Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/ajmq5QdlQvXrCBRMjUs67yP9AmI.roa
File: ajmq5QdlQvXrCBRMjUs67yP9AmI.roa (raw, json)
Hash identifier: mQ5XjE5gzuzrTdkByBU3/meXRrw3VOANPbjnntSYJ74=
Subject key identifier: 6A:39:AA:E5:07:65:42:F5:EB:08:14:4C:8D:4B:3A:EF:23:FD:02:62
Certificate issuer: /CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Certificate serial: 01941FFA315AD026933C156DAA7A3F99980E
Authority key identifier: 22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/ajmq5QdlQvXrCBRMjUs67yP9AmI.roa
Signing time: Wed 01 Jan 2025 03:47:57 +0000
ROA not before: Wed 01 Jan 2025 03:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50316
IP address blocks: 147.123.112.0/22 maxlen: 24
147.123.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:31:5a:d0:26:93:3c:15:6d:aa:7a:3f:99:98:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22a5d84053e2b0c313af1e3ba5102466a5f79678
Validity
Not Before: Jan 1 03:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6a39aae5076542f5eb08144c8d4b3aef23fd0262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:a6:f1:84:c4:36:e9:02:ac:11:5f:39:0a:
3c:df:de:5d:c9:34:76:53:55:6f:b6:79:73:fc:e7:
58:49:97:9c:c0:fa:04:43:b7:f6:53:af:ba:23:6c:
42:30:14:8d:d9:50:9b:3d:0d:5c:dc:c8:03:98:5a:
6a:54:67:d9:81:bf:9d:8f:7a:ef:bb:4a:e6:ae:0a:
24:11:5a:7b:25:31:10:16:78:ae:78:f4:b1:70:08:
20:23:27:d7:e7:2f:38:5d:67:e7:11:42:7f:50:69:
b7:3f:b6:f4:b5:5a:f2:27:53:a9:fc:02:00:bd:27:
f5:60:e3:55:08:c6:40:4a:91:96:bc:1d:52:94:51:
13:ca:8a:42:e1:ce:f4:62:e3:72:05:18:52:56:db:
2b:0f:0a:80:08:d8:27:71:5a:e2:eb:f4:22:ba:93:
eb:22:4f:8a:7c:29:75:e4:8a:ad:e4:76:83:e6:c0:
a5:28:01:d0:02:ea:0b:3d:40:b5:0f:b5:f7:22:d1:
89:ee:cc:5a:ce:ac:0a:c3:8a:c4:12:36:74:fb:52:
8c:a2:b0:04:1f:bd:ef:ba:cd:61:c7:d1:bf:54:5d:
c9:dd:92:8a:00:b7:19:a5:95:1f:3e:f2:1a:6a:d2:
7a:ce:2a:42:17:17:64:b6:ba:06:25:f1:dc:3f:3f:
5a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:39:AA:E5:07:65:42:F5:EB:08:14:4C:8D:4B:3A:EF:23:FD:02:62
X509v3 Authority Key Identifier:
keyid:22:A5:D8:40:53:E2:B0:C3:13:AF:1E:3B:A5:10:24:66:A5:F7:96:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqXYQFPisMMTrx47pRAkZqX3lng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/ajmq5QdlQvXrCBRMjUs67yP9AmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/e3fb7d-dd4b-4d85-b08e-591caf536ecc/1/IqXYQFPisMMTrx47pRAkZqX3lng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.123.112.0/21
Signature Algorithm: sha256WithRSAEncryption
2e:50:85:a2:5f:55:67:bb:23:b3:54:07:99:6e:b2:af:f9:17:
85:26:1d:dd:1c:6a:b9:5e:07:74:cd:72:6b:fe:0c:44:07:02:
5f:d5:14:da:59:45:e3:56:c4:a3:26:db:a9:67:8a:83:84:43:
2f:59:4f:e6:fc:0e:e9:3f:f6:8a:83:a0:74:9e:a7:f6:8e:a4:
0b:ad:a8:f4:dc:04:44:2e:60:0e:51:8b:d1:af:dc:c4:15:b0:
cb:9f:40:ab:6d:7a:fa:b0:e5:e9:ba:93:ef:7f:01:7f:5c:89:
3d:9b:cb:68:86:b0:68:b3:5d:ee:11:d6:76:b7:c2:88:29:78:
77:3d:ed:cb:26:9f:b0:27:fe:c3:15:61:63:d8:fa:d6:3e:72:
f9:30:f2:d6:9d:ab:39:28:96:08:96:29:a7:d4:60:a6:24:ae:
40:13:33:88:8f:2a:39:ca:8d:d5:d4:ab:e2:31:84:fa:6b:10:
74:19:fe:c8:90:ee:d5:33:06:b3:0a:4e:b0:1d:5c:fd:2c:c3:
7e:7a:1c:22:42:86:4f:c8:43:06:24:ba:f5:aa:8c:e7:c7:30:
ee:0a:36:9e:3a:bb:6d:b5:b3:69:92:84:c3:44:1b:60:8b:1b:
89:95:b0:ae:38:ec:b2:15:c8:45:56:bc:61:c8:b1:0c:83:4c:
e0:a1:52:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:31 2025 by rpki-client