Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/q6CD9OHloXnbJ4quKnzMfMA8Aio.roa
File: q6CD9OHloXnbJ4quKnzMfMA8Aio.roa (raw, json)
Hash identifier: 1FAJq7k9JZNXXgBXTfHO8QVEmHccCC1/W+DHOFmecBI=
Subject key identifier: AB:A0:83:F4:E1:E5:A1:79:DB:27:8A:AE:2A:7C:CC:7C:C0:3C:02:2A
Certificate issuer: /CN=330fe971b3e36b16a92be85f59985be45968b864
Certificate serial: 0194221F5DF74C0369CAA18F2AD8F4B01342
Authority key identifier: 33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/q6CD9OHloXnbJ4quKnzMfMA8Aio.roa
Signing time: Wed 01 Jan 2025 13:47:48 +0000
ROA not before: Wed 01 Jan 2025 13:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 5.175.80.0/21 maxlen: 21
94.103.16.0/20 maxlen: 20
159.255.216.0/21 maxlen: 21
185.68.180.0/23 maxlen: 24
185.68.183.0/24 maxlen: 24
185.170.92.0/22 maxlen: 22
2a03:6980::/32 maxlen: 48
2a03:6981::/32 maxlen: 32
2a03:6982::/32 maxlen: 32
2a03:6983::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:5d:f7:4c:03:69:ca:a1:8f:2a:d8:f4:b0:13:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=330fe971b3e36b16a92be85f59985be45968b864
Validity
Not Before: Jan 1 13:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aba083f4e1e5a179db278aae2a7ccc7cc03c022a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:69:cc:e1:0b:df:01:d5:ce:8c:e3:3a:39:2d:
57:de:6a:1d:31:e2:a7:d1:5e:96:4e:71:f3:d5:a3:
a2:02:7c:32:b1:53:c4:fc:7b:27:a6:c9:80:07:4a:
b0:03:7c:1f:7d:f0:76:e4:e2:2c:aa:24:95:72:58:
4b:ae:29:3a:1a:62:77:a1:be:31:14:2f:1b:0b:2d:
3e:8e:20:6b:8d:95:84:09:b8:d0:55:ff:02:60:a6:
23:22:f6:2c:0e:c7:cc:03:0b:8a:9e:ad:ee:63:37:
4b:46:c8:b5:e9:c3:86:9e:6f:e7:54:b2:2c:22:ee:
cc:84:7c:98:38:2e:55:e3:34:65:58:35:40:da:2c:
db:aa:2c:14:d7:4c:1f:ef:4d:b3:a3:3b:e1:30:3b:
21:bf:07:33:8c:c9:e3:f7:3c:51:cf:69:23:19:d3:
f0:83:dc:49:0d:e4:84:e1:e4:7d:1d:64:a6:15:86:
d1:95:8c:6c:3a:10:4f:b3:7d:ba:20:7c:96:4d:5c:
cd:aa:6e:94:56:a2:83:15:e4:01:af:f3:60:9e:9b:
64:bf:39:2b:f3:71:fe:c5:5a:7b:5a:5e:cf:f4:3f:
39:36:13:76:c9:6c:5a:b0:19:80:30:66:fb:e2:f2:
9e:53:8e:d8:e8:48:13:f3:be:9a:31:00:7f:41:24:
58:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:A0:83:F4:E1:E5:A1:79:DB:27:8A:AE:2A:7C:CC:7C:C0:3C:02:2A
X509v3 Authority Key Identifier:
keyid:33:0F:E9:71:B3:E3:6B:16:A9:2B:E8:5F:59:98:5B:E4:59:68:B8:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mw_pcbPjaxapK-hfWZhb5FlouGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/q6CD9OHloXnbJ4quKnzMfMA8Aio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a38693-cfa0-43e8-a51b-11e9e9f01343/1/Mw_pcbPjaxapK-hfWZhb5FlouGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.80.0/21
94.103.16.0/20
159.255.216.0/21
185.68.180.0/23
185.68.183.0/24
185.170.92.0/22
IPv6:
2a03:6980::/30
Signature Algorithm: sha256WithRSAEncryption
46:8a:a1:80:ad:d3:7b:c5:ae:ae:31:cc:87:a8:19:9b:4c:7b:
2c:ea:a8:0e:2e:28:81:43:66:8b:88:aa:44:3c:9f:ff:cf:9b:
f6:a9:90:dc:b6:8d:e1:0a:37:fb:d6:ed:ef:c3:76:f1:b8:0b:
32:be:0f:09:6a:4a:61:16:aa:2a:54:c2:e7:19:af:21:c5:65:
6f:7a:72:33:18:77:df:30:b0:98:ae:0b:24:0d:6a:fc:a5:ac:
1b:88:f3:bc:cb:7b:ea:a3:7e:77:9f:68:78:91:cd:fd:5f:d8:
db:bf:e3:27:59:de:10:ca:58:e2:39:80:a1:43:4c:05:22:6b:
70:68:ad:49:d2:db:f1:73:e4:98:13:74:9c:54:bd:f3:80:93:
99:8c:8e:ab:5a:ca:39:6f:c5:9e:5c:88:78:d7:be:eb:e5:90:
ac:86:f2:c4:c7:3d:cb:fb:30:ea:15:57:fe:85:4d:58:a9:eb:
bc:2e:a9:11:11:1f:ae:0e:8f:24:7c:c6:0b:d1:18:85:c7:29:
b8:c8:22:a9:a6:5d:1c:ac:a7:1e:a0:7f:09:e2:de:81:3b:76:
54:ea:15:39:45:57:70:7d:19:5f:ff:b7:b7:fb:f3:e9:5a:f0:
24:50:0e:e1:a2:1c:fc:cc:9c:4f:c2:9c:9f:08:aa:09:07:5f:
a0:83:63:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:11:07 2025 by rpki-client