Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Qwnw9_jPQxxkKmijNXq_U9P2b8Y.roa
File: Qwnw9_jPQxxkKmijNXq_U9P2b8Y.roa (raw, json)
Hash identifier: AMsJwYkrCqG45HsBF48rqHqksHr37Qry1wcs4NWM/Ys=
Subject key identifier: 43:09:F0:F7:F8:CF:43:1C:64:2A:68:A3:35:7A:BF:53:D3:F6:6F:C6
Certificate issuer: /CN=67d16781bca64c2b236434edeffe6e452e7162d4
Certificate serial: 019423D7FC1E6088C6CA7646F66005AB1789
Authority key identifier: 67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Qwnw9_jPQxxkKmijNXq_U9P2b8Y.roa
Signing time: Wed 01 Jan 2025 21:49:04 +0000
ROA not before: Wed 01 Jan 2025 21:49:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15600
IP address blocks: 5.145.0.0/19 maxlen: 24
185.74.156.0/22 maxlen: 24
2a00:d520::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:fc:1e:60:88:c6:ca:76:46:f6:60:05:ab:17:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67d16781bca64c2b236434edeffe6e452e7162d4
Validity
Not Before: Jan 1 21:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4309f0f7f8cf431c642a68a3357abf53d3f66fc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4e:03:42:1c:81:e2:12:bd:35:9c:94:21:2f:
be:68:f8:81:a3:4d:4c:23:ee:7b:aa:07:6a:7d:c1:
ae:5e:ba:d7:2a:b5:ff:a8:6c:b4:57:39:43:1c:f8:
20:47:86:e1:75:5f:20:ba:50:b1:d7:f4:e7:37:d1:
0b:42:7a:4a:a6:66:2a:cd:83:14:8e:f8:5d:7f:c7:
b3:e1:c0:8a:a0:6d:6c:d1:cf:e2:3e:ee:1c:38:a8:
42:70:d8:80:09:d5:ed:76:e9:81:c1:64:82:cd:ae:
fd:77:1a:ad:ac:f5:fd:9d:74:ad:25:b0:0e:ae:65:
bf:ec:ee:02:19:01:5a:2a:c6:f9:0f:db:d0:9b:c9:
8f:34:b6:39:d5:c2:df:01:3c:ec:e3:6e:ee:a4:cf:
50:36:dc:6c:62:61:5a:21:33:ff:9e:d7:b1:e9:54:
81:5d:45:22:08:e0:2a:5a:dd:2c:a0:56:a9:3b:84:
a2:d4:bb:69:f9:8c:98:68:a3:ac:06:8a:ae:a5:81:
4c:da:5d:7f:cc:6e:25:ba:73:d9:87:17:78:80:dc:
38:77:34:0f:77:b2:72:de:3b:9c:27:a2:4c:85:13:
b8:ae:48:67:fc:21:ad:14:82:9f:07:5d:46:2b:b3:
4e:65:e9:cc:c2:fe:4d:25:f0:54:08:b8:f8:f5:e4:
21:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:09:F0:F7:F8:CF:43:1C:64:2A:68:A3:35:7A:BF:53:D3:F6:6F:C6
X509v3 Authority Key Identifier:
keyid:67:D1:67:81:BC:A6:4C:2B:23:64:34:ED:EF:FE:6E:45:2E:71:62:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z9FngbymTCsjZDTt7_5uRS5xYtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Qwnw9_jPQxxkKmijNXq_U9P2b8Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e47510-294f-4f05-abe1-ad59557e28c2/1/Z9FngbymTCsjZDTt7_5uRS5xYtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.0.0/19
185.74.156.0/22
IPv6:
2a00:d520::/29
Signature Algorithm: sha256WithRSAEncryption
a6:15:40:31:b2:db:de:3c:c0:19:cc:84:4f:62:a1:b3:d7:60:
4b:12:03:98:22:2d:c3:83:5b:65:e7:91:01:ca:57:52:68:15:
1c:2b:a4:19:12:35:67:e8:24:61:c5:9a:e4:b8:3b:8d:a3:5b:
8e:51:f2:ec:77:dd:e9:a9:4b:2a:08:74:9c:ce:d3:9c:89:a0:
8d:7b:b6:90:4d:dc:d8:94:d6:3f:f3:1d:90:d9:87:e2:8f:94:
31:d1:1b:87:1a:e7:04:6d:32:3a:fa:e8:dd:bb:f8:af:34:45:
6c:9c:59:72:34:ba:87:a1:ed:cc:f9:6b:b0:0e:42:da:32:31:
a3:45:1e:aa:f6:5a:27:e3:58:b1:98:ce:b5:b7:2e:d7:7e:56:
b7:90:f8:2a:1f:d6:53:1f:7b:b6:3f:d2:c6:59:11:22:9a:60:
07:10:9a:ec:ec:91:b4:4b:c5:b4:6d:70:2b:dc:6e:2c:bd:c4:
18:5b:d3:81:68:73:63:5f:fa:f9:52:11:1b:99:d8:44:d9:bf:
bc:f4:7b:4a:c1:bf:53:ce:45:d0:06:df:7d:f9:c0:79:ef:af:
41:a6:e0:b5:8c:29:e1:52:39:a2:cb:29:00:e8:fc:7b:48:e6:
84:54:d0:d2:13:c8:d6:57:99:ce:64:c3:15:4a:6c:be:29:42:
ac:e9:84:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:33:23 2025 by rpki-client