Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/qojwO3L9jg1p6UhN03evhyipuOQ.roa
File: qojwO3L9jg1p6UhN03evhyipuOQ.roa (raw, json)
Hash identifier: dfUoGagRhqiwPd1LKf2UOdIpsG5QndFaYf8UR5Y9xlA=
Subject key identifier: AA:88:F0:3B:72:FD:8E:0D:69:E9:48:4D:D3:77:AF:87:28:A9:B8:E4
Certificate issuer: /CN=bb528c126aed0d7f5a06950eb2c2033486856a15
Certificate serial: 019425FDB0D975EC0C20C5B2997C5A1E227D
Authority key identifier: BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/qojwO3L9jg1p6UhN03evhyipuOQ.roa
Signing time: Thu 02 Jan 2025 07:49:30 +0000
ROA not before: Thu 02 Jan 2025 07:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211073
IP address blocks: 91.207.176.0/23 maxlen: 23
91.207.176.0/24 maxlen: 24
91.207.177.0/24 maxlen: 24
2001:67c:414::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b0:d9:75:ec:0c:20:c5:b2:99:7c:5a:1e:22:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb528c126aed0d7f5a06950eb2c2033486856a15
Validity
Not Before: Jan 2 07:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa88f03b72fd8e0d69e9484dd377af8728a9b8e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:56:a6:96:6b:b7:a1:0e:cd:ee:65:b1:6d:0f:
83:83:6d:05:cb:31:df:b0:86:95:57:d2:ee:1c:42:
38:f1:be:74:6c:6d:8d:26:06:69:4b:0a:09:ea:b8:
9e:9b:f4:11:34:ff:16:75:ca:62:42:5f:97:d4:ed:
da:9f:b9:de:4b:dd:dc:8a:23:24:a4:7f:9b:8f:c4:
4b:e1:9f:e5:06:90:3a:3a:77:1b:9c:6d:ae:85:3a:
cd:67:02:d7:04:ba:18:be:2f:38:5a:b5:fb:3e:85:
d6:17:21:f0:14:2e:10:20:71:65:6b:1d:b6:84:a8:
b2:fe:e4:0f:54:8b:17:ae:97:39:7d:c3:13:74:63:
50:44:2f:a7:30:26:70:93:d3:a3:17:6e:d2:bc:b0:
1b:57:8c:cd:46:a3:ff:f0:8f:33:eb:0d:a4:91:52:
96:5a:48:df:79:26:6e:29:5a:59:92:e4:4f:c3:70:
2f:cb:8c:ea:49:18:3b:ea:41:6f:d2:d5:3b:98:07:
47:12:55:29:42:a6:e0:48:ed:af:66:fc:3e:25:36:
9a:13:c3:ea:51:d2:28:4e:50:4f:26:ac:99:55:c9:
d3:c4:5c:83:c0:62:f4:14:e8:f7:2c:4f:47:56:19:
ef:d6:c3:65:45:ed:58:13:49:6a:e5:88:2d:55:b4:
02:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:88:F0:3B:72:FD:8E:0D:69:E9:48:4D:D3:77:AF:87:28:A9:B8:E4
X509v3 Authority Key Identifier:
keyid:BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/qojwO3L9jg1p6UhN03evhyipuOQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.176.0/23
IPv6:
2001:67c:414::/48
Signature Algorithm: sha256WithRSAEncryption
81:ad:72:6f:fb:07:c1:e2:b6:47:36:a0:90:84:90:65:07:47:
36:23:fd:92:69:ad:8d:61:71:a3:6d:79:e6:d9:c9:01:1a:a4:
33:9a:f2:1c:03:56:a5:3f:9a:ba:59:89:96:1e:12:13:c1:6b:
3d:d7:65:63:b1:60:23:f6:e4:05:97:f5:94:01:9d:b8:17:31:
ee:5e:0c:4b:29:01:4c:4c:04:25:5d:df:f1:15:dd:5b:04:17:
b6:31:3e:a4:73:e9:b0:a6:58:91:96:26:0a:67:fc:9b:73:6f:
50:9c:5a:bc:0b:80:e5:ad:e1:de:a6:ff:78:f9:e3:8f:cf:0d:
ec:80:23:d2:c4:90:41:2c:d8:55:a1:8a:ac:22:0f:8a:9e:89:
d0:5d:c4:35:e7:6a:fe:cc:cb:37:d9:0a:80:b6:1a:50:92:72:
00:0f:94:e1:31:be:64:79:ab:3f:0a:3f:b0:61:8d:34:12:b1:
e5:78:e4:af:49:12:9c:cb:f1:d9:8b:22:61:20:1f:f8:0b:99:
4e:b9:f6:06:1b:b9:bd:c1:b3:a5:6d:b8:bf:2b:23:fa:6a:fa:
44:18:95:30:ae:3f:69:4a:f0:3f:1a:79:22:91:de:80:c2:37:
b3:56:6c:62:17:b2:c2:32:b3:18:27:c1:39:d8:38:66:48:a0:
ad:81:c8:bc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQl/bDZdewMIMWymXxaHiJ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNTI4YzEyNmFlZDBkN2Y1YTA2OTUwZWIyYzIwMzM0ODY4
NTZhMTUwHhcNMjUwMTAyMDc0OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTg4ZjAzYjcyZmQ4ZTBkNjllOTQ4NGRkMzc3YWY4NzI4YTliOGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzlamlmu3oQ7N7mWxbQ+Dg20FyzHf
sIaVV9LuHEI48b50bG2NJgZpSwoJ6riem/QRNP8WdcpiQl+X1O3an7neS93ciiMk
pH+bj8RL4Z/lBpA6OncbnG2uhTrNZwLXBLoYvi84WrX7PoXWFyHwFC4QIHFlax22
hKiy/uQPVIsXrpc5fcMTdGNQRC+nMCZwk9OjF27SvLAbV4zNRqP/8I8z6w2kkVKW
WkjfeSZuKVpZkuRPw3Avy4zqSRg76kFv0tU7mAdHElUpQqbgSO2vZvw+JTaaE8Pq
UdIoTlBPJqyZVcnTxFyDwGL0FOj3LE9HVhnv1sNlRe1YE0lq5YgtVbQCmwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFKqI8Dty/Y4NaelITdN3r4coqbjkMB8GA1UdIwQY
MBaAFLtSjBJq7Q1/WgaVDrLCAzSGhWoVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTFLTUVtcnREWDlhQnBVT3NzSUROSWFGYWhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi83M2UxZTAtM2Q0Ni00MjhjLWFiM2It
MjE1OWVmZWU2YTA3LzEvcW9qd08zTDlqZzFwNlVoTjAzZXZoeWlwdU9RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi83M2UxZTAtM2Q0Ni00MjhjLWFiM2ItMjE1OWVmZWU2YTA3
LzEvdTFLTUVtcnREWDlhQnBVT3NzSUROSWFGYWhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBW8+wMA8E
AgACMAkDBwAgAQZ8BBQwDQYJKoZIhvcNAQELBQADggEBAIGtcm/7B8Hitkc2oJCE
kGUHRzYj/ZJprY1hcaNteebZyQEapDOa8hwDVqU/mrpZiZYeEhPBaz3XZWOxYCP2
5AWX9ZQBnbgXMe5eDEspAUxMBCVd3/EV3VsEF7YxPqRz6bCmWJGWJgpn/Jtzb1Cc
WrwLgOWt4d6m/3j544/PDeyAI9LEkEEs2FWhiqwiD4qeidBdxDXnav7MyzfZCoC2
GlCScgAPlOExvmR5qz8KP7BhjTQSseV45K9JEpzL8dmLImEgH/gLmU659gYbub3B
s6VtuL8rI/pq+kQYlTCuP2lK8D8aeSKR3oDCN7NWbGIXssIysxgnwTnYOGZIoK2B
yLw=
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:12:02 2025 by rpki-client