Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/QpIKO4ejjPjXaNQ1_KyJkWKevB8.roa
File: QpIKO4ejjPjXaNQ1_KyJkWKevB8.roa (raw, json)
Hash identifier: e6W0MKDyzgf7+BDF2Ho9KsY3xBRYMIFdcPH8WpxhKmo=
Subject key identifier: 42:92:0A:3B:87:A3:8C:F8:D7:68:D4:35:FC:AC:89:91:62:9E:BC:1F
Certificate issuer: /CN=0407d6c248444f6b5c378db0ffec0f899256eba3
Certificate serial: 0194266C3F375F4A063C6491F91223B5ECB6
Authority key identifier: 04:07:D6:C2:48:44:4F:6B:5C:37:8D:B0:FF:EC:0F:89:92:56:EB:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/QpIKO4ejjPjXaNQ1_KyJkWKevB8.roa
Signing time: Thu 02 Jan 2025 09:50:15 +0000
ROA not before: Thu 02 Jan 2025 09:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199088
IP address blocks: 91.197.5.0/24 maxlen: 24
91.197.6.0/24 maxlen: 24
94.231.36.0/23 maxlen: 23
185.207.226.0/24 maxlen: 24
2a13:45c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:3f:37:5f:4a:06:3c:64:91:f9:12:23:b5:ec:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0407d6c248444f6b5c378db0ffec0f899256eba3
Validity
Not Before: Jan 2 09:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=42920a3b87a38cf8d768d435fcac8991629ebc1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:b5:f8:92:e9:af:81:30:86:e5:bc:73:d1:86:
d1:59:3e:fe:7c:6d:f3:6a:28:7a:d4:57:cc:f7:e9:
d0:92:a4:3c:1d:78:3d:5c:ba:85:8c:dd:67:46:21:
86:62:80:e3:1e:85:2e:25:26:97:d6:58:01:96:de:
e4:f8:5b:ff:0e:47:ea:fc:3a:22:fa:9e:a4:96:f1:
fb:10:38:d4:08:21:0b:ea:6e:9a:1d:c4:53:fd:c7:
60:40:64:9b:cf:85:3f:33:16:01:05:a6:79:fd:3d:
8e:65:27:66:49:9b:bb:37:79:81:7c:3d:f0:f5:c1:
03:03:3a:79:3c:11:ef:c4:7f:52:e5:87:d3:2c:17:
93:c4:01:ca:29:42:dc:ef:38:ec:cd:38:96:db:cd:
ab:dd:f8:15:ee:e5:b0:6c:eb:f1:c1:9a:c9:15:5a:
ad:88:d2:ec:0e:5c:c4:8d:29:ce:a0:33:e4:de:b8:
2b:f1:a6:97:b2:d4:f9:fa:82:3b:df:9e:10:7f:ed:
c3:19:6d:cf:c0:b3:4b:70:dc:e1:2f:99:95:7c:6e:
2d:ba:fd:bc:68:34:8b:b9:7c:52:55:80:02:90:7b:
67:41:19:f1:37:57:b3:72:52:9a:2c:4e:ec:e0:26:
f7:ca:a0:54:43:20:01:60:73:aa:7b:72:f3:7c:4e:
f9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:92:0A:3B:87:A3:8C:F8:D7:68:D4:35:FC:AC:89:91:62:9E:BC:1F
X509v3 Authority Key Identifier:
keyid:04:07:D6:C2:48:44:4F:6B:5C:37:8D:B0:FF:EC:0F:89:92:56:EB:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAfWwkhET2tcN42w_-wPiZJW66M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/QpIKO4ejjPjXaNQ1_KyJkWKevB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/5f9e1f-0971-4446-a611-fad19bdc792b/1/BAfWwkhET2tcN42w_-wPiZJW66M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.5.0-91.197.6.255
94.231.36.0/23
185.207.226.0/24
IPv6:
2a13:45c0::/29
Signature Algorithm: sha256WithRSAEncryption
45:e8:50:fc:57:a6:3a:02:22:e3:5d:57:26:29:48:de:1f:ed:
54:53:b4:69:02:b4:65:2d:1c:0e:2f:50:ac:99:e0:64:6d:74:
83:c1:98:23:0d:c4:78:f9:79:7f:04:6a:e3:41:5b:cc:9e:6e:
20:22:6c:d5:6a:ee:44:26:28:64:ae:3e:d2:03:d5:af:55:38:
0e:4d:a4:57:d8:25:84:79:c8:a4:e1:16:85:87:07:e9:33:31:
0b:85:48:c0:7f:3c:cb:59:28:40:7b:ac:9e:ef:3d:20:6d:9d:
b1:4c:73:09:ee:59:86:86:73:db:ba:f6:c1:19:4d:bc:8b:c5:
9a:7c:35:00:43:68:60:37:e4:cb:54:cb:a9:02:2b:6b:01:2b:
0b:6b:9f:fe:ca:59:d7:0b:26:00:38:8e:bf:bc:1d:5f:f0:9b:
5a:0a:45:35:cb:26:47:02:ff:ab:4b:0d:8d:2a:0f:91:18:ce:
1b:7e:3e:65:ea:90:96:4a:97:52:c0:64:bb:5c:b0:5d:16:9e:
21:68:34:32:35:a5:69:ce:e8:42:c9:03:78:1b:0e:86:34:10:
37:b8:41:b9:6a:6d:c7:fc:88:ef:b4:7b:08:0e:3f:50:13:bc:
c2:5c:a5:c3:d5:7f:9c:73:94:c3:5e:4d:ef:b4:3b:03:ee:ad:
fc:29:87:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:25:54 2025 by rpki-client