Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/qJoBM72zokMAKbc6NA0C-8WIX9U.roa
File: qJoBM72zokMAKbc6NA0C-8WIX9U.roa (raw, json)
Hash identifier: bq5rMcHWk9x2UP3CEkMd/ZNudWIShBKfBSGcOmZBAsM=
Subject key identifier: A8:9A:01:33:BD:B3:A2:43:00:29:B7:3A:34:0D:02:FB:C5:88:5F:D5
Certificate issuer: /CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Certificate serial: 019425FDB85D8600BBCC721227A0F230BE0E
Authority key identifier: 05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/qJoBM72zokMAKbc6NA0C-8WIX9U.roa
Signing time: Thu 02 Jan 2025 07:49:32 +0000
ROA not before: Thu 02 Jan 2025 07:49:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 208439
IP address blocks: 45.136.164.0/22 maxlen: 22
2a0e:9ec0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b8:5d:86:00:bb:cc:72:12:27:a0:f2:30:be:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05a991acd7b2273d9e1865afa2755e6f5e672e55
Validity
Not Before: Jan 2 07:49:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a89a0133bdb3a2430029b73a340d02fbc5885fd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:8c:fc:65:3d:c6:fd:74:6c:5f:b8:f9:ec:
56:e8:43:23:c8:f8:7b:80:41:b1:ad:6e:84:6d:18:
43:6b:4e:2f:cc:f9:f8:bd:4f:2e:77:49:0c:15:a1:
2e:f6:ee:6d:8b:95:46:f4:d5:a9:13:e3:14:32:4f:
2e:93:8b:f4:97:47:4a:58:e8:dc:97:01:21:46:ba:
fe:0f:64:cd:bb:33:f2:46:13:4e:57:1e:08:05:d1:
67:89:fd:36:77:9b:d8:55:e8:94:cd:b5:98:68:30:
57:7b:05:4c:08:39:d6:60:c1:42:58:f1:93:3c:06:
3b:46:f6:36:0e:b9:f2:d0:62:e8:d7:bf:d2:3f:52:
72:8a:d6:df:df:20:d6:38:5b:b3:5a:be:d9:19:7f:
b6:60:e5:86:f9:26:87:cb:a8:3f:8c:19:b2:22:9b:
f9:bf:f0:55:80:06:0a:6f:56:a5:8b:a2:df:cf:ad:
b2:bf:8c:9c:ca:5b:99:83:bc:fb:75:08:63:b5:51:
54:15:d0:4a:12:ec:92:5e:f8:e8:43:1f:34:4c:55:
fa:93:28:48:81:ea:32:cd:20:dc:5b:dc:a1:0b:f6:
f8:6e:5b:3d:1f:0b:e1:c1:78:8f:62:1d:29:04:de:
4d:27:8c:5f:94:36:01:d1:f6:c1:7c:44:74:07:98:
59:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9A:01:33:BD:B3:A2:43:00:29:B7:3A:34:0D:02:FB:C5:88:5F:D5
X509v3 Authority Key Identifier:
keyid:05:A9:91:AC:D7:B2:27:3D:9E:18:65:AF:A2:75:5E:6F:5E:67:2E:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BamRrNeyJz2eGGWvonVeb15nLlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/qJoBM72zokMAKbc6NA0C-8WIX9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/d79d2c-4cb4-4a74-b6ac-d7c6ff933c23/1/BamRrNeyJz2eGGWvonVeb15nLlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.136.164.0/22
IPv6:
2a0e:9ec0::/29
Signature Algorithm: sha256WithRSAEncryption
68:6d:cc:0c:58:30:02:29:b3:74:d4:63:99:56:ac:48:a4:e3:
3d:01:ab:fa:37:ad:f3:f5:d7:95:9b:67:a0:d5:fc:02:b5:11:
32:df:5d:f8:45:33:35:58:bd:67:9b:64:eb:14:3d:5c:e0:23:
76:13:ea:85:c4:21:18:2e:b1:23:0e:20:04:25:5a:35:1f:f9:
ec:6a:a8:ad:11:72:8e:b2:4a:8d:ee:78:8b:d0:41:ac:ba:59:
9c:a8:aa:bc:4f:4b:f0:f9:ea:9d:b7:37:88:e9:a7:39:76:2e:
0f:f2:e5:b1:a3:89:f1:37:9c:09:f1:f3:8e:c4:2b:17:95:9c:
57:04:06:e6:09:69:77:9c:e7:8a:2e:13:1d:60:cb:6c:d9:b4:
a6:cc:20:10:d1:36:a9:69:c7:dd:7d:65:4b:22:35:fc:18:60:
35:04:fb:03:51:2f:18:39:72:08:78:5b:ce:19:00:5f:f5:99:
d6:de:c5:e9:3b:db:e7:80:34:60:96:02:3e:99:9b:61:9d:89:
6f:77:be:3e:33:f2:66:4c:18:97:b6:5b:60:05:a8:ad:39:27:
99:c6:0e:31:dc:dd:1e:62:8d:09:ef:4e:1c:36:68:d9:86:9e:
42:71:a5:29:11:ab:60:35:64:c4:c3:65:08:f2:5f:f3:ea:55:
a4:aa:0b:f7
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQl/bhdhgC7zHISJ6DyML4OMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YTk5MWFjZDdiMjI3M2Q5ZTE4NjVhZmEyNzU1ZTZmNWU2
NzJlNTUwHhcNMjUwMTAyMDc0OTMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODlhMDEzM2JkYjNhMjQzMDAyOWI3M2EzNDBkMDJmYmM1ODg1ZmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdyM/GU9xv10bF+4+exW6EMjyPh7
gEGxrW6EbRhDa04vzPn4vU8ud0kMFaEu9u5ti5VG9NWpE+MUMk8uk4v0l0dKWOjc
lwEhRrr+D2TNuzPyRhNOVx4IBdFnif02d5vYVeiUzbWYaDBXewVMCDnWYMFCWPGT
PAY7RvY2Drny0GLo17/SP1Jyitbf3yDWOFuzWr7ZGX+2YOWG+SaHy6g/jBmyIpv5
v/BVgAYKb1ali6Lfz62yv4ycyluZg7z7dQhjtVFUFdBKEuySXvjoQx80TFX6kyhI
geoyzSDcW9yhC/b4bls9HwvhwXiPYh0pBN5NJ4xflDYB0fbBfER0B5hZOQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFKiaATO9s6JDACm3OjQNAvvFiF/VMB8GA1UdIwQY
MBaAFAWpkazXsic9nhhlr6J1Xm9eZy5VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmFtUnJOZXlKejJlR0dXdm9uVmViMTVuTGxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9kNzlkMmMtNGNiNC00YTc0LWI2YWMt
ZDdjNmZmOTMzYzIzLzEvcUpvQk03Mnpva01BS2JjNk5BMEMtOFdJWDlVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9kNzlkMmMtNGNiNC00YTc0LWI2YWMtZDdjNmZmOTMzYzIz
LzEvQmFtUnJOZXlKejJlR0dXdm9uVmViMTVuTGxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLYikMA0E
AgACMAcDBQMqDp7AMA0GCSqGSIb3DQEBCwUAA4IBAQBobcwMWDACKbN01GOZVqxI
pOM9Aav6N63z9deVm2eg1fwCtREy3134RTM1WL1nm2TrFD1c4CN2E+qFxCEYLrEj
DiAEJVo1H/nsaqitEXKOskqN7niL0EGsulmcqKq8T0vw+eqdtzeI6ac5di4P8uWx
o4nxN5wJ8fOOxCsXlZxXBAbmCWl3nOeKLhMdYMts2bSmzCAQ0TapacfdfWVLIjX8
GGA1BPsDUS8YOXIIeFvOGQBf9ZnW3sXpO9vngDRglgI+mZthnYlvd74+M/JmTBiX
tltgBaitOSeZxg4x3N0eYo0J704cNmjZhp5CcaUpEatgNWTEw2UI8l/z6lWkqgv3
-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:29 2025 by rpki-client on console.sobornost.net