Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/qAl0HgtwslGEcXBs6QIk7KNt_yc.roa
File: qAl0HgtwslGEcXBs6QIk7KNt_yc.roa (raw, json)
Hash identifier: OiPlUyfhhpTA5oQvXTYhMWcfG5qzdYpamimLH28EIdQ=
Subject key identifier: A8:09:74:1E:0B:70:B2:51:84:71:70:6C:E9:02:24:EC:A3:6D:FF:27
Certificate issuer: /CN=5a141c5090824d0a17c29ec4050e21007113fbda
Certificate serial: 0195AEABCE00DAC41D31D026671AB59FE9C3
Authority key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/qAl0HgtwslGEcXBs6QIk7KNt_yc.roa
Signing time: Wed 19 Mar 2025 13:50:49 +0000
ROA not before: Wed 19 Mar 2025 13:50:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31688
IP address blocks: 5.63.24.0/21 maxlen: 21
5.63.28.0/24 maxlen: 24
5.63.31.0/24 maxlen: 24
91.190.168.0/21 maxlen: 21
185.85.76.0/22 maxlen: 22
185.85.76.0/23 maxlen: 23
185.85.78.0/24 maxlen: 24
2a02:798::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:ae:ab:ce:00:da:c4:1d:31:d0:26:67:1a:b5:9f:e9:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Validity
Not Before: Mar 19 13:50:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a809741e0b70b2518471706ce90224eca36dff27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:15:7c:8b:9e:61:77:59:84:10:01:46:23:76:
c1:22:bc:4f:fc:fd:8a:e8:b1:4e:76:d9:09:cf:13:
ed:f7:fb:ca:0c:be:72:ce:bd:b6:f8:49:2e:2e:8b:
53:32:c5:fa:71:c7:c7:c6:b4:21:4e:81:32:05:eb:
d5:e6:4b:03:0c:aa:23:ba:a8:72:81:b8:97:ea:be:
d9:5f:42:ba:33:a6:2a:ae:f3:00:60:b6:bf:b8:8c:
d8:6f:bd:2e:23:60:75:9f:a7:f8:15:6e:d6:ec:60:
60:c1:78:0f:85:e9:86:b7:d3:6a:b2:7f:05:86:69:
47:81:41:0f:3e:a7:f1:1d:b5:54:20:70:75:5e:8c:
5e:08:27:db:a0:4a:8a:d6:2c:4b:f3:32:a6:8e:a2:
13:8f:55:d5:77:a4:d2:7e:c8:a8:11:58:ee:7d:35:
7b:0c:62:b0:2b:f1:b1:d6:74:47:96:be:02:35:ee:
97:87:25:aa:2b:bf:45:a7:8e:a6:a3:5b:3d:e4:d7:
85:6e:ad:39:12:e9:9e:44:ef:29:2c:2e:3d:51:16:
a1:a0:84:57:8c:93:e3:44:c2:9a:3e:d1:60:33:a2:
50:65:40:90:d6:32:d6:25:33:d4:52:cf:b8:b9:ec:
81:c4:a8:b9:9b:90:d9:f8:c4:f1:ea:ed:0f:c9:63:
9c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:09:74:1E:0B:70:B2:51:84:71:70:6C:E9:02:24:EC:A3:6D:FF:27
X509v3 Authority Key Identifier:
keyid:5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/qAl0HgtwslGEcXBs6QIk7KNt_yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.24.0/21
91.190.168.0/21
185.85.76.0/22
IPv6:
2a02:798::/32
Signature Algorithm: sha256WithRSAEncryption
b3:30:e7:ea:8d:43:15:05:ad:7d:69:57:f5:26:86:f5:48:2b:
b7:cf:52:a8:69:79:b2:28:04:13:7d:22:6f:5c:46:18:59:a6:
b5:08:61:50:7c:2b:b9:ee:2d:2c:61:ad:c4:9b:f7:b0:60:9e:
8a:ac:df:39:8a:7c:cf:1a:a7:50:bf:6b:45:e5:61:56:e8:6f:
9c:e8:81:af:76:bd:f3:8a:bd:fb:04:fe:89:39:20:d8:50:17:
f7:a4:e4:d4:3e:16:14:04:a1:11:d3:47:7d:15:9e:44:23:1f:
f9:84:8a:ad:48:ec:ff:64:48:82:e6:a6:bd:bc:44:73:76:9a:
fd:e0:f2:b7:ca:90:e3:ac:c6:3b:ae:6d:67:12:15:76:80:8c:
87:49:ea:fd:39:77:12:47:7f:16:4a:f6:fc:1d:a7:e9:7d:2e:
5d:be:11:60:5f:de:a0:b5:c1:bf:23:51:78:9a:41:7b:58:6e:
84:e2:75:a7:37:4e:e8:5a:ef:2e:36:9c:72:2c:31:86:4d:65:
ec:21:f1:75:83:15:25:a1:45:12:4c:a6:02:06:bb:d4:37:16:
50:86:72:61:94:f1:65:f1:9c:c3:94:67:51:e5:f7:6d:84:e1:
6d:d9:2c:31:42:0a:d7:47:87:eb:7a:e1:42:d5:bf:d4:10:02:
36:13:0f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:08:11 2025 by rpki-client