Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/qYcLtkX9nwxWRSvNVEAUnXk0Gh8.roa
File: qYcLtkX9nwxWRSvNVEAUnXk0Gh8.roa (raw, json)
Hash identifier: uW0LUh4aX/A4RWhfxffVlViL65qqd1EWr8OCT6eFcKA=
Subject key identifier: A9:87:0B:B6:45:FD:9F:0C:56:45:2B:CD:54:40:14:9D:79:34:1A:1F
Certificate issuer: /CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Certificate serial: 0194228D2AF24B83307F5FCFBBBEA37806C9
Authority key identifier: 24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/qYcLtkX9nwxWRSvNVEAUnXk0Gh8.roa
Signing time: Wed 01 Jan 2025 15:47:44 +0000
ROA not before: Wed 01 Jan 2025 15:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31104
IP address blocks: 62.129.2.0/23 maxlen: 23
185.100.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:2a:f2:4b:83:30:7f:5f:cf:bb:be:a3:78:06:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2415bf9c61c85db7c99ac4cdf79257e7997ab77c
Validity
Not Before: Jan 1 15:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9870bb645fd9f0c56452bcd5440149d79341a1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4c:4c:13:a7:20:46:50:17:1f:93:93:bb:42:
9e:e8:51:50:81:ea:c3:59:11:1c:e8:1c:f0:22:8b:
e1:7d:f5:82:a8:42:bb:76:95:96:be:d0:cd:e2:88:
db:d9:58:1e:c4:81:84:6d:54:b4:af:b8:3d:45:02:
af:bc:38:46:68:97:4b:28:60:d6:1c:fe:a8:3b:8c:
e1:17:58:42:ca:4b:22:10:08:d6:9a:df:ac:4c:5f:
72:32:b1:03:7d:15:54:2f:85:39:19:24:10:fc:62:
32:4e:e6:b5:ff:7a:c7:f6:50:3c:83:84:8b:a0:9d:
f0:84:0c:c8:2e:32:70:df:5a:01:ed:04:fe:2b:30:
1e:06:65:ad:d7:82:a1:2e:df:96:07:b1:40:05:35:
1f:f5:f4:85:23:27:d3:1e:b1:24:91:4c:cb:96:a7:
50:e8:51:1d:b0:f9:d1:dd:48:03:19:7e:56:86:a5:
8d:9e:e7:96:38:bd:b2:eb:06:09:71:36:d2:5f:1a:
8d:8a:2a:6e:55:a4:a1:ee:6d:e8:66:9f:38:a7:28:
73:f4:76:08:ab:56:ca:92:7d:ec:68:d5:a1:3f:82:
79:76:b1:ea:5a:97:d1:5e:43:10:3c:8c:14:83:9d:
4a:91:ac:bc:14:d4:cb:ec:86:f2:c2:10:db:a4:2d:
92:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:87:0B:B6:45:FD:9F:0C:56:45:2B:CD:54:40:14:9D:79:34:1A:1F
X509v3 Authority Key Identifier:
keyid:24:15:BF:9C:61:C8:5D:B7:C9:9A:C4:CD:F7:92:57:E7:99:7A:B7:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JBW_nGHIXbfJmsTN95JX55l6t3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/qYcLtkX9nwxWRSvNVEAUnXk0Gh8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/3389eb-1857-49d2-841c-6a18dc8816db/1/JBW_nGHIXbfJmsTN95JX55l6t3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.129.2.0/23
185.100.184.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:36:ce:67:c2:8d:b8:00:54:04:2d:e5:d7:8e:33:fd:cb:6e:
41:1f:8f:49:a5:d3:91:0b:b4:9a:9d:77:9b:4e:24:84:ef:25:
2a:d7:f4:7b:83:92:aa:5f:d9:0c:eb:5f:76:4d:9c:58:92:d1:
ce:f9:c0:c6:cc:31:62:b6:c9:b5:82:96:53:71:bd:99:0b:8d:
ee:0f:f8:aa:6e:d2:d0:7a:3d:79:49:78:50:90:0d:92:f2:ee:
82:24:86:1e:c9:73:aa:81:fb:d7:4a:d6:48:08:e2:01:05:51:
48:52:bd:bf:e0:a1:d8:d0:f8:3f:02:fd:4b:5b:7c:83:0c:e8:
18:85:71:7c:84:4b:6c:3b:c4:42:ad:94:34:56:3e:08:56:5b:
7d:05:9d:59:48:f4:32:ff:f4:7c:a7:1f:14:00:31:09:d6:55:
42:35:52:af:e5:5f:64:0d:71:06:f2:3b:dc:26:2b:9d:c9:7f:
7c:8a:63:d1:71:72:39:e7:cc:d1:0e:4d:9f:7e:ee:b8:cd:ea:
fd:00:1f:f5:3c:5e:70:cd:1a:fd:85:cd:16:38:b8:c6:d6:a8:
cd:f8:06:c3:5d:12:38:5b:c5:3f:ba:f5:b0:14:4e:12:23:9a:
54:99:ac:fd:14:43:79:0f:ba:fc:a0:32:1e:72:9c:f1:68:4d:
ba:c0:91:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:36 2025 by rpki-client