Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/QGa_rDT6nDsGGJJS-Jf8z4vqdw8.roa
File: QGa_rDT6nDsGGJJS-Jf8z4vqdw8.roa (raw, json)
Hash identifier: 8M0awTe5Q7uLGbj0RiEkr/9ee545l0eYgPOX5wgj7kY=
Subject key identifier: 40:66:BF:AC:34:FA:9C:3B:06:18:92:52:F8:97:FC:CF:8B:EA:77:0F
Certificate issuer: /CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Certificate serial: 01856E5D78701E9B4FEA9188C8E7F983C87D
Authority key identifier: DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/QGa_rDT6nDsGGJJS-Jf8z4vqdw8.roa
Signing time: Sun 01 Jan 2023 17:24:57 +0000
ROA not before: Sun 01 Jan 2023 17:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41281
IP address blocks: 45.15.17.0/24 maxlen: 24
2a0e:1c80:9::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:5d:78:70:1e:9b:4f:ea:91:88:c8:e7:f9:83:c8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd703b60ac6873256e6b4826ba27a9deeca2f0a
Validity
Not Before: Jan 1 17:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4066bfac34fa9c3b06189252f897fccf8bea770f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:bd:92:ae:3b:f3:50:6e:64:4b:9e:5e:f0:e1:
7a:58:78:00:a4:dc:3a:d3:ba:95:0c:71:f7:17:ab:
26:b4:bf:d0:f8:77:5c:00:d3:c2:13:bd:82:3c:40:
21:68:0b:e1:10:b1:de:98:de:e4:8c:9c:81:0a:5a:
7e:6f:83:10:b7:fc:72:61:58:49:b7:b5:ff:bb:c4:
8e:6d:5c:48:04:92:8a:a7:63:4b:96:5e:4f:36:93:
2e:49:50:ac:47:b0:5b:ab:95:6a:ae:f0:4f:e0:aa:
90:3d:92:36:44:52:48:ec:8b:d0:6e:43:ff:fc:76:
58:19:ab:51:84:37:3b:e8:27:07:88:5c:a3:e0:7c:
61:a6:8c:bf:b4:6b:65:cc:e7:53:fa:21:ac:2f:73:
ce:fb:5a:b8:a6:c6:f9:25:26:f6:37:fc:ef:78:32:
92:0b:ad:9b:3b:96:e4:f1:1e:44:9b:87:50:c7:2c:
07:97:3d:24:a2:4b:52:eb:1b:17:d0:22:fc:c0:61:
8d:ed:0d:af:9f:60:72:b4:a5:cb:39:10:d1:60:49:
20:9f:5e:d6:41:d1:6a:3b:51:4f:5e:2a:84:3c:f1:
ab:c1:ec:1c:7b:c2:fa:c1:23:df:19:54:de:f9:19:
c7:8a:ff:5a:d5:88:d2:fe:00:58:2e:0d:fe:c5:0c:
04:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:66:BF:AC:34:FA:9C:3B:06:18:92:52:F8:97:FC:CF:8B:EA:77:0F
X509v3 Authority Key Identifier:
keyid:DF:D7:03:B6:0A:C6:87:32:56:E6:B4:82:6B:A2:7A:9D:EE:CA:2F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39cDtgrGhzJW5rSCa6J6ne7KLwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/QGa_rDT6nDsGGJJS-Jf8z4vqdw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/f678bd-4fe0-4ae0-80d7-53f0788e1a1b/1/39cDtgrGhzJW5rSCa6J6ne7KLwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.17.0/24
IPv6:
2a0e:1c80:9::/48
Signature Algorithm: sha256WithRSAEncryption
4d:d3:18:da:e5:48:e5:5e:29:f6:b0:85:e2:e3:03:d5:aa:c4:
f2:a7:d8:9c:11:9e:2c:93:0b:41:1c:a3:75:55:9b:d9:96:aa:
09:67:c8:68:b1:22:89:3c:4a:53:5f:f6:20:7b:c6:f0:12:7b:
fc:80:e4:e8:c9:f3:56:99:10:d6:55:dc:56:8c:36:dc:3f:88:
1a:84:46:b5:63:77:c4:b1:c4:e4:ce:8d:1f:ab:1f:de:b7:8f:
a9:1a:9f:52:4f:75:d5:8c:f0:d6:2a:ae:e1:70:2c:ee:ed:69:
ba:aa:8e:69:fa:25:22:2f:0f:a7:b1:2e:c8:7f:fe:71:7f:5c:
e4:f9:d7:62:c7:ad:0b:1c:e3:e5:f1:c8:ea:e5:30:11:3f:14:
c7:05:5c:9d:9b:bb:ed:ae:81:fa:cb:e1:a0:b0:c6:24:a6:a5:
d4:c4:df:f4:1c:bd:cf:62:2d:ec:fa:12:7c:4f:1e:8c:cf:7e:
f2:1c:38:4a:a0:f7:19:50:27:2f:e3:72:e5:76:ef:37:10:24:
75:0b:ad:0b:0d:6d:c0:c3:31:c5:52:00:5e:af:48:6e:41:71:
1f:e8:79:d9:3e:22:d2:aa:cf:65:be:4f:21:99:f2:0b:25:ab:
6c:85:04:5e:01:3e:51:48:e3:5c:ea:86:f8:0b:8f:47:4d:05:
e2:91:ef:22
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYVuXXhwHptP6pGIyOf5g8h9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmZDcwM2I2MGFjNjg3MzI1NmU2YjQ4MjZiYTI3YTlkZWVj
YTJmMGEwHhcNMjMwMTAxMTcyNDU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDY2YmZhYzM0ZmE5YzNiMDYxODkyNTJmODk3ZmNjZjhiZWE3NzBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqb2SrjvzUG5kS55e8OF6WHgApNw6
07qVDHH3F6smtL/Q+HdcANPCE72CPEAhaAvhELHemN7kjJyBClp+b4MQt/xyYVhJ
t7X/u8SObVxIBJKKp2NLll5PNpMuSVCsR7Bbq5VqrvBP4KqQPZI2RFJI7IvQbkP/
/HZYGatRhDc76CcHiFyj4Hxhpoy/tGtlzOdT+iGsL3PO+1q4psb5JSb2N/zveDKS
C62bO5bk8R5Em4dQxywHlz0koktS6xsX0CL8wGGN7Q2vn2BytKXLORDRYEkgn17W
QdFqO1FPXiqEPPGrwewce8L6wSPfGVTe+RnHiv9a1YjS/gBYLg3+xQwEeQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEBmv6w0+pw7BhiSUviX/M+L6ncPMB8GA1UdIwQY
MBaAFN/XA7YKxocyVua0gmuiep3uyi8KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzljRHRnckdoekpXNXJTQ2E2SjZuZTdLTHdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mNjc4YmQtNGZlMC00YWUwLTgwZDct
NTNmMDc4OGUxYTFiLzEvUUdhX3JEVDZuRHNHR0pKUy1KZjh6NHZxZHc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mNjc4YmQtNGZlMC00YWUwLTgwZDctNTNmMDc4OGUxYTFi
LzEvMzljRHRnckdoekpXNXJTQ2E2SjZuZTdLTHdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALQ8RMA8E
AgACMAkDBwAqDhyAAAkwDQYJKoZIhvcNAQELBQADggEBAE3TGNrlSOVeKfawheLj
A9WqxPKn2JwRniyTC0Eco3VVm9mWqglnyGixIok8SlNf9iB7xvASe/yA5OjJ81aZ
ENZV3FaMNtw/iBqERrVjd8SxxOTOjR+rH963j6kan1JPddWM8NYqruFwLO7tabqq
jmn6JSIvD6exLsh//nF/XOT512LHrQsc4+XxyOrlMBE/FMcFXJ2bu+2ugfrL4aCw
xiSmpdTE3/Qcvc9iLez6EnxPHozPfvIcOEqg9xlQJy/jcuV27zcQJHULrQsNbcDD
McVSAF6vSG5BcR/oedk+ItKqz2W+TyGZ8gslq2yFBF4BPlFI41zqhvgLj0dNBeKR
7yI=
-----END CERTIFICATE-----
Generated at Wed Apr 30 02:47:33 2025 by rpki-client