Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/Qe2GdvIre6VRBXPkBYObOfmMbfk.roa
File: Qe2GdvIre6VRBXPkBYObOfmMbfk.roa (raw, json)
Hash identifier: JkAvv2pHRHvAlmL85qPxiEr2ytCIPi2hS+rY1vhEPak=
Subject key identifier: 41:ED:86:76:F2:2B:7B:A5:51:05:73:E4:05:83:9B:39:F9:8C:6D:F9
Certificate issuer: /CN=d53f6b9ad30b6555fa5a54e7eb152b2bf412f226
Certificate serial: 01936619D886881C6809E72843CF1EEEB850
Authority key identifier: D5:3F:6B:9A:D3:0B:65:55:FA:5A:54:E7:EB:15:2B:2B:F4:12:F2:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1T9rmtMLZVX6WlTn6xUrK_QS8iY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/Qe2GdvIre6VRBXPkBYObOfmMbfk.roa
Signing time: Tue 26 Nov 2024 01:33:09 +0000
ROA not before: Tue 26 Nov 2024 01:33:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212555
IP address blocks: 45.158.104.0/24 maxlen: 24
45.158.105.0/24 maxlen: 24
45.158.106.0/24 maxlen: 24
45.158.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:66:19:d8:86:88:1c:68:09:e7:28:43:cf:1e:ee:b8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d53f6b9ad30b6555fa5a54e7eb152b2bf412f226
Validity
Not Before: Nov 26 01:33:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=41ed8676f22b7ba5510573e405839b39f98c6df9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:0a:6d:bd:fb:10:64:c3:c8:69:1a:8f:a7:16:
9e:ae:bc:5d:a1:67:55:ef:0c:23:e8:b5:61:bf:f2:
c4:b5:a4:42:92:2b:37:9c:cf:8e:33:6c:00:91:37:
a0:dd:7d:c3:1b:2d:0e:90:64:db:3b:b7:0c:7e:ff:
c2:d1:c9:7c:04:ed:2e:e8:81:b2:d9:d7:f5:6b:4c:
c2:f5:95:bb:8a:1a:55:a7:fe:2e:d4:36:ab:dd:45:
5d:14:c3:42:fa:cd:f5:0e:dd:97:e8:e7:09:45:ac:
84:9c:45:34:0c:6d:c4:94:48:d6:79:24:09:dc:56:
0a:cf:48:00:10:61:e6:77:98:e0:7a:d1:01:e6:37:
7a:d7:8e:74:56:62:83:8b:7e:f0:a8:14:af:8b:c0:
e1:85:80:55:eb:25:16:45:6e:2b:98:9b:1b:ce:a4:
14:2f:a7:07:83:d6:74:e2:1c:d6:ba:c1:f0:1e:bd:
3c:7f:00:f0:f5:98:0a:e2:e9:2b:cc:64:ee:2b:db:
b1:cc:52:a4:d4:8c:2d:df:10:7f:79:e2:a4:bd:72:
ae:5d:1e:35:fb:d1:86:7d:77:0c:10:41:34:e3:b2:
c1:53:e5:99:98:d6:44:4d:72:a0:e6:36:80:7d:e3:
08:fd:71:37:e5:98:94:86:60:b2:7d:b9:10:81:b2:
2f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:ED:86:76:F2:2B:7B:A5:51:05:73:E4:05:83:9B:39:F9:8C:6D:F9
X509v3 Authority Key Identifier:
keyid:D5:3F:6B:9A:D3:0B:65:55:FA:5A:54:E7:EB:15:2B:2B:F4:12:F2:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1T9rmtMLZVX6WlTn6xUrK_QS8iY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/Qe2GdvIre6VRBXPkBYObOfmMbfk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/fd3630-6c71-4bed-966a-ae7d4c7538ad/1/1T9rmtMLZVX6WlTn6xUrK_QS8iY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.158.104.0/22
Signature Algorithm: sha256WithRSAEncryption
96:25:17:cb:69:e4:a4:a3:9f:61:7c:a7:92:7a:87:09:2a:30:
9e:ae:5e:a8:f9:2d:35:44:20:f7:a2:4c:8d:ee:8e:2a:d1:92:
15:ec:02:35:25:f3:96:28:5f:88:a5:92:07:1a:37:39:64:be:
0e:f5:1c:bf:90:f8:63:96:d3:c6:7f:d7:d4:14:1b:14:55:b5:
3a:30:b4:b6:a9:a3:98:36:7b:73:9c:c0:91:9c:fb:c1:80:ce:
6a:3b:53:2e:7b:29:00:0a:df:b8:87:8a:58:61:33:20:64:ec:
5c:82:98:47:a7:89:23:51:02:ad:38:d1:36:9f:d4:8c:d5:ce:
2e:c6:d8:e0:19:4c:6a:5d:6a:23:b6:d0:bb:35:46:29:c9:1e:
b3:bd:26:52:32:27:67:e4:55:77:89:07:2e:a5:30:1c:8d:11:
ae:5b:2a:9e:a7:b8:60:1c:9a:42:6d:6b:84:19:8b:7e:ab:40:
21:0b:f8:43:4e:84:a5:05:14:18:65:bd:6c:50:20:30:d5:fd:
b8:0f:d7:11:9b:80:08:cc:d9:53:f3:44:56:c2:b3:72:3e:d0:
1b:4b:3b:9f:58:5f:f0:6f:86:60:27:ad:21:8d:19:32:1a:3b:
62:43:8d:8c:48:09:05:52:e9:82:57:06:3c:49:9b:d7:a7:9e:
d1:1d:14:0a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZNmGdiGiBxoCecoQ88e7rhQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1M2Y2YjlhZDMwYjY1NTVmYTVhNTRlN2ViMTUyYjJiZjQx
MmYyMjYwHhcNMjQxMTI2MDEzMzA5WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWVkODY3NmYyMmI3YmE1NTEwNTczZTQwNTgzOWIzOWY5OGM2ZGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/AptvfsQZMPIaRqPpxaerrxdoWdV
7wwj6LVhv/LEtaRCkis3nM+OM2wAkTeg3X3DGy0OkGTbO7cMfv/C0cl8BO0u6IGy
2df1a0zC9ZW7ihpVp/4u1Dar3UVdFMNC+s31Dt2X6OcJRayEnEU0DG3ElEjWeSQJ
3FYKz0gAEGHmd5jgetEB5jd61450VmKDi37wqBSvi8DhhYBV6yUWRW4rmJsbzqQU
L6cHg9Z04hzWusHwHr08fwDw9ZgK4ukrzGTuK9uxzFKk1Iwt3xB/eeKkvXKuXR41
+9GGfXcMEEE047LBU+WZmNZETXKg5jaAfeMI/XE35ZiUhmCyfbkQgbIv8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEHthnbyK3ulUQVz5AWDmzn5jG35MB8GA1UdIwQY
MBaAFNU/a5rTC2VV+lpU5+sVKyv0EvImMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVQ5cm10TUxaVlg2V2xUbjZ4VXJLX1FTOGlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi9mZDM2MzAtNmM3MS00YmVkLTk2NmEt
YWU3ZDRjNzUzOGFkLzEvUWUyR2R2SXJlNlZSQlhQa0JZT2JPZm1NYmZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi9mZDM2MzAtNmM3MS00YmVkLTk2NmEtYWU3ZDRjNzUzOGFk
LzEvMVQ5cm10TUxaVlg2V2xUbjZ4VXJLX1FTOGlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLZ5oMA0G
CSqGSIb3DQEBCwUAA4IBAQCWJRfLaeSko59hfKeSeocJKjCerl6o+S01RCD3okyN
7o4q0ZIV7AI1JfOWKF+IpZIHGjc5ZL4O9Ry/kPhjltPGf9fUFBsUVbU6MLS2qaOY
NntznMCRnPvBgM5qO1MueykACt+4h4pYYTMgZOxcgphHp4kjUQKtONE2n9SM1c4u
xtjgGUxqXWojttC7NUYpyR6zvSZSMidn5FV3iQcupTAcjRGuWyqep7hgHJpCbWuE
GYt+q0AhC/hDToSlBRQYZb1sUCAw1f24D9cRm4AIzNlT80RWwrNyPtAbSzufWF/w
b4ZgJ60hjRkyGjtiQ42MSAkFUumCVwY8SZvXp57RHRQK
-----END CERTIFICATE-----
Generated at Sun Apr 20 19:57:08 2025 by rpki-client