Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/QqsQB9UzrvGyvunRv6N0ng_iZwA.roa
File: QqsQB9UzrvGyvunRv6N0ng_iZwA.roa (raw, json)
Hash identifier: iLin+Fc7PTNOhTjuj4beCRLwOW/swCIc7Wdfl7t97SQ=
Subject key identifier: 42:AB:10:07:D5:33:AE:F1:B2:BE:E9:D1:BF:A3:74:9E:0F:E2:67:00
Certificate issuer: /CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Certificate serial: 08211CC4
Authority key identifier: A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/QqsQB9UzrvGyvunRv6N0ng_iZwA.roa
Signing time: Sat 01 Jan 2022 03:52:26 +0000
ROA not before: Sat 01 Jan 2022 03:52:26 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 13213
IP address blocks: 91.149.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 136387780 (0x8211cc4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Validity
Not Before: Jan 1 03:52:26 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=42ab1007d533aef1b2bee9d1bfa3749e0fe26700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:64:75:e6:5e:b5:b7:3c:8a:53:df:e2:57:12:
89:e9:d2:0a:9c:eb:ef:ca:89:ac:67:1c:d4:f0:57:
e2:41:13:38:df:b0:8c:a2:7e:3c:77:52:39:58:af:
1e:0e:2d:53:6e:90:61:a0:2e:e9:3d:35:6d:66:3e:
8d:4c:11:05:96:48:bb:b0:0b:ca:a2:5c:24:74:20:
6e:7f:20:e4:2d:b1:8e:69:ab:59:76:bd:26:a2:57:
f1:2b:f6:8f:25:64:e9:d3:6d:0f:09:b0:1a:ac:0a:
13:70:b0:fc:1f:f0:16:6a:16:f0:e5:bc:dd:5d:33:
bb:7d:96:e7:d1:9c:b3:d2:b1:41:74:70:1a:76:3a:
74:70:12:02:ae:84:90:41:38:17:b2:56:2e:c6:20:
2b:af:08:f8:61:a1:3e:9c:c9:eb:f7:e0:f5:3b:4c:
b1:a7:0c:e9:fe:b2:33:d8:39:76:34:2f:8c:0d:b3:
06:f3:24:f9:ab:87:5f:4e:15:4c:ef:8a:25:16:03:
6d:4e:e0:99:0b:49:e6:44:96:10:e8:78:d1:a0:47:
5d:7b:2f:ac:7f:f6:72:3c:0b:5f:80:6f:b0:b3:70:
91:62:d0:3a:da:ca:98:22:d6:af:eb:70:dd:12:5e:
cd:df:e4:f8:85:02:02:55:11:9d:95:c4:f2:3e:1a:
af:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AB:10:07:D5:33:AE:F1:B2:BE:E9:D1:BF:A3:74:9E:0F:E2:67:00
X509v3 Authority Key Identifier:
keyid:A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/QqsQB9UzrvGyvunRv6N0ng_iZwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.253.0/24
Signature Algorithm: sha256WithRSAEncryption
51:a3:67:3e:a8:b4:7f:d5:c9:97:35:7d:06:2c:96:ac:9d:92:
80:c7:ba:40:b8:58:f4:53:7e:19:26:fb:0e:67:e9:08:14:40:
23:d9:02:08:d8:88:bb:ed:82:58:ab:03:02:17:83:f0:0a:f4:
da:e3:d6:89:c1:f8:27:0a:b2:36:93:25:46:e4:32:15:42:8f:
a6:cd:a8:3e:86:37:94:53:c2:a5:31:68:7f:2b:06:ae:cf:cd:
35:37:14:22:4e:c3:89:4a:c2:40:65:fc:3d:fa:26:a8:cc:f1:
19:4d:39:c7:cc:4b:e7:0b:4f:15:42:cb:e1:6b:cf:c3:ba:39:
5a:f6:c2:4a:17:ba:eb:5b:ef:10:aa:ff:2d:63:63:6e:30:9f:
63:c5:69:ab:2a:aa:67:b5:69:4f:4c:d0:fc:f8:0a:fe:ec:66:
a2:97:d7:a7:a6:12:e0:79:78:e0:9b:f6:39:75:d1:27:53:d3:
85:03:64:ec:4e:a7:b5:8a:a2:5f:29:70:ea:5f:a8:0d:5b:66:
2e:98:05:44:70:ff:6e:63:9f:14:eb:8c:bb:c6:58:86:a2:ec:
1b:f1:90:59:6d:33:1a:54:06:b3:4e:00:5a:c1:f1:a2:24:83:
3a:30:2b:88:33:c0:91:d6:a5:b1:f2:2a:07:52:d1:56:37:60:
ee:3a:39:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:47:52 2025 by rpki-client