Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/qnxieo92o2L0zmiflR_MLWHBlwM.roa
File: qnxieo92o2L0zmiflR_MLWHBlwM.roa (raw, json)
Hash identifier: Hd1nZaTg+7vK0zXl8hgloYLAKAn/4DZJlRTSVWaFAKc=
Subject key identifier: AA:7C:62:7A:8F:76:A3:62:F4:CE:68:9F:95:1F:CC:2D:61:C1:97:03
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01941FFA9AAF4C29AFFAA9264DF070405A17
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/qnxieo92o2L0zmiflR_MLWHBlwM.roa
Signing time: Wed 01 Jan 2025 03:48:24 +0000
ROA not before: Wed 01 Jan 2025 03:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58071
IP address blocks: 37.230.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9a:af:4c:29:af:fa:a9:26:4d:f0:70:40:5a:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Jan 1 03:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa7c627a8f76a362f4ce689f951fcc2d61c19703
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:68:54:73:68:87:a5:f3:09:d5:24:4b:be:
03:89:58:64:d5:6e:bb:b5:ac:96:1d:76:ed:ad:2a:
be:4d:55:a1:c9:df:9a:dc:2a:29:4b:4c:34:f2:a7:
fa:7f:bb:bc:1a:7a:03:21:ee:90:20:fc:7f:56:eb:
9f:39:02:ec:07:93:84:7b:ec:95:99:f4:95:2b:9d:
b4:62:07:50:a0:a0:5c:0d:55:b9:82:db:67:3a:6b:
64:dc:66:a6:98:f5:ad:22:8d:51:08:0e:f6:3c:83:
68:a4:2d:f9:d9:b8:e6:a7:d1:36:c3:11:a3:ad:7d:
f4:22:21:b9:e4:1f:3d:d3:06:df:c7:39:e5:a7:be:
ab:f3:72:46:e0:ae:9c:85:84:c0:24:11:e0:3d:38:
b0:d9:0f:d3:df:33:f4:15:fe:14:af:2d:2f:2e:1c:
ed:3e:3b:9f:4e:e9:eb:71:4e:f0:df:b5:8d:92:1c:
80:4a:fa:7a:14:53:fd:63:6a:53:88:51:70:f6:bf:
1d:f8:50:43:c3:ed:e6:37:ad:79:ff:82:49:0f:53:
8a:c5:16:ca:cd:8b:79:98:f4:85:12:25:73:ff:ee:
c0:54:0b:c0:db:65:99:27:03:7f:c8:be:ad:fa:31:
a3:ea:38:01:b1:08:2e:a4:37:32:59:18:33:e2:0e:
4f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7C:62:7A:8F:76:A3:62:F4:CE:68:9F:95:1F:CC:2D:61:C1:97:03
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/qnxieo92o2L0zmiflR_MLWHBlwM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.156.0/24
Signature Algorithm: sha256WithRSAEncryption
16:8a:4e:73:10:2f:17:b0:87:1b:54:3f:e0:c8:e4:5e:b4:43:
b4:77:dd:82:e4:05:40:65:f1:7a:64:87:ff:7a:73:ef:19:4b:
27:c0:2e:5e:a1:ee:00:ce:4a:5c:0a:ca:64:7a:13:67:7f:9b:
cf:2d:20:12:9c:55:8f:e0:29:c3:da:45:33:fb:b7:c5:cb:da:
59:8e:e9:73:79:d6:f2:f1:cf:13:54:28:7c:4e:04:05:45:f0:
2d:22:86:91:60:48:1e:da:e8:d5:cb:78:fa:6c:fa:2c:2d:91:
5c:19:6a:59:33:ec:3a:49:9e:b7:5f:4e:75:cb:2f:77:62:63:
06:f9:0a:ec:b5:8f:c4:81:31:41:66:b4:de:cf:3a:49:e0:a1:
f3:6a:43:cf:ac:da:7d:81:7a:0b:98:3a:c9:fd:5e:22:0e:15:
d5:c3:54:fa:ce:2a:83:5a:77:52:1e:ef:cd:ba:2d:74:c3:ef:
59:a6:c9:d2:9f:0e:c0:d5:8e:44:48:5a:bc:17:5e:4f:91:3c:
50:54:36:65:0c:85:d2:13:9d:e4:a9:75:28:5b:f6:63:37:d5:
48:9c:27:da:98:77:4f:b2:34:eb:3d:7f:23:ff:c4:22:8e:d8:
0d:68:c2:17:fb:e1:0d:ca:1d:a9:e7:34:ad:70:66:d3:94:94:
d5:39:7c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:02:02 2025 by rpki-client