Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/QG_ywXuGzcVcDbL0Ot-t5w9kRBo.roa
File: QG_ywXuGzcVcDbL0Ot-t5w9kRBo.roa (raw, json)
Hash identifier: Vf7sV0Dokqk2S/AmWq/v5EcW2ZBPDeSF0QqtOYLZ5jE=
Subject key identifier: 40:6F:F2:C1:7B:86:CD:C5:5C:0D:B2:F4:3A:DF:AD:E7:0F:64:44:1A
Certificate issuer: /CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Certificate serial: 01961ADFBA94EEADFA99C0FA2DE3C53918A1
Authority key identifier: 05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/QG_ywXuGzcVcDbL0Ot-t5w9kRBo.roa
Signing time: Wed 09 Apr 2025 14:06:32 +0000
ROA not before: Wed 09 Apr 2025 14:06:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29802
IP address blocks: 45.11.188.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1a:df:ba:94:ee:ad:fa:99:c0:fa:2d:e3:c5:39:18:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051f29462e7a7da7eb5f45da7873f14e403fe3ab
Validity
Not Before: Apr 9 14:06:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=406ff2c17b86cdc55c0db2f43adfade70f64441a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f1:39:17:d9:da:9f:f4:3c:a2:eb:41:17:69:
b8:7d:06:74:85:fe:0c:b7:9c:d1:a7:46:13:1d:e4:
08:31:79:1b:20:91:fb:9f:14:ec:77:8c:ae:4e:f6:
07:7b:f8:42:86:38:9b:41:86:69:9b:f3:77:86:18:
e7:d5:a6:7d:7f:83:ec:91:38:df:78:54:96:82:ff:
57:22:01:98:d5:f4:d2:c5:a1:d4:ac:ce:d2:d0:1d:
01:bd:54:28:80:16:7b:ef:88:b5:45:7d:53:13:41:
bf:b7:18:cc:3d:74:09:19:c5:3a:eb:46:09:5d:a1:
24:5e:d1:f4:51:1f:17:20:b4:18:05:a6:f3:17:ea:
a6:23:2f:58:ff:ed:ce:7d:01:e5:09:3b:0b:45:87:
b3:e7:f7:59:52:4e:0f:9f:60:2e:89:fd:29:1b:2c:
b6:97:f5:b9:80:82:47:f4:c4:82:a8:17:a0:43:fb:
cc:e0:1a:3c:e4:c9:64:c3:c1:da:17:c5:aa:1d:bd:
62:d9:e6:02:11:1b:03:c2:c5:05:ca:9f:22:6c:b8:
2f:55:12:e0:82:c0:aa:f7:79:66:2a:f7:5e:b0:1f:
b1:44:e5:9c:c0:58:3e:f3:2d:37:ef:44:cf:8b:e0:
da:16:7e:89:da:fa:8b:93:52:32:46:ba:88:09:b7:
45:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6F:F2:C1:7B:86:CD:C5:5C:0D:B2:F4:3A:DF:AD:E7:0F:64:44:1A
X509v3 Authority Key Identifier:
keyid:05:1F:29:46:2E:7A:7D:A7:EB:5F:45:DA:78:73:F1:4E:40:3F:E3:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR8pRi56fafrX0XaeHPxTkA_46s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/QG_ywXuGzcVcDbL0Ot-t5w9kRBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/395328-f461-44b7-b031-3f8b55da1ac4/1/BR8pRi56fafrX0XaeHPxTkA_46s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.11.188.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:90:b7:d2:a5:03:52:af:93:34:1e:cf:5f:d9:c6:13:50:11:
4f:66:dc:d4:62:11:2e:04:22:4b:20:48:49:ac:ab:c2:51:4e:
8f:2e:9b:60:32:ac:a3:f9:19:04:79:24:27:8b:9b:bf:06:4a:
b1:cc:76:d5:94:e4:65:c4:0e:4d:4c:6b:18:77:ac:2f:0d:9c:
a4:61:02:e3:d5:81:e4:7c:35:dd:47:bd:f6:97:10:d6:86:71:
2e:50:12:0d:4e:64:70:f1:94:be:a1:df:48:d9:e5:6b:2d:24:
5f:33:ef:ab:d0:a2:6a:24:76:59:60:d6:f6:e9:0b:0d:ce:4e:
a8:8e:55:3d:c2:20:53:87:5b:1b:6e:6a:8c:00:04:9d:35:04:
9b:70:df:13:aa:55:3f:37:b9:cb:38:91:82:c7:69:60:b8:4d:
4e:b3:d3:b9:fc:c3:a1:43:e9:17:57:de:c6:c9:e3:7d:2f:85:
54:24:97:6f:66:cd:da:8c:6e:7e:8d:58:d1:30:d3:91:67:79:
3a:0d:09:31:9a:cc:a0:e2:26:9a:d3:83:58:58:d8:c6:39:b0:
28:60:92:85:79:36:79:b1:50:d7:40:29:07:18:dd:5b:36:42:
56:62:22:7a:c0:15:db:ae:41:1b:d3:b3:c7:4d:55:35:fc:54:
90:23:50:d4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZYa37qU7q36mcD6LePFORihMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1MWYyOTQ2MmU3YTdkYTdlYjVmNDVkYTc4NzNmMTRlNDAz
ZmUzYWIwHhcNMjUwNDA5MTQwNjMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDZmZjJjMTdiODZjZGM1NWMwZGIyZjQzYWRmYWRlNzBmNjQ0NDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/E5F9nan/Q8outBF2m4fQZ0hf4M
t5zRp0YTHeQIMXkbIJH7nxTsd4yuTvYHe/hChjibQYZpm/N3hhjn1aZ9f4PskTjf
eFSWgv9XIgGY1fTSxaHUrM7S0B0BvVQogBZ774i1RX1TE0G/txjMPXQJGcU660YJ
XaEkXtH0UR8XILQYBabzF+qmIy9Y/+3OfQHlCTsLRYez5/dZUk4Pn2Auif0pGyy2
l/W5gIJH9MSCqBegQ/vM4Bo85Mlkw8HaF8WqHb1i2eYCERsDwsUFyp8ibLgvVRLg
gsCq93lmKvdesB+xROWcwFg+8y0370TPi+DaFn6J2vqLk1IyRrqICbdFuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEBv8sF7hs3FXA2y9DrfrecPZEQaMB8GA1UdIwQY
MBaAFAUfKUYuen2n619F2nhz8U5AP+OrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEt
M2Y4YjU1ZGExYWM0LzEvUUdfeXdYdUd6Y1ZjRGJMME90LXQ1dzlrUkJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC8zOTUzMjgtZjQ2MS00NGI3LWIwMzEtM2Y4YjU1ZGExYWM0
LzEvQlI4cFJpNTZmYWZyWDBYYWVIUHhUa0FfNDZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALQu8MA0G
CSqGSIb3DQEBCwUAA4IBAQCckLfSpQNSr5M0Hs9f2cYTUBFPZtzUYhEuBCJLIEhJ
rKvCUU6PLptgMqyj+RkEeSQni5u/BkqxzHbVlORlxA5NTGsYd6wvDZykYQLj1YHk
fDXdR732lxDWhnEuUBINTmRw8ZS+od9I2eVrLSRfM++r0KJqJHZZYNb26QsNzk6o
jlU9wiBTh1sbbmqMAASdNQSbcN8TqlU/N7nLOJGCx2lguE1Os9O5/MOhQ+kXV97G
yeN9L4VUJJdvZs3ajG5+jVjRMNORZ3k6DQkxmsyg4iaa04NYWNjGObAoYJKFeTZ5
sVDXQCkHGN1bNkJWYiJ6wBXbrkEb07PHTVU1/FSQI1DU
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:00 2025 by rpki-client on console.sobornost.net