Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/e2ee66-41a2-4f08-8ed9-0907ee1e3d52/1/QL5jvVx5wdEBveSIFes8I_Itkh0.roa
File: QL5jvVx5wdEBveSIFes8I_Itkh0.roa (raw, json)
Hash identifier: i14dOg549+9U6sY2CkFQ97iMtufgoqeWi8ARdz2uuZ4=
Subject key identifier: 40:BE:63:BD:5C:79:C1:D1:01:BD:E4:88:15:EB:3C:23:F2:2D:92:1D
Certificate issuer: /CN=38227faf7513610334320ad9b3f95be1ff1099c5
Certificate serial: 01856C25CFEF4C22C8F399C6DDBF28830B9E
Authority key identifier: 38:22:7F:AF:75:13:61:03:34:32:0A:D9:B3:F9:5B:E1:FF:10:99:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OCJ_r3UTYQM0MgrZs_lb4f8QmcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/e2ee66-41a2-4f08-8ed9-0907ee1e3d52/1/QL5jvVx5wdEBveSIFes8I_Itkh0.roa
Signing time: Sun 01 Jan 2023 07:04:55 +0000
ROA not before: Sun 01 Jan 2023 07:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57523
IP address blocks: 152.89.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:25:cf:ef:4c:22:c8:f3:99:c6:dd:bf:28:83:0b:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38227faf7513610334320ad9b3f95be1ff1099c5
Validity
Not Before: Jan 1 07:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=40be63bd5c79c1d101bde48815eb3c23f22d921d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:7e:41:cd:67:99:63:eb:1f:c7:fa:ae:2e:5b:
07:41:64:a1:71:ec:79:e4:03:48:9c:69:e6:c9:6b:
1b:9f:6b:93:77:75:fc:ff:46:b3:b0:35:89:39:14:
4d:72:48:af:29:49:d5:61:29:87:f1:7b:65:e2:12:
4d:83:e4:6c:a8:b9:d0:2c:60:3b:a8:a1:12:5c:0b:
a8:46:06:83:1a:e5:f0:de:cf:36:19:5a:62:f8:da:
15:b4:11:0b:38:70:38:76:c6:e0:b1:c7:c1:0d:4f:
d6:ba:af:e6:ac:5c:9a:d2:99:ff:bc:78:0b:c2:70:
87:c2:2b:ef:02:a6:a2:1e:c6:a8:85:1f:8d:d1:76:
18:2c:87:d2:31:71:05:cb:f2:dd:68:54:53:34:f9:
9a:c7:36:05:98:67:94:7b:23:d9:72:c4:3c:b6:a2:
70:8c:70:0f:75:18:04:30:66:f0:84:80:12:c3:6f:
be:6c:50:46:0d:48:83:82:05:62:ee:0b:61:35:eb:
2e:ce:20:27:76:39:3a:93:3c:3d:83:66:1d:84:39:
e4:b0:77:94:4c:3f:c0:c8:bc:b6:3c:81:ce:6a:ad:
d3:56:25:fc:f1:91:12:08:c6:90:e2:e1:91:61:64:
ca:07:ca:2c:52:29:db:df:30:1d:6d:1c:42:28:eb:
73:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BE:63:BD:5C:79:C1:D1:01:BD:E4:88:15:EB:3C:23:F2:2D:92:1D
X509v3 Authority Key Identifier:
keyid:38:22:7F:AF:75:13:61:03:34:32:0A:D9:B3:F9:5B:E1:FF:10:99:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OCJ_r3UTYQM0MgrZs_lb4f8QmcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e2ee66-41a2-4f08-8ed9-0907ee1e3d52/1/QL5jvVx5wdEBveSIFes8I_Itkh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/e2ee66-41a2-4f08-8ed9-0907ee1e3d52/1/OCJ_r3UTYQM0MgrZs_lb4f8QmcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.196.0/24
Signature Algorithm: sha256WithRSAEncryption
48:68:77:25:c4:b8:39:2d:61:f2:d8:9e:ef:22:d8:4b:21:b9:
69:bc:7f:da:02:78:d7:c5:e0:c2:cb:36:89:35:dc:51:eb:f4:
f0:dd:cc:9a:5f:b2:cc:8c:be:c0:33:f0:40:5b:93:8c:a3:ff:
88:a0:87:d5:72:7d:2f:6b:7e:84:88:a9:e3:4e:4f:57:ce:ea:
87:68:18:3e:77:43:44:a8:ad:d2:a8:a9:be:9c:75:61:34:06:
35:8b:f5:cb:ae:97:b3:0a:74:5e:a9:2c:73:67:4c:11:a4:ab:
eb:65:aa:bc:2d:fb:ee:5a:57:eb:ff:c1:5b:5b:fa:98:96:a7:
0e:87:5a:44:76:55:91:f3:a1:3c:b0:e7:d4:04:f8:72:0b:87:
f6:7d:c4:6f:25:ac:47:70:4f:09:3c:3e:25:39:0c:eb:67:cb:
1d:1b:71:fa:32:96:0f:d4:38:1d:33:fa:a6:e3:4e:3c:cd:cd:
bc:b2:68:1e:ef:5a:73:ee:0b:29:8e:b2:2e:60:24:99:32:a7:
57:b9:12:59:3e:80:f1:ff:ec:ff:01:99:d6:5d:b9:9e:5e:12:
d1:67:b8:46:cd:af:39:4f:d9:72:aa:1d:d2:88:a3:a8:a8:90:
d4:d8:cb:54:c9:aa:d7:91:c1:77:c9:9a:63:31:83:44:2d:a9:
ee:f8:83:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:03:59 2025 by rpki-client