Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/qSlCWIoaBSlT8FJxAqdM3S_JMeY.roa
File: qSlCWIoaBSlT8FJxAqdM3S_JMeY.roa (raw, json)
Hash identifier: Zvj6zybG7gbhDX6oesOJPa1rvAoqiKQGPqATyljkt6o=
Subject key identifier: A9:29:42:58:8A:1A:05:29:53:F0:52:71:02:A7:4C:DD:2F:C9:31:E6
Certificate issuer: /CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Certificate serial: 01942444E3AC95E60176A9C074AE5763ABC8
Authority key identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/qSlCWIoaBSlT8FJxAqdM3S_JMeY.roa
Signing time: Wed 01 Jan 2025 23:48:02 +0000
ROA not before: Wed 01 Jan 2025 23:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 204954
IP address blocks: 91.244.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:e3:ac:95:e6:01:76:a9:c0:74:ae:57:63:ab:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Validity
Not Before: Jan 1 23:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a92942588a1a052953f0527102a74cdd2fc931e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:9b:fa:38:ee:db:7b:e8:52:7f:4e:de:39:bb:
83:df:0f:3c:f4:86:f9:99:cc:2d:0b:44:ac:38:40:
11:03:5b:7b:41:43:a4:29:77:02:ac:10:5f:b2:0b:
07:8d:79:fa:5e:02:31:24:42:fb:af:37:c6:1a:ba:
b5:b0:62:0c:b4:61:5f:40:1b:ab:5d:4d:68:51:8c:
dc:cc:1a:b8:2f:17:1e:d0:39:5a:ab:af:39:ad:8d:
fa:4e:96:86:ce:e7:7c:96:2a:b7:77:2b:ff:a1:95:
c6:ea:38:83:27:db:82:af:d3:7c:91:c2:56:f0:ec:
48:57:d8:ac:d8:d6:8b:47:46:3d:aa:fa:ad:a3:97:
dc:87:73:6b:c9:9b:45:d9:8d:9b:c2:62:2a:b1:e7:
06:31:fa:a7:2f:1e:6d:36:80:54:6c:17:55:21:95:
5e:25:84:43:b1:18:6d:15:44:74:96:41:78:e9:f3:
ee:55:2e:ed:e2:6f:c6:d6:2b:2f:eb:b4:b1:b4:47:
df:0d:88:3c:1a:1c:1f:ce:17:e0:d4:10:6d:5b:81:
e3:65:30:e3:40:ff:34:b9:95:89:4c:69:cd:d7:6d:
27:d8:4d:e4:72:7d:15:88:5f:e9:a5:b5:f9:e0:ea:
e1:57:e4:30:d1:95:f0:99:be:94:d5:c4:8d:85:cd:
d2:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:29:42:58:8A:1A:05:29:53:F0:52:71:02:A7:4C:DD:2F:C9:31:E6
X509v3 Authority Key Identifier:
keyid:93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/qSlCWIoaBSlT8FJxAqdM3S_JMeY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.126.0/24
Signature Algorithm: sha256WithRSAEncryption
45:78:82:df:fe:02:11:e4:ec:49:84:49:15:98:cf:b5:41:16:
fa:e7:ce:eb:09:c0:00:1e:db:18:a5:aa:1b:15:4c:51:78:12:
a6:dc:39:44:b1:ae:3e:92:2c:23:20:01:55:71:df:1c:e5:c3:
fd:cf:42:02:72:80:f5:07:b8:ea:31:8c:1c:ac:89:7c:6b:06:
9b:49:b2:a2:32:f1:b2:e6:3d:1f:a0:5e:c5:b4:08:c0:24:8b:
ed:8c:44:21:0f:8c:96:23:63:dc:45:52:e0:83:98:38:9c:d6:
27:c2:0f:1c:14:84:95:53:95:c6:30:26:74:2b:cb:93:c2:74:
e8:83:ca:90:99:19:ea:ca:25:d7:b3:5b:f1:01:14:16:87:ee:
49:ae:6d:f9:2d:e7:d4:69:1c:6b:99:e3:d9:eb:73:98:7a:e1:
de:d1:26:8c:34:b4:63:28:6d:a9:1f:b8:39:65:a6:f0:45:f6:
6a:40:1e:b7:34:7d:bc:16:c4:14:5f:9d:8b:61:19:a6:39:5d:
7b:b4:f5:a8:20:3d:58:03:09:9b:2b:1f:9d:d5:28:cb:85:e3:
c0:02:76:9b:98:a6:22:3f:d1:b7:3f:d9:60:cb:15:1a:18:4e:
37:b8:c5:c2:71:71:de:6c:16:04:4c:55:89:ec:4d:ce:77:5e:
08:8a:79:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:31:54 2025 by rpki-client