad-839e-4d68-a59b-fc065ac96cff/1/qRwF0jySRsMwpXAsyIWeXbWb_Ck.roa
Signing time: Tue 04 Jan 2022 14:00:48 +0000
ROA not before: Tue 04 Jan 2022 14:00:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 208533
IP address blocks: 45.129.166.0/24 maxlen: 24
45.129.164.0/22 maxlen: 22
45.129.165.0/24 maxlen: 24
45.129.164.0/24 maxlen: 24
45.129.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104886071 (0x6406f37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2d4da2f52ac5d8c4c03ccc30615fa0a39088d7
Validity
Not Before: Jan 4 14:00:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a91c05d23c9246c330a5702cc8859e5db59bfc29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:04:f5:7b:0c:d9:13:08:ae:47:f9:f4:e3:e9:
dc:67:31:74:9a:d3:87:47:c6:4c:5c:ad:14:ce:2e:
b7:b7:8c:41:94:ca:62:b1:84:2c:93:55:fb:0e:dc:
a2:19:23:5e:b1:5a:2f:c7:b9:d1:cf:ca:27:72:5e:
6f:a4:ce:04:f3:eb:65:2b:4e:2c:67:69:f9:72:05:
8e:61:17:33:d0:b2:18:94:bd:7e:ba:d0:30:eb:ae:
ff:80:3e:de:b6:ce:7a:0f:2b:63:28:e6:c1:e4:9a:
21:eb:50:da:fc:39:53:07:41:f2:89:69:35:3d:a9:
be:2b:41:d3:79:15:21:80:de:02:b6:df:ae:b2:8e:
a6:0c:79:44:4d:94:7a:86:07:b4:ea:ee:c8:25:6a:
f2:df:b9:9a:b0:2f:d1:ac:a4:1f:5e:38:fe:38:3f:
09:46:17:00:ed:5d:a9:33:b6:93:79:b7:0c:32:7b:
b9:e4:73:fd:a9:22:8f:90:0a:76:06:9e:80:08:e1:
4e:fc:82:3b:33:60:3b:04:3a:46:1b:6a:2c:a1:de:
41:0d:7b:9c:be:22:95:f0:5d:32:8c:5b:75:42:4a:
48:5b:e8:84:51:ae:07:6f:f3:d3:35:65:6e:95:1d:
ee:29:20:a8:92:6a:2d:49:11:3d:eb:e2:e7:b8:cb:
5a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1C:05:D2:3C:92:46:C3:30:A5:70:2C:C8:85:9E:5D:B5:9B:FC:29
X509v3 Authority Key Identifier:
keyid:AB:2D:4D:A2:F5:2A:C5:D8:C4:C0:3C:CC:30:61:5F:A0:A3:90:88:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy1NovUqxdjEwDzMMGFfoKOQiNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6716ad-839e-4d68-a59b-fc065ac96cff/1/qRwF0jySRsMwpXAsyIWeXbWb_Ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/6716ad-839e-4d68-a59b-fc065ac96cff/1/qy1NovUqxdjEwDzMMGFfoKOQiNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.129.164.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:19:3b:48:88:51:0b:a7:27:72:32:77:44:f5:ee:19:93:c5:
8b:5b:2b:3f:7b:1e:dd:8f:30:f2:8f:4c:0b:51:eb:ae:41:b8:
63:48:9e:0b:af:5e:18:98:89:75:e6:9c:4b:51:6c:c9:74:8b:
26:46:0d:cf:e1:16:bd:27:6f:21:62:25:fa:2a:ff:95:4f:5a:
d2:96:05:3a:46:49:92:58:58:aa:95:a0:eb:be:9e:ed:bf:35:
10:3b:f2:07:92:5d:be:e3:72:3d:eb:d3:58:f1:6d:a3:ef:e1:
dc:ac:d6:4e:af:2b:ae:d5:70:38:be:97:4b:3b:56:df:b9:59:
73:48:4a:dc:6a:17:44:ea:18:0b:4e:52:95:3f:94:90:40:66:
b1:9c:6b:4b:c5:58:01:9d:61:af:38:4f:7b:ed:8f:42:9a:0f:
0f:86:37:c2:a1:99:f0:86:7b:20:54:5d:76:73:08:dc:53:75:
85:90:6f:8b:5a:80:81:fa:db:98:c4:70:70:c8:0e:fd:21:a3:
7b:92:76:b9:5e:ff:82:e3:1c:55:4c:22:67:9f:59:8d:83:7c:
aa:42:b9:f9:14:54:86:d6:17:be:bf:ee:3c:46:ec:c4:cc:a2:
d7:f4:76:df:8f:1a:62:71:74:e3:c2:81:87:5c:ae:4a:51:02:
09:96:f2:c3
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEBkBvNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
YjJkNGRhMmY1MmFjNWQ4YzRjMDNjY2MzMDYxNWZhMGEzOTA4OGQ3MB4XDTIyMDEw
NDE0MDA0OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTkxYzA1ZDIzYzky
NDZjMzMwYTU3MDJjYzg4NTllNWRiNTliZmMyOTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM8E9XsM2RMIrkf59OPp3GcxdJrTh0fGTFytFM4ut7eMQZTK
YrGELJNV+w7cohkjXrFaL8e50c/KJ3Jeb6TOBPPrZStOLGdp+XIFjmEXM9CyGJS9
frrQMOuu/4A+3rbOeg8rYyjmweSaIetQ2vw5UwdB8olpNT2pvitB03kVIYDeArbf
rrKOpgx5RE2UeoYHtOruyCVq8t+5mrAv0aykH144/jg/CUYXAO1dqTO2k3m3DDJ7
ueRz/akij5AKdgaegAjhTvyCOzNgOwQ6RhtqLKHeQQ17nL4ilfBdMoxbdUJKSFvo
hFGuB2/z0zVlbpUd7ikgqJJqLUkRPevi57jLWl8CAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBSpHAXSPJJGwzClcCzIhZ5dtZv8KTAfBgNVHSMEGDAWgBSrLU2i9SrF2MTA
PMwwYV+go5CI1zAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3F5MU5vdlVxeGRqRXdEek1NR0Zmb0tPUWlOYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNmIvNjcxNmFkLTgzOWUtNGQ2OC1hNTliLWZjMDY1YWM5NmNmZi8x
L3FSd0YwanlTUnNNd3BYQXN5SVdlWGJXYl9Day5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNmIv
NjcxNmFkLTgzOWUtNGQ2OC1hNTliLWZjMDY1YWM5NmNmZi8xL3F5MU5vdlVxeGRq
RXdEek1NR0Zmb0tPUWlOYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAi2BpDANBgkqhkiG9w0BAQsFAAOC
AQEAjRk7SIhRC6cncjJ3RPXuGZPFi1srP3se3Y8w8o9MC1HrrkG4Y0ieC69eGJiJ
deacS1FsyXSLJkYNz+EWvSdvIWIl+ir/lU9a0pYFOkZJklhYqpWg676e7b81EDvy
B5JdvuNyPevTWPFto+/h3KzWTq8rrtVwOL6XSztW37lZc0hK3GoXROoYC05SlT+U
kEBmsZxrS8VYAZ1hrzhPe+2PQpoPD4Y3wqGZ8IZ7IFRddnMI3FN1hZBvi1qAgfrb
mMRwcMgO/SGje5J2uV7/guMcVUwiZ59ZjYN8qkK5+RRUhtYXvr/uPEbsxMyi1/R2
348aYnF048KBh1yuSlECCZbyww==
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:48:53 2025 by rpki-client