Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/QQWpWLaEnEc1AowUulqgIYaCWbo.roa
File: QQWpWLaEnEc1AowUulqgIYaCWbo.roa (raw, json)
Hash identifier: 2+bfjbIYGjxpwXPqgo7XP26qZ5etNIzrb5thO3bmEo4=
Subject key identifier: 41:05:A9:58:B6:84:9C:47:35:02:8C:14:BA:5A:A0:21:86:82:59:BA
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 01842C74EE8FE49476CB4B22F04D72EE27FA
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/QQWpWLaEnEc1AowUulqgIYaCWbo.roa
Signing time: Mon 31 Oct 2022 05:12:51 +0000
ROA not before: Mon 31 Oct 2022 05:12:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212219
IP address blocks: 45.141.151.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:2c:74:ee:8f:e4:94:76:cb:4b:22:f0:4d:72:ee:27:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Oct 31 05:12:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4105a958b6849c4735028c14ba5aa021868259ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f0:2e:dc:04:12:a1:d6:9b:c7:09:2c:82:5c:
20:f4:30:ac:fe:37:67:8e:77:61:9c:2c:fe:41:4d:
ca:2b:a0:54:d2:17:2c:07:3b:48:cf:58:f7:05:db:
f3:ba:55:6e:5c:34:a7:81:ce:d1:7d:65:e2:1b:ac:
5a:2d:d8:68:e5:b2:c3:01:27:5d:a5:5a:73:f9:fa:
a8:7e:b0:6e:5f:b9:cc:b5:ce:54:9a:3f:b0:ff:c3:
19:88:30:d2:34:dd:76:48:40:f3:24:2c:cf:01:68:
27:5e:71:e7:72:64:3e:a6:86:87:02:53:48:7e:56:
9b:ee:38:12:ba:a4:f7:48:9f:e4:e5:c2:06:c6:83:
2a:b3:82:92:8d:eb:c4:0e:49:e4:1d:18:fe:4a:18:
ad:58:6f:fb:81:cb:65:8b:85:67:a8:ba:49:ab:4c:
cc:2d:76:a6:0f:db:16:e5:7f:17:bd:03:b2:42:e1:
58:62:e5:a7:61:99:0b:fa:02:47:43:25:f0:e3:2e:
61:4b:5d:8d:23:19:35:99:39:eb:f2:7c:cb:70:0a:
56:13:ad:8f:61:9c:11:e7:b8:71:3f:33:48:4e:7c:
9b:6c:cb:eb:4f:78:8b:26:40:38:6c:0c:53:bd:92:
98:13:3e:f0:68:bd:32:20:85:81:fa:63:92:e9:94:
d6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:05:A9:58:B6:84:9C:47:35:02:8C:14:BA:5A:A0:21:86:82:59:BA
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/QQWpWLaEnEc1AowUulqgIYaCWbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.141.151.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:ab:3d:ac:89:41:72:87:a6:e9:24:b4:bf:fb:dc:09:23:6e:
f6:a8:3c:ec:78:4a:2b:dd:29:bd:02:e9:84:e0:a9:85:63:c6:
4c:74:b9:23:43:61:ab:ee:23:88:3f:2b:e5:7d:c5:33:be:1b:
1c:b0:e7:8b:5a:af:33:49:92:42:a1:62:5d:fb:c9:30:76:66:
f4:6a:10:43:c4:30:fd:1b:28:55:59:a4:0c:47:b2:34:62:10:
f6:a0:18:9d:3e:3a:3b:2f:42:79:9e:56:70:dd:ed:50:c3:97:
db:91:30:78:82:75:74:b1:8d:42:17:f9:f0:bf:11:bf:31:77:
7a:2e:ce:4b:c0:55:7f:21:79:3c:0c:f8:c4:9a:a0:76:d5:8b:
1b:49:d6:c6:77:5a:19:d0:7d:00:6d:ba:bb:e7:d0:66:20:a9:
56:f3:f1:5b:3a:5a:d3:ca:6a:c2:e1:30:43:8c:1e:2c:24:9b:
15:6b:04:6e:80:f2:3a:fe:66:96:64:a9:aa:e5:92:a6:bf:d0:
fe:fc:38:15:d5:4b:45:29:b0:27:66:c5:90:d8:d9:d1:9e:5e:
10:47:da:34:4f:ac:82:91:82:95:11:ec:a6:58:30:35:6c:1e:
3c:25:fa:e1:0d:d9:ea:0f:82:bb:c0:e0:a9:d2:a8:cd:be:9d:
6d:9a:1c:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:08 2025 by rpki-client