Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/qIkK_6-F6txR9niUUOebhF6pfjI.roa
File: qIkK_6-F6txR9niUUOebhF6pfjI.roa (raw, json)
Hash identifier: Yqd5GO2kfOv5jA1UhsukLQGyb/CHFf/DnTRtWG2ci40=
Subject key identifier: A8:89:0A:FF:AF:85:EA:DC:51:F6:78:94:50:E7:9B:84:5E:A9:7E:32
Certificate issuer: /CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Certificate serial: 019424B2DDAE91E281E96B41E376E4D15AB5
Authority key identifier: 52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/qIkK_6-F6txR9niUUOebhF6pfjI.roa
Signing time: Thu 02 Jan 2025 01:48:09 +0000
ROA not before: Thu 02 Jan 2025 01:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35322
IP address blocks: 91.192.140.0/22 maxlen: 22
91.192.140.0/24 maxlen: 24
91.192.141.0/24 maxlen: 24
91.192.142.0/24 maxlen: 24
91.192.143.0/24 maxlen: 24
193.239.230.0/23 maxlen: 23
193.239.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:dd:ae:91:e2:81:e9:6b:41:e3:76:e4:d1:5a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52bab6d360e93d98fce9e7888e564bd464e89e8a
Validity
Not Before: Jan 2 01:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a8890affaf85eadc51f6789450e79b845ea97e32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:37:54:6a:a3:3e:82:9a:98:7c:a3:f4:6a:
d4:09:16:0b:4a:cf:9a:6c:e6:12:3c:c4:18:f2:f4:
9e:6f:05:e0:65:f1:56:5a:aa:40:57:49:06:e9:e7:
88:62:13:62:0e:b1:62:dd:c0:a4:de:6b:1c:47:1e:
96:79:ec:57:99:c9:22:31:e6:72:b6:f9:9e:6a:1d:
1a:5d:f4:4b:0e:9c:e5:a6:8f:af:ee:a4:61:22:e4:
40:12:ab:5a:d5:05:30:9a:c4:48:fa:7a:cb:08:e8:
43:07:a9:15:96:a9:09:ae:da:fc:91:04:b2:e7:d7:
e3:4b:00:d8:69:73:ea:cf:8c:31:d0:47:7e:5a:43:
2b:26:fc:f4:a5:01:95:a7:1a:1c:ea:5d:38:2e:61:
1d:a3:0a:f8:6d:df:c3:3e:8b:3e:f0:38:bc:40:46:
10:dd:cd:82:77:e0:cb:f8:d0:48:1e:fe:fd:7d:1e:
87:90:19:6c:1d:af:54:bd:da:f6:05:25:6e:3a:e5:
b6:33:23:80:99:11:75:c4:33:fe:b8:5d:35:e6:22:
44:bd:38:ff:60:19:97:24:b9:b4:75:40:d5:b2:e1:
43:e7:ff:6b:b2:44:45:7c:bf:b6:c4:7c:e9:5c:5b:
77:f7:f1:5c:fa:36:c6:6e:a6:3d:5f:65:a0:cc:fc:
c4:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:89:0A:FF:AF:85:EA:DC:51:F6:78:94:50:E7:9B:84:5E:A9:7E:32
X509v3 Authority Key Identifier:
keyid:52:BA:B6:D3:60:E9:3D:98:FC:E9:E7:88:8E:56:4B:D4:64:E8:9E:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urq202DpPZj86eeIjlZL1GTonoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/qIkK_6-F6txR9niUUOebhF6pfjI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/3d3b56-e4e1-4c07-99e6-2fdfe3507a2f/1/Urq202DpPZj86eeIjlZL1GTonoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.140.0/22
193.239.230.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:89:47:4b:16:1b:79:73:1c:86:70:3d:fe:3a:b2:07:cf:8d:
f0:04:54:bc:a7:0b:80:5f:c0:27:5a:26:a0:d0:ab:9a:38:a7:
54:48:93:ba:26:62:85:2a:c6:7a:70:86:b3:2d:ae:f9:95:3e:
8a:d5:a5:02:ca:91:01:8c:46:a2:45:5f:f8:b6:e8:de:92:e3:
b4:fa:59:c4:98:c2:13:4c:27:10:48:2a:c5:9d:de:ae:dc:2a:
2a:0f:7e:05:a2:25:5f:ce:65:89:ac:f5:a1:15:66:df:41:ee:
04:98:30:e6:6a:35:75:18:cc:3d:77:f8:b5:25:24:a9:c6:ce:
2b:22:87:1f:22:44:58:f7:f2:ba:cd:f0:8f:1e:b4:53:f0:43:
05:31:56:cb:bb:27:aa:cd:a7:7f:aa:52:97:90:48:ff:4a:c1:
95:cc:6f:c1:09:d4:2f:69:06:b0:1c:59:a1:5b:5c:a3:66:1e:
5d:03:48:00:84:46:30:3c:75:f6:be:69:29:4a:31:5c:99:a3:
c5:6b:a5:6b:e1:d2:d9:1f:29:d1:a6:c5:31:a0:36:c2:39:41:
1e:35:92:5a:f7:97:45:64:60:84:94:7b:80:6c:18:a3:1c:8a:
f7:d9:5e:b4:44:a8:49:e5:02:1d:41:99:7b:b7:7f:44:0f:d0:
89:ea:ab:1a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQkst2ukeKB6WtB43bk0Vq1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYmFiNmQzNjBlOTNkOThmY2U5ZTc4ODhlNTY0YmQ0NjRl
ODllOGEwHhcNMjUwMTAyMDE0ODA5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODg5MGFmZmFmODVlYWRjNTFmNjc4OTQ1MGU3OWI4NDVlYTk3ZTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO03VGqjPoKamHyj9GrUCRYLSs+a
bOYSPMQY8vSebwXgZfFWWqpAV0kG6eeIYhNiDrFi3cCk3mscRx6WeexXmckiMeZy
tvmeah0aXfRLDpzlpo+v7qRhIuRAEqta1QUwmsRI+nrLCOhDB6kVlqkJrtr8kQSy
59fjSwDYaXPqz4wx0Ed+WkMrJvz0pQGVpxoc6l04LmEdowr4bd/DPos+8Di8QEYQ
3c2Cd+DL+NBIHv79fR6HkBlsHa9Uvdr2BSVuOuW2MyOAmRF1xDP+uF015iJEvTj/
YBmXJLm0dUDVsuFD5/9rskRFfL+2xHzpXFt39/Fc+jbGbqY9X2WgzPzETQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKiJCv+vhercUfZ4lFDnm4ReqX4yMB8GA1UdIwQY
MBaAFFK6ttNg6T2Y/OnniI5WS9Rk6J6KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXJxMjAyRHBQWmo4NmVlSWpsWkwxR1Rvbm9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zZDNiNTYtZTRlMS00YzA3LTk5ZTYt
MmZkZmUzNTA3YTJmLzEvcUlrS182LUY2dHhSOW5pVVVPZWJoRjZwZmpJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zZDNiNTYtZTRlMS00YzA3LTk5ZTYtMmZkZmUzNTA3YTJm
LzEvVXJxMjAyRHBQWmo4NmVlSWpsWkwxR1Rvbm9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8CMAwQB
we/mMA0GCSqGSIb3DQEBCwUAA4IBAQCPiUdLFht5cxyGcD3+OrIHz43wBFS8pwuA
X8AnWiag0KuaOKdUSJO6JmKFKsZ6cIazLa75lT6K1aUCypEBjEaiRV/4tujekuO0
+lnEmMITTCcQSCrFnd6u3CoqD34FoiVfzmWJrPWhFWbfQe4EmDDmajV1GMw9d/i1
JSSpxs4rIocfIkRY9/K6zfCPHrRT8EMFMVbLuyeqzad/qlKXkEj/SsGVzG/BCdQv
aQawHFmhW1yjZh5dA0gAhEYwPHX2vmkpSjFcmaPFa6Vr4dLZHynRpsUxoDbCOUEe
NZJa95dFZGCElHuAbBijHIr32V60RKhJ5QIdQZl7t39ED9CJ6qsa
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:40:31 2025 by rpki-client