Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/RqtwSOLfZXCtT6i-iXJPBXlS-Tw.roa
File: RqtwSOLfZXCtT6i-iXJPBXlS-Tw.roa (raw, json)
Hash identifier: x++OoIBpOVlhu2bDSyq/BzG7LV3g3RGN/EJ/KyFGWbM=
Subject key identifier: 46:AB:70:48:E2:DF:65:70:AD:4F:A8:BE:89:72:4F:05:79:52:F9:3C
Certificate issuer: /CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Certificate serial: 0194922B1CFCE5F1A3CE4B79EB2255C1DDEB
Authority key identifier: 8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/RqtwSOLfZXCtT6i-iXJPBXlS-Tw.roa
Signing time: Thu 23 Jan 2025 07:58:06 +0000
ROA not before: Thu 23 Jan 2025 07:58:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49813
IP address blocks: 5.63.128.0/21 maxlen: 21
5.63.131.0/24 maxlen: 24
5.63.132.0/22 maxlen: 24
5.63.134.0/24 maxlen: 24
109.105.128.0/20 maxlen: 24
109.105.129.0/24 maxlen: 24
109.105.133.0/24 maxlen: 24
109.105.135.0/24 maxlen: 24
109.105.137.0/24 maxlen: 24
109.105.138.0/24 maxlen: 24
109.105.139.0/24 maxlen: 24
109.105.144.0/21 maxlen: 24
109.105.144.0/23 maxlen: 24
109.105.144.0/24 maxlen: 24
109.105.146.0/24 maxlen: 24
109.105.147.0/24 maxlen: 24
109.105.148.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:92:2b:1c:fc:e5:f1:a3:ce:4b:79:eb:22:55:c1:dd:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ceb23e2c5d9f2c734488904505835ef2809fb3b
Validity
Not Before: Jan 23 07:58:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46ab7048e2df6570ad4fa8be89724f057952f93c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:66:bb:e0:56:e2:eb:44:7e:4f:e0:66:2e:7a:
74:15:c6:9c:1a:52:7b:e9:4d:92:28:ef:39:6a:05:
66:ba:46:c8:fa:35:9b:66:65:b5:2e:66:6d:00:26:
62:ed:7b:05:f1:d1:cd:05:7c:2b:2a:c2:0b:3b:cc:
1b:26:81:3c:46:9d:b2:c1:99:4f:38:bc:26:76:29:
17:82:d1:5b:ba:a1:96:e7:8a:aa:13:9b:2f:59:11:
bf:38:c3:d7:5a:c6:de:f5:7b:3a:e0:83:43:c1:ed:
b1:83:33:ae:ed:f7:ce:16:2d:87:6c:3b:73:b1:52:
d2:4f:c6:27:21:a4:33:f6:fe:4c:f0:e8:24:a4:c0:
ab:b6:22:25:b9:69:23:e6:7b:81:45:80:51:3d:30:
03:d8:6f:06:5a:19:a4:1b:40:fc:b0:b6:f9:eb:eb:
79:86:e0:d0:b8:64:65:a2:1e:9d:f7:7d:16:4b:d0:
b8:22:e7:b6:1d:ac:6e:ea:a3:60:62:31:82:56:36:
d5:61:72:47:fb:dc:6c:4a:ce:6d:22:9c:6a:e6:28:
3f:96:a5:16:60:09:40:c1:61:10:7f:ca:19:64:e6:
99:89:ca:48:65:12:c8:c6:e0:f4:72:5d:99:01:1d:
9f:55:49:ec:f9:36:f5:7c:7c:84:53:23:ad:33:d5:
d7:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AB:70:48:E2:DF:65:70:AD:4F:A8:BE:89:72:4F:05:79:52:F9:3C
X509v3 Authority Key Identifier:
keyid:8C:EB:23:E2:C5:D9:F2:C7:34:48:89:04:50:58:35:EF:28:09:FB:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/RqtwSOLfZXCtT6i-iXJPBXlS-Tw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/699292-3da0-4772-af82-8334e362236d/1/jOsj4sXZ8sc0SIkEUFg17ygJ-zs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.128.0/21
109.105.128.0-109.105.151.255
Signature Algorithm: sha256WithRSAEncryption
34:c4:76:9a:ac:eb:53:b6:b0:08:d0:2d:f4:cd:dd:81:f8:88:
7a:75:3f:6b:6f:a7:06:dd:3b:fd:9e:66:c1:f6:ed:c6:42:f7:
9c:a2:48:49:02:f1:29:e8:90:b1:d8:43:bf:e5:68:34:e3:16:
d5:d3:72:b9:7e:ca:06:c5:42:ba:f1:65:d3:09:3e:8e:a7:e0:
48:c7:b8:6b:b5:e7:2c:c5:dd:d5:1c:f5:1b:9b:5a:6d:aa:ba:
34:bf:3d:b0:54:08:8b:90:fe:50:29:dc:ce:a4:d7:d0:9a:36:
1e:5b:15:c4:a1:62:c3:e4:ab:ef:b9:2d:15:1e:7e:1c:ed:d7:
bd:d7:9b:91:70:f2:54:33:31:d8:fd:16:12:d4:79:89:2a:76:
4a:69:0d:c7:c9:07:fb:14:97:23:19:03:2a:18:b3:21:f6:24:
ce:9c:46:39:58:93:01:a4:82:c5:11:a0:58:c9:d1:83:ad:72:
67:39:41:31:e8:79:74:06:31:f8:ad:a6:06:f0:60:ce:69:d8:
3f:12:c4:eb:97:86:a7:46:14:e8:dd:f1:d4:02:ec:7e:90:ee:
63:95:91:f6:13:7e:ca:1b:fe:3e:9f:8c:0c:99:86:54:e9:29:
5b:a3:f1:72:bc:35:53:9d:80:73:c8:2f:2b:ca:67:56:a0:f3:
5e:e3:2e:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:06 2025 by rpki-client on console.sobornost.net