Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/qq_DqXj1jgW5t9Bpmv9tIAtLdgk.roa
File: qq_DqXj1jgW5t9Bpmv9tIAtLdgk.roa (raw, json)
Hash identifier: I+eBl9deFnjZtM9WsLliiLTIBeeiBcTTkkp86ghHw6w=
Subject key identifier: AA:AF:C3:A9:78:F5:8E:05:B9:B7:D0:69:9A:FF:6D:20:0B:4B:76:09
Certificate issuer: /CN=454fd1c04bf7ec1dabbd2d21fda0085e251ec735
Certificate serial: 01941F8C87F0377179EB7243A7857ECEA91F
Authority key identifier: 45:4F:D1:C0:4B:F7:EC:1D:AB:BD:2D:21:FD:A0:08:5E:25:1E:C7:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RU_RwEv37B2rvS0h_aAIXiUexzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/qq_DqXj1jgW5t9Bpmv9tIAtLdgk.roa
Signing time: Wed 01 Jan 2025 01:48:11 +0000
ROA not before: Wed 01 Jan 2025 01:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44352
IP address blocks: 91.241.176.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:87:f0:37:71:79:eb:72:43:a7:85:7e:ce:a9:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=454fd1c04bf7ec1dabbd2d21fda0085e251ec735
Validity
Not Before: Jan 1 01:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aaafc3a978f58e05b9b7d0699aff6d200b4b7609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:16:ff:0b:5c:53:e4:fa:14:84:7f:c6:c7:ac:
00:56:87:73:c3:27:61:93:07:2f:04:6d:51:c4:bd:
a6:8c:fa:8b:ae:d0:88:12:fa:05:c5:51:2b:56:84:
4e:01:1a:f1:5e:d1:99:55:c1:f2:b7:06:b2:0d:e1:
67:09:b4:51:8c:0e:e0:1d:f5:eb:8e:fb:37:9d:0d:
83:f8:d9:04:ff:1f:9f:fe:1f:a7:e0:01:72:fd:98:
2e:fe:a8:8c:f9:de:8c:79:c3:3e:5d:21:84:31:43:
e8:e9:17:1f:29:e4:26:2a:50:6c:e9:ae:fe:89:f8:
63:2b:d5:0d:b8:e2:eb:10:ae:2b:1d:27:be:fb:4e:
d2:fb:9f:2a:89:c5:a2:6b:08:d5:f8:ca:be:56:91:
b6:64:2a:51:c7:61:fd:2a:64:fc:68:75:bb:bf:8f:
42:05:88:f5:ba:87:b9:3f:b4:b2:16:e6:50:d2:99:
4d:45:ed:d6:3d:e6:bc:f9:18:2e:17:f5:ee:15:db:
f4:da:2c:0d:45:24:c0:55:77:a8:a6:12:5d:0d:95:
51:2b:3f:86:2e:00:c7:1b:bc:c2:a6:ba:9a:a1:56:
88:f1:32:87:f7:3b:b4:59:af:d5:c9:f3:f6:04:2d:
87:eb:da:0a:60:c0:f2:42:6a:92:73:a2:aa:0f:53:
5d:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AF:C3:A9:78:F5:8E:05:B9:B7:D0:69:9A:FF:6D:20:0B:4B:76:09
X509v3 Authority Key Identifier:
keyid:45:4F:D1:C0:4B:F7:EC:1D:AB:BD:2D:21:FD:A0:08:5E:25:1E:C7:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RU_RwEv37B2rvS0h_aAIXiUexzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/qq_DqXj1jgW5t9Bpmv9tIAtLdgk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/18ec59-0b00-4da6-88d8-d4fd3e389536/1/RU_RwEv37B2rvS0h_aAIXiUexzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.176.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:b5:49:f9:f8:98:59:f9:f8:9b:7d:54:9f:08:c0:e5:aa:18:
db:61:e8:af:91:66:d7:85:07:93:30:e4:73:ba:08:bb:3d:b2:
4c:22:0f:95:f9:88:40:fc:a2:52:e9:62:8b:8e:9f:b9:bc:e4:
83:c6:29:7a:31:9a:57:79:99:ba:6a:4d:a1:b0:60:87:42:91:
44:c1:42:7f:ea:88:5e:80:f1:18:cb:31:7b:c6:fb:64:35:48:
4b:71:a6:dc:1b:68:cc:f9:63:f9:3b:67:61:a4:2b:b1:a1:06:
eb:3d:7a:44:82:44:3c:49:e3:bb:25:74:c0:e3:b0:e0:57:a8:
31:37:50:b8:88:83:4b:3c:1c:36:26:22:40:4d:b9:4c:93:c5:
b6:b6:ca:f6:6c:a5:5f:dd:a0:84:11:62:c2:03:02:d4:26:17:
53:3f:30:84:6b:b3:33:2d:bb:65:bc:60:b7:6d:86:44:72:a0:
59:c7:54:39:8c:22:2f:2e:ef:e2:70:2e:eb:23:85:7b:81:9f:
26:cb:01:7b:3d:34:46:aa:67:78:3d:31:e5:67:aa:0e:54:01:
fb:6c:48:b0:80:d6:74:03:ed:77:24:4b:88:1e:99:f3:32:e8:
de:11:85:df:fd:b3:34:a5:1d:57:07:87:3a:00:ac:bb:54:11:
3f:21:84:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:59:01 2025 by rpki-client