Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/qdzMsGh5S6wiS7QQa-GGYlBb1qM.roa
File: qdzMsGh5S6wiS7QQa-GGYlBb1qM.roa (raw, json)
Hash identifier: 6/bZRBO2jbasIfkz3gmkcsaKY6ttqzhNRaTLSgH7xuI=
Subject key identifier: A9:DC:CC:B0:68:79:4B:AC:22:4B:B4:10:6B:E1:86:62:50:5B:D6:A3
Certificate issuer: /CN=637104d927e7e1ef8febbffddf28145495011094
Certificate serial: 01942067F690B6D3CBA422ADBB3170610B9D
Authority key identifier: 63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/qdzMsGh5S6wiS7QQa-GGYlBb1qM.roa
Signing time: Wed 01 Jan 2025 05:47:51 +0000
ROA not before: Wed 01 Jan 2025 05:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42673
IP address blocks: 91.240.130.0/24 maxlen: 32
91.240.136.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f6:90:b6:d3:cb:a4:22:ad:bb:31:70:61:0b:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=637104d927e7e1ef8febbffddf28145495011094
Validity
Not Before: Jan 1 05:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a9dcccb068794bac224bb4106be18662505bd6a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:af:0c:11:2d:9e:00:fa:4e:e3:f0:f6:00:
f5:0c:ed:a5:5d:46:79:6c:70:d9:0d:b3:f7:4b:1d:
a3:8f:32:cd:43:77:7f:44:e8:9a:12:fd:70:98:c0:
ed:ae:35:5e:01:ec:46:e2:e3:0d:8d:28:95:c9:aa:
0a:24:2c:e5:d5:b7:0a:0c:26:e1:32:cd:ae:ca:88:
d6:a2:2d:e6:20:3a:68:08:ab:8e:2a:ee:54:e4:47:
2c:90:0c:cd:61:42:da:49:5e:dc:bf:e5:f3:4c:d8:
cf:4e:08:ce:6e:1b:5d:e6:53:15:55:2b:8b:de:35:
8d:53:3f:17:85:1c:11:60:3d:c4:eb:01:eb:b9:2d:
3f:bc:a5:dc:6a:0d:4a:2b:52:ef:a5:7f:2f:5d:2d:
c2:42:83:ad:e2:8d:65:48:4c:f6:28:54:34:fc:1d:
26:c5:41:db:8a:d3:31:40:2b:fb:ad:7e:b9:0c:17:
6d:ef:11:37:ef:04:70:ee:5c:fd:07:ef:b3:24:3d:
b1:7c:17:9b:08:ac:7f:68:16:c7:1d:0c:26:07:c5:
d4:53:69:33:04:f3:7a:1f:c7:a9:a8:f2:42:13:ab:
90:f0:5d:d2:84:4d:19:c2:ad:b7:8e:a8:fa:5e:06:
a3:04:d7:9b:4f:75:01:b4:85:9a:bd:4a:2c:76:63:
8e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:DC:CC:B0:68:79:4B:AC:22:4B:B4:10:6B:E1:86:62:50:5B:D6:A3
X509v3 Authority Key Identifier:
keyid:63:71:04:D9:27:E7:E1:EF:8F:EB:BF:FD:DF:28:14:54:95:01:10:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/qdzMsGh5S6wiS7QQa-GGYlBb1qM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/dd1ddf-73cf-4bb2-8a6e-6e4aec86fe1e/1/Y3EE2Sfn4e-P67_93ygUVJUBEJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.130.0/24
91.240.136.0/22
Signature Algorithm: sha256WithRSAEncryption
61:ba:52:4c:d9:67:cd:29:35:49:bc:20:da:93:60:4d:01:cb:
41:e3:7b:2a:3a:78:e2:a7:2e:93:ae:4b:e2:56:e7:38:c9:9d:
f1:d1:c5:8b:33:58:a6:a5:dc:fb:bc:96:01:92:5d:1a:2a:72:
a8:d7:b3:b9:e8:2f:9b:ae:84:90:bc:83:4e:b3:71:d0:78:4d:
7a:0a:b7:f9:b3:fa:31:9a:4e:9d:f7:0b:3f:07:44:75:53:f8:
73:6d:82:58:43:64:ce:a6:01:c4:f4:98:de:c7:04:80:fe:52:
19:44:4e:e1:c7:9c:bf:6a:24:0c:65:43:ef:eb:f1:4f:fc:bf:
ef:fa:14:3f:d1:d5:db:03:d5:67:ec:3e:cc:9c:46:b9:10:40:
4c:1a:ee:db:91:3a:2c:59:db:87:81:a9:8e:7d:e3:73:84:0a:
4d:6f:a2:68:25:68:60:7a:77:d0:ff:fc:1c:ea:ba:47:2f:5e:
02:f1:c4:0d:5a:0d:7f:e5:4f:7f:a4:f9:aa:d0:03:d7:14:00:
5a:62:08:7d:ef:ac:3b:77:a4:e6:5b:7a:9e:7e:66:f8:aa:d0:
92:9b:c0:5c:62:c7:05:5d:bd:3b:67:cc:b2:f2:4c:36:a8:42:
fd:0c:2e:ac:da:7d:8d:e5:75:2a:09:1d:bf:88:00:16:b4:45:
71:1b:e9:aa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQgZ/aQttPLpCKtuzFwYQudMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzNzEwNGQ5MjdlN2UxZWY4ZmViYmZmZGRmMjgxNDU0OTUw
MTEwOTQwHhcNMjUwMTAxMDU0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWRjY2NiMDY4Nzk0YmFjMjI0YmI0MTA2YmUxODY2MjUwNWJkNmEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuxuvDBEtngD6TuPw9gD1DO2lXUZ5
bHDZDbP3Sx2jjzLNQ3d/ROiaEv1wmMDtrjVeAexG4uMNjSiVyaoKJCzl1bcKDCbh
Ms2uyojWoi3mIDpoCKuOKu5U5EcskAzNYULaSV7cv+XzTNjPTgjObhtd5lMVVSuL
3jWNUz8XhRwRYD3E6wHruS0/vKXcag1KK1LvpX8vXS3CQoOt4o1lSEz2KFQ0/B0m
xUHbitMxQCv7rX65DBdt7xE37wRw7lz9B++zJD2xfBebCKx/aBbHHQwmB8XUU2kz
BPN6H8epqPJCE6uQ8F3ShE0Zwq23jqj6XgajBNebT3UBtIWavUosdmOOpwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKnczLBoeUusIku0EGvhhmJQW9ajMB8GA1UdIwQY
MBaAFGNxBNkn5+Hvj+u//d8oFFSVARCUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9kZDFkZGYtNzNjZi00YmIyLThhNmUt
NmU0YWVjODZmZTFlLzEvcWR6TXNHaDVTNndpUzdRUWEtR0dZbEJiMXFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9kZDFkZGYtNzNjZi00YmIyLThhNmUtNmU0YWVjODZmZTFl
LzEvWTNFRTJTZm40ZS1QNjdfOTN5Z1VWSlVCRUpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW/CCAwQC
W/CIMA0GCSqGSIb3DQEBCwUAA4IBAQBhulJM2WfNKTVJvCDak2BNActB43sqOnji
py6TrkviVuc4yZ3x0cWLM1impdz7vJYBkl0aKnKo17O56C+broSQvINOs3HQeE16
Crf5s/oxmk6d9ws/B0R1U/hzbYJYQ2TOpgHE9JjexwSA/lIZRE7hx5y/aiQMZUPv
6/FP/L/v+hQ/0dXbA9Vn7D7MnEa5EEBMGu7bkTosWduHgamOfeNzhApNb6JoJWhg
enfQ//wc6rpHL14C8cQNWg1/5U9/pPmq0APXFABaYgh976w7d6TmW3qefmb4qtCS
m8BcYscFXb07Z8yy8kw2qEL9DC6s2n2N5XUqCR2/iAAWtEVxG+mq
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:45:59 2025 by rpki-client