Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/nE_QwfUitMo59_GeTHUAGFmWaiU.roa
File: nE_QwfUitMo59_GeTHUAGFmWaiU.roa (raw, json)
Hash identifier: t2Bgep4Co0ormJSkeJVCqufRE/GNmyY6yFg8KbHeDM4=
Subject key identifier: 9C:4F:D0:C1:F5:22:B4:CA:39:F7:F1:9E:4C:75:00:18:59:96:6A:25
Certificate issuer: /CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Certificate serial: 019425FDB5D65DF4FD2AD47335443B483F4B
Authority key identifier: 56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/nE_QwfUitMo59_GeTHUAGFmWaiU.roa
Signing time: Thu 02 Jan 2025 07:49:31 +0000
ROA not before: Thu 02 Jan 2025 07:49:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199103
IP address blocks: 91.105.200.0/22 maxlen: 22
185.220.92.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b5:d6:5d:f4:fd:2a:d4:73:35:44:3b:48:3f:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Validity
Not Before: Jan 2 07:49:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9c4fd0c1f522b4ca39f7f19e4c75001859966a25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:49:83:c7:8e:d7:cd:74:7b:73:8e:00:51:90:
6d:51:ca:95:a0:89:8c:7a:d8:81:f0:63:44:54:6f:
de:82:2d:fa:a9:7b:eb:4a:6f:55:df:84:71:e7:7b:
1d:00:ef:ca:a4:0c:d9:08:17:d7:22:e9:d2:6d:5b:
8f:67:bb:9f:77:75:e2:ad:34:76:76:49:ee:b5:8c:
bf:e4:4a:1d:b8:9b:33:72:7d:b2:8f:65:c4:0e:16:
6d:d7:44:ce:dc:24:05:9a:46:fe:8c:d0:f2:6f:ec:
b6:fb:1e:e7:ae:2a:cd:01:1d:f8:a1:7e:a1:2b:94:
9a:41:b6:f6:b3:91:cc:bb:aa:49:58:0d:37:29:26:
90:4b:db:ee:b4:de:73:40:0e:ed:7b:cb:34:3f:91:
b7:cb:8c:08:dd:7a:4c:e1:11:a6:a1:c2:5a:b8:8c:
45:2c:fe:2f:37:d9:76:83:83:0f:ea:ab:61:10:be:
8f:dd:ef:9f:26:ad:de:4e:8f:61:62:ee:04:ee:a3:
aa:f4:ac:91:fa:78:59:7f:40:16:bd:09:6d:23:1f:
6b:83:f5:79:ca:96:e5:d8:09:32:c6:ca:4e:b3:fa:
e1:8d:04:7e:ca:58:f3:36:12:a0:0b:8a:40:82:d7:
17:be:83:bf:34:ff:b2:fe:46:ec:27:8e:55:9f:e6:
82:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4F:D0:C1:F5:22:B4:CA:39:F7:F1:9E:4C:75:00:18:59:96:6A:25
X509v3 Authority Key Identifier:
keyid:56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/nE_QwfUitMo59_GeTHUAGFmWaiU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.105.200.0/22
185.220.92.0/23
Signature Algorithm: sha256WithRSAEncryption
98:66:1e:8a:22:f9:01:f4:4d:cd:f1:74:4d:fc:59:48:17:84:
e2:09:3a:b0:f1:15:2b:88:f8:5f:45:be:d9:95:d2:18:b1:ba:
e1:f2:b8:84:63:cc:b7:8f:50:20:ea:a9:7a:81:86:6f:6c:1c:
6c:6e:4b:2f:66:97:64:db:2a:37:72:81:48:0e:ea:9b:b3:3d:
2d:5a:4f:6c:9e:f4:2a:4c:82:2d:88:81:5e:1d:78:bc:98:18:
98:3f:b9:16:e8:d0:cc:7f:79:9c:2d:5c:8e:88:97:a5:1e:b8:
7d:34:8f:ff:f1:75:b6:63:1c:25:84:d0:5a:ea:e6:45:37:cf:
6b:0e:07:66:66:36:49:1a:dc:38:9e:46:d3:f6:71:c1:fc:48:
64:a4:06:1d:4e:12:95:5a:f9:43:32:11:23:5b:2f:68:cd:6f:
14:84:68:57:2f:95:0b:82:d0:9a:34:e1:36:a5:4e:53:f5:37:
4e:7e:05:57:b0:d2:ed:30:f7:0c:5e:b0:88:bd:7b:7c:35:0f:
21:c4:99:c9:2a:45:00:51:bf:94:d8:15:50:db:07:7a:ad:e8:
74:86:da:6d:47:2e:37:e7:6d:61:8f:83:d5:08:b6:30:ea:5d:
84:7b:14:53:db:c6:fd:6a:61:ca:a2:26:75:21:ad:d0:a1:8a:
d2:06:80:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:35:40 2025 by rpki-client