Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/Q5x-oLuKsAX8G6VHtW5DmYmMvBo.roa
File: Q5x-oLuKsAX8G6VHtW5DmYmMvBo.roa (raw, json)
Hash identifier: Yo25vViOdvC6dn3PtfxGUX7ghUL2FSb11Ef7j26sFsA=
Subject key identifier: 43:9C:7E:A0:BB:8A:B0:05:FC:1B:A5:47:B5:6E:43:99:89:8C:BC:1A
Certificate issuer: /CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Certificate serial: 019424B2A28EFDBE5ADE50EF1D967E5AA15C
Authority key identifier: 92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/Q5x-oLuKsAX8G6VHtW5DmYmMvBo.roa
Signing time: Thu 02 Jan 2025 01:47:54 +0000
ROA not before: Thu 02 Jan 2025 01:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42156
IP address blocks: 45.83.172.0/22 maxlen: 22
45.83.172.0/23 maxlen: 23
45.83.174.0/24 maxlen: 24
45.83.175.0/24 maxlen: 24
45.143.60.0/24 maxlen: 24
45.143.61.0/24 maxlen: 24
45.143.62.0/23 maxlen: 23
69.48.159.0/24 maxlen: 24
185.161.188.0/24 maxlen: 24
185.251.180.0/24 maxlen: 24
2a0e:8480::/29 maxlen: 29
2a0e:e2c0::/29 maxlen: 29
2a0e:e2c1::/32 maxlen: 32
2a0e:e2c2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:a2:8e:fd:be:5a:de:50:ef:1d:96:7e:5a:a1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92af03ca2df6423b77d0ef3737b0f4791aa035a3
Validity
Not Before: Jan 2 01:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=439c7ea0bb8ab005fc1ba547b56e4399898cbc1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:73:c2:44:55:fb:88:1a:f6:38:83:46:0c:c3:
7c:b0:fa:b7:37:bb:19:81:75:67:24:73:50:fc:59:
4b:cc:f4:ad:86:37:c1:16:34:ea:f1:00:95:f9:be:
99:0a:d1:cd:b0:d9:8b:56:02:bd:b5:92:63:db:e4:
f9:e2:73:27:8b:72:da:5f:ce:0c:11:23:ab:8a:19:
af:ce:5b:30:08:a7:fb:d1:56:72:6c:5b:91:eb:aa:
33:cb:3c:fc:b3:bd:38:95:c1:72:e6:9a:20:80:1c:
10:96:6d:7b:ce:e3:86:1a:8b:0e:b9:2a:7f:fd:a0:
ab:4a:2e:c8:f3:78:b1:46:92:5b:57:f7:6f:1b:e5:
18:3e:10:d8:4e:cf:7d:aa:b8:88:87:83:f8:9f:84:
f5:a2:37:d2:5d:73:6d:e8:a6:cb:14:cc:d5:1d:36:
9e:b2:e4:03:8e:95:8c:35:30:65:f5:f0:d8:c6:fa:
88:4e:38:28:e2:c2:cd:b0:3f:86:d1:40:f9:2b:1a:
05:ad:69:6d:7b:11:42:ce:f3:18:01:16:bd:26:8e:
e4:f9:9e:93:10:91:d0:69:b1:d6:54:18:5f:79:b7:
a6:5e:05:07:22:f5:5b:40:87:f1:c2:36:11:41:17:
70:4d:e6:01:b4:62:a3:53:4e:7e:21:f7:0f:02:df:
97:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:9C:7E:A0:BB:8A:B0:05:FC:1B:A5:47:B5:6E:43:99:89:8C:BC:1A
X509v3 Authority Key Identifier:
keyid:92:AF:03:CA:2D:F6:42:3B:77:D0:EF:37:37:B0:F4:79:1A:A0:35:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kq8Dyi32Qjt30O83N7D0eRqgNaM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/Q5x-oLuKsAX8G6VHtW5DmYmMvBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/9822bc-1593-498c-8f6a-703b6b70a7ec/1/kq8Dyi32Qjt30O83N7D0eRqgNaM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.172.0/22
45.143.60.0/22
69.48.159.0/24
185.161.188.0/24
185.251.180.0/24
IPv6:
2a0e:8480::/29
2a0e:e2c0::/29
Signature Algorithm: sha256WithRSAEncryption
4c:64:87:b6:b0:46:f4:ae:29:37:41:d6:21:0f:ad:55:e2:f8:
ac:46:46:ec:ed:a5:2c:c4:78:f3:42:bd:0c:bf:6b:22:b5:ff:
fb:93:d0:41:78:64:a8:6f:02:9c:a7:8a:86:b2:36:c4:60:38:
f2:62:6a:d0:57:fb:f0:af:bf:c9:18:3c:0c:c1:60:a6:62:19:
cc:1a:ab:e5:fe:19:42:26:6f:d9:9b:6e:4a:e8:c9:4b:df:62:
0d:99:a6:b3:84:7e:c7:0e:c4:54:80:60:44:6e:c5:6c:ed:7c:
6e:e5:24:fc:9d:21:74:5f:3a:36:8c:25:d5:27:f6:6f:a8:bb:
22:75:5e:2e:74:80:5e:43:36:b2:93:77:61:af:63:c6:93:86:
4d:e0:ff:5d:86:b8:fc:de:b4:48:fc:1a:34:bb:1f:97:73:24:
24:c6:e3:5f:50:6d:c6:5a:f4:be:51:eb:6b:e3:c7:1f:24:2a:
45:a6:31:52:7b:ba:0d:82:b8:e8:f6:6f:ea:83:08:50:50:e3:
cd:64:fe:d2:3c:2a:d0:bb:f5:cb:23:92:e3:1e:83:3f:bb:83:
82:74:a1:39:1c:a4:8d:05:b0:42:9c:31:7d:0e:2f:43:0e:ed:
fb:4e:8d:b7:da:11:5f:f6:6c:02:26:42:bf:91:b7:7b:3d:8a:
98:e7:ec:18
-----BEGIN CERTIFICATE-----
MIIFKzCCBBOgAwIBAgISAZQksqKO/b5a3lDvHZZ+WqFcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyYWYwM2NhMmRmNjQyM2I3N2QwZWYzNzM3YjBmNDc5MWFh
MDM1YTMwHhcNMjUwMTAyMDE0NzU0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzljN2VhMGJiOGFiMDA1ZmMxYmE1NDdiNTZlNDM5OTg5OGNiYzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nPCRFX7iBr2OINGDMN8sPq3N7sZ
gXVnJHNQ/FlLzPSthjfBFjTq8QCV+b6ZCtHNsNmLVgK9tZJj2+T54nMni3LaX84M
ESOrihmvzlswCKf70VZybFuR66ozyzz8s704lcFy5poggBwQlm17zuOGGosOuSp/
/aCrSi7I83ixRpJbV/dvG+UYPhDYTs99qriIh4P4n4T1ojfSXXNt6KbLFMzVHTae
suQDjpWMNTBl9fDYxvqITjgo4sLNsD+G0UD5KxoFrWltexFCzvMYARa9Jo7k+Z6T
EJHQabHWVBhfebemXgUHIvVbQIfxwjYRQRdwTeYBtGKjU05+IfcPAt+XMQIDAQAB
o4ICNzCCAjMwHQYDVR0OBBYEFEOcfqC7irAF/BulR7VuQ5mJjLwaMB8GA1UdIwQY
MBaAFJKvA8ot9kI7d9DvNzew9HkaoDWjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS85ODIyYmMtMTU5My00OThjLThmNmEt
NzAzYjZiNzBhN2VjLzEvUTV4LW9MdUtzQVg4RzZWSHRXNURtWW1NdkJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMS85ODIyYmMtMTU5My00OThjLThmNmEtNzAzYjZiNzBhN2Vj
LzEva3E4RHlpMzJRanQzME84M043RDBlUnFnTmFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME0GCCsGAQUFBwEHAQH/BD4wPDAkBAIAATAeAwQCLVOsAwQC
LY88AwQARTCfAwQAuaG8AwQAufu0MBQEAgACMA4DBQMqDoSAAwUDKg7iwDANBgkq
hkiG9w0BAQsFAAOCAQEATGSHtrBG9K4pN0HWIQ+tVeL4rEZG7O2lLMR480K9DL9r
IrX/+5PQQXhkqG8CnKeKhrI2xGA48mJq0Ff78K+/yRg8DMFgpmIZzBqr5f4ZQiZv
2ZtuSujJS99iDZmms4R+xw7EVIBgRG7FbO18buUk/J0hdF86Nowl1Sf2b6i7InVe
LnSAXkM2spN3Ya9jxpOGTeD/XYa4/N60SPwaNLsfl3MkJMbjX1Btxlr0vlHra+PH
HyQqRaYxUnu6DYK46PZv6oMIUFDjzWT+0jwq0Lv1yyOS4x6DP7uDgnShORykjQWw
QpwxfQ4vQw7t+06Nt9oRX/ZsAiZCv5G3ez2KmOfsGA==
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:59:43 2025 by rpki-client