Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/QwVFqW1cxvBL2o4-tPQAfG31V6w.roa
File: QwVFqW1cxvBL2o4-tPQAfG31V6w.roa (raw, json)
Hash identifier: IMKtYJw1aI4s13QbDf+l0CPN8GsM6khxtwC8WD7mBhQ=
Subject key identifier: 43:05:45:A9:6D:5C:C6:F0:4B:DA:8E:3E:B4:F4:00:7C:6D:F5:57:AC
Certificate issuer: /CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Certificate serial: 019423D76983EA067308F222637F4A12F271
Authority key identifier: B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/QwVFqW1cxvBL2o4-tPQAfG31V6w.roa
Signing time: Wed 01 Jan 2025 21:48:27 +0000
ROA not before: Wed 01 Jan 2025 21:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201061
IP address blocks: 5.1.92.0/24 maxlen: 32
2a00:f826:25::/48 maxlen: 48
2a01:367:abcd::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:69:83:ea:06:73:08:f2:22:63:7f:4a:12:f2:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4253c4f233ce9847699ae68ecbf5d7514b0fadb
Validity
Not Before: Jan 1 21:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=430545a96d5cc6f04bda8e3eb4f4007c6df557ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:59:bc:a8:e4:3f:98:d1:b6:85:66:5e:d1:18:
57:be:4b:1e:50:9e:ce:74:19:2f:bc:a8:a9:54:bc:
75:b9:e9:f3:21:83:fe:cd:3e:32:47:1d:e8:24:66:
f8:65:a2:ff:14:4c:b7:4b:23:e4:f4:30:93:7c:13:
32:17:3c:f3:99:75:40:3c:8f:d2:d4:b0:93:26:1f:
97:6f:e3:fd:38:9a:0a:ef:d1:f0:89:44:d7:7f:15:
ca:53:8d:cf:ed:60:39:f8:50:0c:f3:b6:2a:74:0e:
ad:f4:e6:52:87:b3:90:a6:c8:5f:8d:bd:a2:f1:7b:
a2:ee:32:c2:df:ef:16:9c:24:63:b7:01:a2:2c:28:
dd:0a:1e:3c:6b:a2:7d:5d:5d:c0:92:58:28:e2:d9:
d3:d0:24:62:eb:a2:79:61:4a:9a:30:98:e3:87:5d:
08:4d:90:85:4d:58:d1:3b:95:64:f3:48:2b:5d:bd:
d5:13:cd:38:93:30:7d:f6:21:72:d8:5d:24:b4:ea:
64:16:cb:0f:25:ed:0b:51:47:3c:f9:b4:34:6c:9b:
4b:54:75:0f:5a:60:ec:c1:77:56:fe:85:98:b6:5b:
20:37:79:68:9f:51:5f:24:a6:18:cc:41:b1:17:f7:
94:1c:54:f8:df:07:a2:98:c7:42:3f:42:8a:35:b5:
2c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:05:45:A9:6D:5C:C6:F0:4B:DA:8E:3E:B4:F4:00:7C:6D:F5:57:AC
X509v3 Authority Key Identifier:
keyid:B4:25:3C:4F:23:3C:E9:84:76:99:AE:68:EC:BF:5D:75:14:B0:FA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tCU8TyM86YR2ma5o7L9ddRSw-ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/QwVFqW1cxvBL2o4-tPQAfG31V6w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/41d6e1-5cad-40db-9773-58b38f5ac80b/1/tCU8TyM86YR2ma5o7L9ddRSw-ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.1.92.0/24
IPv6:
2a00:f826:25::/48
2a01:367:abcd::/48
Signature Algorithm: sha256WithRSAEncryption
9a:aa:52:a5:fa:10:7f:20:8e:fc:a3:f4:b5:4b:4e:79:6c:e0:
91:f0:fc:25:ff:2d:04:5f:f5:d9:16:53:36:28:7b:f2:ac:99:
73:c9:39:62:a4:be:cf:4e:d2:e7:0f:f6:0c:70:57:ea:92:ad:
c3:3d:2a:8a:5f:b2:01:a4:bc:15:ea:43:cc:26:2f:fd:04:ae:
c7:06:2f:7e:6c:3c:4b:c2:83:cd:ae:ce:f9:ec:4d:88:b3:db:
39:e4:93:59:6c:7f:3c:44:eb:f5:db:db:d7:34:09:9c:bd:20:
c2:f5:c7:70:9c:28:00:fb:9c:7d:06:a9:05:12:0c:b5:67:7c:
58:70:e6:08:4d:4b:82:18:eb:f4:ab:70:0b:ef:be:c0:a0:86:
62:f2:ab:e0:a8:c3:4a:44:8d:d8:2e:6b:82:de:13:2e:1a:b1:
8c:b8:de:e6:8a:90:51:36:6b:1c:d7:a2:51:78:83:41:ef:99:
3a:13:d4:3e:bf:3f:fe:57:35:08:f8:82:0c:9b:23:c3:e8:2f:
8e:43:9d:35:49:0a:c7:87:dc:75:21:89:42:36:40:61:22:93:
12:24:ff:54:53:1f:45:7f:31:01:e2:c0:bf:87:bb:8b:44:9f:
a1:01:19:19:f9:e8:aa:3d:8b:bf:f4:6d:ac:76:87:9e:08:30:
17:a2:22:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:08:54 2025 by rpki-client