Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/QA9NVOBnP4tDAeAGKeBBrJK6jXk.roa
File: QA9NVOBnP4tDAeAGKeBBrJK6jXk.roa (raw, json)
Hash identifier: /S3zUwTrf17IztbM7bS/w8GxX/h5PWsNVviHHhl5zF8=
Subject key identifier: 40:0F:4D:54:E0:67:3F:8B:43:01:E0:06:29:E0:41:AC:92:BA:8D:79
Certificate issuer: /CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Certificate serial: 0194244585B087DF7352344B11B3BCAAABD8
Authority key identifier: 54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/QA9NVOBnP4tDAeAGKeBBrJK6jXk.roa
Signing time: Wed 01 Jan 2025 23:48:43 +0000
ROA not before: Wed 01 Jan 2025 23:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 13243
IP address blocks: 62.148.32.0/19 maxlen: 19
77.94.232.0/21 maxlen: 21
146.192.128.0/17 maxlen: 17
185.226.100.0/22 maxlen: 22
193.36.191.0/24 maxlen: 24
195.245.202.0/24 maxlen: 24
195.254.192.0/19 maxlen: 19
217.18.192.0/20 maxlen: 20
2a00:ef8::/32 maxlen: 32
2a00:97c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:85:b0:87:df:73:52:34:4b:11:b3:bc:aa:ab:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Validity
Not Before: Jan 1 23:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=400f4d54e0673f8b4301e00629e041ac92ba8d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e8:f7:6e:96:62:5d:42:a6:58:e8:cc:ed:9b:
71:fd:69:f5:42:89:08:db:e5:86:87:7c:3e:96:f3:
62:2d:0d:9e:4b:26:ac:5b:94:bf:ee:be:63:00:8d:
7e:60:57:0f:0d:aa:47:b0:90:1e:d3:0d:8e:2c:8d:
f5:e4:70:66:47:43:c6:cf:17:4b:ea:18:86:22:59:
e4:1d:60:8e:7d:e1:07:86:0e:1a:e0:88:d8:9b:bd:
a9:80:6f:c0:a0:f0:a7:bd:f7:c4:df:41:64:f4:b8:
99:6f:11:14:71:99:e6:4c:d2:54:0d:53:29:dc:ac:
af:27:27:dc:5b:95:60:b1:05:56:24:99:d6:87:3b:
da:9a:f3:ff:72:4c:24:1d:2b:d1:e5:23:c7:9f:1b:
9c:12:d3:cd:e2:97:1c:99:a3:7e:ec:95:f5:4c:c4:
f1:e4:07:32:dc:12:5c:ce:95:53:0b:1b:20:16:2f:
4c:62:42:7f:ba:ff:85:9f:c6:e2:7e:73:b1:24:98:
a5:8e:fd:e2:9b:8f:18:a0:ff:55:87:d1:e8:82:d1:
94:db:43:80:aa:3b:07:2e:1d:e1:a3:26:e1:9d:df:
ba:86:d5:6f:6c:9d:6f:16:c3:5b:75:a5:d3:17:cf:
44:65:81:7b:fe:ab:b1:c8:02:aa:58:4d:13:95:8b:
8b:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0F:4D:54:E0:67:3F:8B:43:01:E0:06:29:E0:41:AC:92:BA:8D:79
X509v3 Authority Key Identifier:
keyid:54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/QA9NVOBnP4tDAeAGKeBBrJK6jXk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.148.32.0/19
77.94.232.0/21
146.192.128.0/17
185.226.100.0/22
193.36.191.0/24
195.245.202.0/24
195.254.192.0/19
217.18.192.0/20
IPv6:
2a00:ef8::/32
2a00:97c0::/32
Signature Algorithm: sha256WithRSAEncryption
18:41:1d:11:f0:62:46:2b:04:b2:a1:0e:8b:f8:8e:b6:ea:92:
d1:49:a2:fa:3c:5d:37:f3:4f:a0:03:ff:49:c0:ed:dc:26:a0:
de:29:7b:c6:89:83:e5:e5:8e:9c:ef:0a:49:48:f1:be:72:cd:
f0:c8:30:99:a5:85:61:a5:cc:9f:06:9c:ff:c8:e5:cd:57:fe:
c8:a1:b8:5c:79:2a:8a:40:2b:02:aa:a6:6e:dc:cd:b5:af:7d:
a5:bd:f8:c8:88:39:f1:0f:60:d3:3c:db:62:f9:7f:85:7b:47:
47:7e:4a:14:16:e0:5c:4f:49:f8:15:68:f5:30:8e:26:78:c0:
f8:8d:4d:83:53:a3:3c:83:35:3e:36:3f:b3:83:2e:e9:98:3a:
a1:a5:f5:53:4f:23:d3:35:67:9c:2a:8e:47:93:b6:4f:3c:56:
f2:17:fc:c7:52:00:6d:34:24:15:bf:8c:8f:9e:2d:8b:11:e5:
18:ad:04:94:d6:6c:ed:3f:43:5d:bc:da:59:f7:51:d2:06:95:
c1:00:04:8b:d5:d9:9c:1a:3e:bd:71:3c:44:a9:e5:84:20:72:
1c:46:3e:8a:bc:6e:b5:d3:0c:ea:a1:f1:db:a1:43:27:68:18:
b1:21:32:b9:8b:19:33:29:8d:42:0b:27:77:7d:51:c1:3c:29:
94:b9:c2:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 04:16:29 2025 by rpki-client