Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/wn31uqf50k5LZthlgOfugKfLtQQ.roa
File: wn31uqf50k5LZthlgOfugKfLtQQ.roa (raw, json)
Hash identifier: uQ9o6KlMfbYE1Nkt8fbDl10YjNVh7yxdgG7JtO4ci4A=
Subject key identifier: C2:7D:F5:BA:A7:F9:D2:4E:4B:66:D8:65:80:E7:EE:80:A7:CB:B5:04
Certificate issuer: /CN=a9dfc89812340507a2a2e1e74d11824def813f39
Certificate serial: 019423D6A380E35D1EB76D73F45491C4DB60
Authority key identifier: A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/wn31uqf50k5LZthlgOfugKfLtQQ.roa
Signing time: Wed 01 Jan 2025 21:47:36 +0000
ROA not before: Wed 01 Jan 2025 21:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42160
IP address blocks: 91.234.203.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:a3:80:e3:5d:1e:b7:6d:73:f4:54:91:c4:db:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9dfc89812340507a2a2e1e74d11824def813f39
Validity
Not Before: Jan 1 21:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c27df5baa7f9d24e4b66d86580e7ee80a7cbb504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:89:92:56:fa:07:ca:5c:b4:9b:2a:fc:4f:da:
36:a6:d0:ba:91:d6:ae:49:41:92:98:21:19:8d:42:
f3:e5:27:b5:7d:33:f5:e0:1f:84:df:25:75:e3:3a:
2c:bf:0c:7c:64:d0:27:69:7c:9b:df:37:cb:0a:53:
7a:f1:96:a3:4c:b8:8d:4d:53:4d:b0:29:a4:07:07:
26:3e:02:9d:b1:30:3d:73:a0:c4:a3:5a:f2:d2:c3:
bf:52:bc:43:74:24:57:41:ae:5a:19:92:71:cd:b7:
39:30:6f:8b:3b:02:04:11:23:c8:99:fc:bf:34:a2:
33:0d:18:ed:aa:ed:54:9c:07:17:42:5a:ee:12:9b:
bb:f4:07:6c:d4:3c:ce:f1:22:48:d2:7b:22:ba:5b:
f0:c2:b4:48:af:7c:38:e6:53:f7:72:06:41:89:7d:
68:c5:e1:93:e9:34:a1:a6:9b:81:18:d1:f4:a6:12:
2e:d5:52:d6:df:6a:55:77:3f:d8:74:84:ea:8d:9f:
97:45:2b:4d:f7:6f:83:16:4f:3f:6f:1e:72:1a:ee:
e4:c9:f8:82:fc:2e:65:d0:bb:f1:04:b5:3f:5d:2d:
e6:76:6e:f9:33:b4:cd:3b:05:5e:82:1f:b4:4c:f1:
a6:d2:a5:93:22:bd:fe:03:84:53:89:ab:1e:9c:54:
74:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7D:F5:BA:A7:F9:D2:4E:4B:66:D8:65:80:E7:EE:80:A7:CB:B5:04
X509v3 Authority Key Identifier:
keyid:A9:DF:C8:98:12:34:05:07:A2:A2:E1:E7:4D:11:82:4D:EF:81:3F:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qd_ImBI0BQeiouHnTRGCTe-BPzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/wn31uqf50k5LZthlgOfugKfLtQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/f7d58e-33da-4319-b54b-704403fff82e/1/qd_ImBI0BQeiouHnTRGCTe-BPzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.203.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:ce:dd:3c:ae:06:75:3e:6b:d6:bd:33:03:8d:b4:dd:cb:7b:
8a:95:f7:b5:95:99:a5:05:d1:d2:cb:10:29:a8:cf:ae:d6:02:
bb:b7:ea:c2:f7:a3:d4:94:af:d9:12:ff:66:01:e1:62:cd:f8:
7d:9d:77:f2:c4:23:cb:75:5d:08:4c:6c:a1:4e:4f:37:7b:a9:
29:17:8e:8e:74:4e:93:f1:4f:db:d1:b4:00:93:40:e1:15:08:
ed:fe:48:bc:07:07:28:7a:43:a5:53:24:16:db:4d:88:9c:14:
73:4d:f7:6a:d0:d6:10:d2:d1:13:53:9b:7b:52:ba:5d:4b:dc:
65:7e:ba:b0:9c:8d:15:3e:cc:7b:78:2c:48:d0:d4:39:23:d9:
f8:1f:cf:15:da:52:0a:56:21:79:76:a3:01:01:74:5b:6d:5a:
50:7f:b7:49:b9:07:23:7c:0f:17:57:ba:02:76:16:5d:99:f3:
45:ce:18:e8:bc:05:aa:2b:fb:96:25:f4:c6:87:46:48:cb:9c:
9b:15:3c:ff:1a:1e:ad:bf:bf:f2:90:7a:d4:de:36:58:61:78:
fa:90:f1:3c:5a:56:90:3c:92:87:2c:db:ba:60:c2:0c:64:de:
aa:ab:91:b7:e8:65:cf:58:83:83:11:a7:05:ba:d2:96:45:aa:
46:aa:19:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:48:34 2025 by rpki-client