Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/qjI2NxNN1-LmRSW1r-OUXFhTksw.roa
File: qjI2NxNN1-LmRSW1r-OUXFhTksw.roa (raw, json)
Hash identifier: L81aEjHnZX82OokYtdnIxRicDdj46pqEjA14Y6bVBFk=
Subject key identifier: AA:32:36:37:13:4D:D7:E2:E6:45:25:B5:AF:E3:94:5C:58:53:92:CC
Certificate issuer: /CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Certificate serial: 0194244487492A0E1AE7C5187556A055DD01
Authority key identifier: A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/qjI2NxNN1-LmRSW1r-OUXFhTksw.roa
Signing time: Wed 01 Jan 2025 23:47:38 +0000
ROA not before: Wed 01 Jan 2025 23:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21859
IP address blocks: 45.8.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:87:49:2a:0e:1a:e7:c5:18:75:56:a0:55:dd:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a576eb2cc462e6e4bf0de69b9f634875debbaae2
Validity
Not Before: Jan 1 23:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa323637134dd7e2e64525b5afe3945c585392cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d2:70:b4:3d:6c:91:ec:92:56:c9:e7:e8:9e:
b0:41:58:14:43:7a:9c:dc:1e:01:3e:1e:4e:a7:7a:
74:96:f1:4e:d8:42:21:b5:e9:8b:07:e5:0f:e9:dc:
d9:55:fb:76:69:a4:75:84:a0:27:38:13:f8:04:d2:
e3:68:17:7f:d2:39:6a:af:f8:8d:7f:74:7c:13:ee:
44:f2:30:f3:b5:e8:64:98:24:f8:29:14:3c:45:42:
a8:f2:b1:6d:86:62:a7:9b:fd:d8:e2:2b:b8:58:eb:
66:e2:1c:8e:33:6f:d5:d4:e9:ba:cd:99:d4:a4:73:
4d:79:3a:da:5c:73:88:28:13:26:85:8f:cd:05:67:
21:27:8c:ef:74:52:8b:5c:1f:a8:3d:55:5e:b6:0e:
ef:80:86:fd:96:1f:c0:f8:6a:b7:f1:26:10:af:c8:
5c:a8:c8:30:b7:06:e1:00:b5:d4:91:88:47:a0:e5:
f5:2b:1a:4f:bd:bd:bc:84:24:53:9f:ce:d4:f4:a8:
3f:7b:0c:9f:39:86:e3:3c:30:04:74:81:47:4c:c5:
e8:eb:a7:e9:c4:42:8d:33:56:07:bc:8a:b5:b4:0b:
4c:e6:5d:b4:2a:64:25:16:3b:60:76:52:7a:fd:2d:
bf:96:1a:f1:8d:7e:ed:ac:c2:c8:94:52:5c:05:da:
80:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:32:36:37:13:4D:D7:E2:E6:45:25:B5:AF:E3:94:5C:58:53:92:CC
X509v3 Authority Key Identifier:
keyid:A5:76:EB:2C:C4:62:E6:E4:BF:0D:E6:9B:9F:63:48:75:DE:BB:AA:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pXbrLMRi5uS_Deabn2NIdd67quI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/qjI2NxNN1-LmRSW1r-OUXFhTksw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/931927-9f38-41b6-87fa-254acd92b4e1/1/pXbrLMRi5uS_Deabn2NIdd67quI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.33.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:16:93:38:30:19:7e:21:40:0e:e6:ea:c5:75:86:1d:d4:e7:
d5:f1:49:a4:94:cd:02:69:be:1f:21:29:cf:1e:7d:81:c3:a5:
8a:f9:6b:db:82:d3:cd:01:0a:f7:28:6d:1c:45:58:e1:4b:4c:
91:ec:ac:0e:d2:c6:b2:24:3b:f9:20:3b:f2:03:3a:08:84:c8:
35:9d:c7:d0:85:57:e0:b0:bd:8e:3b:c7:0d:84:79:b5:d8:39:
b9:c9:e2:fd:c8:13:59:08:89:68:78:06:9a:86:1b:fa:da:96:
dd:39:03:5e:2d:f5:33:0e:f0:4a:72:42:81:e2:71:9a:73:0a:
dd:84:ad:c4:08:f5:ff:bc:d3:5c:f4:f9:4d:dd:3b:67:a3:4d:
bc:27:9f:c4:61:33:e7:c4:84:fa:c6:c5:1a:28:ce:55:0b:32:
f3:50:f4:30:82:0a:83:4c:41:ae:3e:ab:6f:84:d3:82:4a:e7:
64:4c:a3:d7:c4:3c:dd:f8:7c:0b:02:8c:e7:a6:b3:0d:a3:17:
3f:32:61:13:52:93:9f:83:65:24:5e:fc:21:9c:d8:4c:7d:5a:
da:30:4a:f7:0d:7f:3c:44:4c:01:3b:fb:8e:f8:5d:14:5c:aa:
d3:0c:44:0a:f4:7b:39:82:20:f4:db:8e:fb:ca:cf:e9:31:43:
9a:db:94:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 02:33:20 2025 by rpki-client