Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/qmRGiDo1JIbLxVbwVLUTyDp6RmA.roa
File: qmRGiDo1JIbLxVbwVLUTyDp6RmA.roa (raw, json)
Hash identifier: kgGX5afGTuXOadhbs0DimXv8mjtGVLa6hM2E7sESZMo=
Subject key identifier: AA:64:46:88:3A:35:24:86:CB:C5:56:F0:54:B5:13:C8:3A:7A:46:60
Certificate issuer: /CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Certificate serial: 019427B5A01B37B125F8157F23DB6C16245B
Authority key identifier: 6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/qmRGiDo1JIbLxVbwVLUTyDp6RmA.roa
Signing time: Thu 02 Jan 2025 15:50:01 +0000
ROA not before: Thu 02 Jan 2025 15:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 145.69.80.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:a0:1b:37:b1:25:f8:15:7f:23:db:6c:16:24:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d069e19e12c104004e8b4b75f8a7789b7e11396
Validity
Not Before: Jan 2 15:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa6446883a352486cbc556f054b513c83a7a4660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:42:e9:aa:5d:f4:55:8e:00:94:48:cb:67:07:
0a:aa:4b:1e:2f:f2:09:c5:21:58:84:55:03:29:2a:
3b:4e:50:39:51:3a:ec:ca:5f:50:0d:e4:29:92:49:
b2:9b:f4:cd:cf:a3:f1:6b:ac:78:85:06:2d:f8:48:
3c:a2:2a:38:bd:3b:da:19:61:b6:cf:1b:9f:38:c0:
99:d1:a4:99:8c:ad:6b:5d:24:18:75:ca:93:42:05:
ed:d6:df:b2:7b:6d:62:5c:0a:63:79:d6:f0:4e:7d:
7b:a1:94:55:65:9c:07:10:fa:21:0f:a0:d3:80:ee:
0a:67:0d:fd:4f:d8:1f:9a:cd:e9:b7:d7:5d:04:be:
78:e8:3b:a7:d1:aa:3d:e6:c5:6c:d5:e8:0d:0d:85:
19:83:08:b7:2f:6c:a0:4b:7a:15:b1:07:c2:28:b7:
cf:e7:41:2f:60:51:14:9f:80:30:ea:d0:fb:ee:06:
7d:8b:be:9e:55:b6:1b:18:e7:17:29:bb:a7:c5:2b:
ac:78:47:81:dc:59:29:e5:6d:e2:0e:24:a4:ec:7c:
f4:86:09:05:8a:5f:7a:db:0e:b9:f6:77:5b:80:d4:
90:7d:4a:02:18:50:09:7f:69:77:aa:ee:bc:ee:7f:
25:0a:1b:c1:30:e8:91:21:85:3e:f3:90:0f:72:43:
78:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:64:46:88:3A:35:24:86:CB:C5:56:F0:54:B5:13:C8:3A:7A:46:60
X509v3 Authority Key Identifier:
keyid:6D:06:9E:19:E1:2C:10:40:04:E8:B4:B7:5F:8A:77:89:B7:E1:13:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/qmRGiDo1JIbLxVbwVLUTyDp6RmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/cf64f6-0789-43e3-bd6b-7bff296c6b02/1/bQaeGeEsEEAE6LS3X4p3ibfhE5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.69.80.0/20
Signature Algorithm: sha256WithRSAEncryption
a2:3a:32:0e:98:eb:ea:38:80:f5:7c:63:55:2f:cb:54:74:b2:
19:c0:c0:2e:e9:ca:7f:f8:c2:1d:ac:47:fa:34:99:00:d0:eb:
3e:33:67:88:1f:8b:5b:77:56:6e:65:57:60:64:9c:c4:eb:de:
a9:e7:16:e5:f6:71:80:f0:a2:13:7c:c2:d1:d5:10:c3:9b:f1:
2a:e2:33:c3:a3:cf:4b:36:ee:c4:03:f9:29:23:7d:20:1d:e7:
cd:01:71:9f:6a:ab:9d:de:78:1f:af:ee:d7:d9:7a:55:f8:30:
f4:05:b8:ba:f6:5d:f2:ff:d3:42:10:a7:a0:ef:f2:18:e8:eb:
7d:c4:8c:c4:44:ff:28:aa:77:79:45:e2:4b:8f:02:42:76:e6:
47:1e:69:25:20:5b:9e:23:f9:a3:e1:3b:e7:ad:26:cf:96:26:
1f:ff:82:e6:c9:e5:29:83:70:5f:3f:9d:de:00:c0:ef:f0:17:
87:99:4b:9a:a4:84:83:93:b9:df:1b:85:10:66:87:03:3f:9d:
2f:79:69:d5:eb:db:7c:2e:f3:7e:22:92:dc:89:95:48:82:76:
ac:c6:b9:97:98:d7:24:b8:3a:7d:09:f6:9f:41:69:43:fe:49:
23:30:52:8a:a7:47:5a:9d:0c:3a:c7:df:56:5b:05:d2:48:52:
18:8a:92:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 8 04:56:32 2025 by rpki-client on console.sobornost.net