Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/aqMlRyXFF3MZq_HuCgUUi65uKJg.roa
File: aqMlRyXFF3MZq_HuCgUUi65uKJg.roa (raw, json)
Hash identifier: LyUxXMbv9DIW0MA/p9uc9iCcmc5wGZs1xeaJCZat7fw=
Subject key identifier: 6A:A3:25:47:25:C5:17:73:19:AB:F1:EE:0A:05:14:8B:AE:6E:28:98
Certificate issuer: /CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Certificate serial: 01942824158CF91E5AB2A062C10E699B6C36
Authority key identifier: 86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/aqMlRyXFF3MZq_HuCgUUi65uKJg.roa
Signing time: Thu 02 Jan 2025 17:50:41 +0000
ROA not before: Thu 02 Jan 2025 17:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 152179
IP address blocks: 149.126.92.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:15:8c:f9:1e:5a:b2:a0:62:c1:0e:69:9b:6c:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86cce06e70df970d90abfe3cbe7fa882f467b1e4
Validity
Not Before: Jan 2 17:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6aa3254725c5177319abf1ee0a05148bae6e2898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:07:3e:2d:a5:0f:e6:17:94:e1:4f:90:66:
c3:77:7c:3e:e5:d2:65:80:8d:7c:e9:c1:32:f1:92:
69:21:e7:83:1f:31:7f:8a:d3:20:c2:1f:22:96:1e:
30:fb:85:7e:11:b8:e7:d7:89:6d:15:77:44:de:cc:
af:95:d6:b1:27:b3:19:0c:25:62:d7:24:76:a9:a2:
a4:21:25:07:31:88:09:7d:aa:3c:32:a9:0b:52:fc:
8f:f3:a1:1a:ba:ea:08:20:5a:57:54:dd:bc:4f:8c:
61:71:c3:3f:64:8c:29:6b:b2:70:5a:a7:52:87:b4:
46:c1:a0:7b:c7:9e:ad:7f:67:26:9b:65:6e:bc:19:
27:b1:80:7d:4b:e8:9e:1c:b8:0a:29:02:d5:9a:e0:
03:6e:15:e3:3f:8f:f5:e2:e9:b1:c0:c1:80:fa:6b:
65:c9:eb:28:2a:e3:2d:e9:cd:66:d1:d6:2d:9a:33:
02:ed:9d:26:d4:48:27:bf:b3:5b:13:04:a9:71:25:
30:d8:e0:e4:6e:5b:20:44:2c:38:54:15:1a:11:5e:
d3:06:67:d1:ca:f7:ad:3a:cf:8d:f6:8b:5c:df:70:
4f:c2:4a:8d:db:ca:8d:09:3d:2c:07:f5:9d:f6:00:
34:0d:60:46:20:0b:ba:93:f2:53:d9:1c:57:f8:b8:
ab:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:A3:25:47:25:C5:17:73:19:AB:F1:EE:0A:05:14:8B:AE:6E:28:98
X509v3 Authority Key Identifier:
keyid:86:CC:E0:6E:70:DF:97:0D:90:AB:FE:3C:BE:7F:A8:82:F4:67:B1:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hszgbnDflw2Qq_48vn-ogvRnseQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/aqMlRyXFF3MZq_HuCgUUi65uKJg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/66f05c-741c-4720-bc7e-89714a7e8d58/1/hszgbnDflw2Qq_48vn-ogvRnseQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.126.92.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:3d:70:6a:35:13:fc:f3:1c:78:f0:a0:df:e7:8f:da:34:34:
ab:ee:55:d8:d0:36:23:c3:b5:2b:db:5c:29:35:8e:49:6c:6e:
df:e9:a7:3e:1a:c8:77:54:a9:f2:87:91:a1:48:a6:cf:8a:29:
03:33:65:58:36:75:d9:fd:49:85:25:dd:15:13:43:0d:2b:37:
02:ca:8b:84:08:8e:4b:bd:a8:87:46:17:80:b7:85:78:df:a9:
47:37:3e:3e:5b:66:bb:48:80:81:2b:31:1c:1d:3a:8e:77:e2:
b6:84:c2:67:94:f3:56:04:ea:0e:01:f0:33:e7:da:1c:89:c3:
9c:24:47:4f:4f:b5:52:cf:be:ee:4a:c8:9b:b7:49:d9:7a:8b:
6c:77:58:0d:38:10:4e:5a:d5:d0:b7:b4:41:18:b4:de:ef:bd:
e1:dc:d3:44:67:f5:94:6d:50:5d:bc:a2:a3:4b:a9:4b:1f:1b:
36:c5:1e:b9:d5:bb:26:61:b5:21:0e:b1:4c:c4:c3:ed:08:d2:
2e:92:e1:fd:95:f1:4b:ba:a0:a7:98:05:18:cd:10:c0:96:7e:
d1:67:2b:c6:f6:ea:43:d7:e2:28:96:d5:6f:54:65:3a:f8:86:
40:ff:6d:bf:54:44:a6:00:20:19:f3:90:f9:41:ee:1a:83:2f:
f2:f9:5c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:53:36 2025 by rpki-client