Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/qzb8YgUZuuRr69zWEIuHEWdCYGw.roa
File: qzb8YgUZuuRr69zWEIuHEWdCYGw.roa (raw, json)
Hash identifier: kk4vyz5h4+Xwm6D0Pd3wbsjHhVUCAHwJj1SVA8RzpvI=
Subject key identifier: AB:36:FC:62:05:19:BA:E4:6B:EB:DC:D6:10:8B:87:11:67:42:60:6C
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 018BC5DED9A2BA1B5C6727218E2217CCEBE3
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/qzb8YgUZuuRr69zWEIuHEWdCYGw.roa
Signing time: Sun 12 Nov 2023 23:29:57 +0000
ROA not before: Sun 12 Nov 2023 23:29:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48678
IP address blocks: 5.180.106.0/24 maxlen: 24
45.136.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c5:de:d9:a2:ba:1b:5c:67:27:21:8e:22:17:cc:eb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Nov 12 23:29:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab36fc620519bae46bebdcd6108b87116742606c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d0:69:60:11:5a:31:e6:52:62:80:27:58:16:
2a:a1:34:5b:6c:74:78:b8:05:53:d7:fc:b1:3b:c8:
50:ad:d6:eb:95:01:06:ca:07:0b:12:b3:e9:80:47:
b4:26:a1:a2:20:dd:c7:d9:a6:22:69:48:f0:9e:a1:
02:3d:85:00:b0:57:e3:12:7a:3b:05:f7:ab:86:64:
16:4e:28:8f:89:1e:ef:03:23:65:16:70:05:d1:70:
84:d2:f9:af:e6:da:4e:14:0d:64:87:fd:81:b8:76:
03:e7:7c:a4:36:c3:35:b0:c8:62:63:12:18:0d:f8:
db:20:39:13:25:b1:26:dd:38:a3:76:41:3a:09:4c:
70:47:32:80:9d:09:04:d0:b2:29:38:42:7b:d0:0c:
0c:17:ee:dc:72:17:c0:34:0d:6d:b5:c1:54:96:2b:
83:34:18:a3:0d:40:a8:60:fa:d5:ee:c3:9b:eb:c9:
d5:79:58:e4:d7:69:fd:ae:ee:32:71:d4:48:81:7a:
22:5b:f8:fe:f3:a0:ea:27:e7:b4:99:aa:29:28:14:
e2:a7:ab:0d:61:30:37:3b:d6:97:b0:cb:45:b4:ca:
04:b4:7f:20:06:20:3a:aa:4b:58:89:4f:10:ce:ff:
ef:8e:83:e1:c6:1f:33:17:eb:02:43:90:d7:b8:a4:
86:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:36:FC:62:05:19:BA:E4:6B:EB:DC:D6:10:8B:87:11:67:42:60:6C
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/qzb8YgUZuuRr69zWEIuHEWdCYGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.106.0/24
45.136.4.0/24
Signature Algorithm: sha256WithRSAEncryption
86:69:b0:a9:d3:30:9b:af:90:f5:e9:e9:30:61:eb:81:66:e0:
4b:5b:64:25:71:6d:25:f4:a5:e9:d1:a0:d7:7a:01:b0:ac:66:
9b:42:dd:9f:71:37:e0:d4:fc:15:91:79:67:b6:de:e7:de:46:
ba:73:46:9a:2e:e4:2c:20:47:f1:59:f7:2e:73:c5:8c:e3:b1:
ca:b5:da:0b:1c:42:e0:f4:6d:3e:e5:c7:f6:8d:35:88:0f:47:
21:81:4c:2c:f8:19:f4:0a:75:0f:f4:3a:2d:f6:bf:fb:ca:52:
0c:b5:da:85:32:20:fb:28:da:65:e6:f0:1f:c8:2a:ae:86:60:
e3:87:0c:88:c9:90:c3:52:59:f7:de:13:ad:70:be:c8:bd:f1:
33:02:fc:fc:87:6d:00:8d:af:57:3b:a2:14:91:05:c8:3a:53:
64:25:94:ed:2d:48:b2:7a:69:c3:1e:44:3e:32:4d:fd:09:cc:
1f:49:35:d6:d4:77:eb:dc:ea:09:39:9f:0c:d2:7b:9a:e9:2e:
50:96:38:6f:cc:9b:e2:ed:ec:2b:7c:bd:8d:db:98:19:df:fd:
a3:01:83:39:e6:c8:1f:d2:6e:14:b5:2c:ba:86:b5:04:f2:d9:
70:91:1d:36:0c:cf:72:cb:12:81:0e:e0:f7:2c:48:b2:d0:83:
ab:95:fe:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:49 2025 by rpki-client