Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/qVNInsbhBFyRmIgRlhSK_CcLPjM.roa
File: qVNInsbhBFyRmIgRlhSK_CcLPjM.roa (raw, json)
Hash identifier: laAyeRcD8/2Z20+NXh12zW1wGOZiDGkQ810we5zegYY=
Subject key identifier: A9:53:48:9E:C6:E1:04:5C:91:98:88:11:96:14:8A:FC:27:0B:3E:33
Certificate issuer: /CN=f966238becd356df87d0c630248123f8f219e18c
Certificate serial: 0194206846040E691E0C78208056E0FC670C
Authority key identifier: F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/qVNInsbhBFyRmIgRlhSK_CcLPjM.roa
Signing time: Wed 01 Jan 2025 05:48:12 +0000
ROA not before: Wed 01 Jan 2025 05:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 35493
IP address blocks: 91.237.168.0/23 maxlen: 23
91.237.170.0/24 maxlen: 24
185.90.164.0/22 maxlen: 22
2a05:e300::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:46:04:0e:69:1e:0c:78:20:80:56:e0:fc:67:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f966238becd356df87d0c630248123f8f219e18c
Validity
Not Before: Jan 1 05:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a953489ec6e1045c9198881196148afc270b3e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9d:83:66:e2:7e:cc:ad:8a:5b:88:89:db:72:
49:61:63:4a:72:62:7c:fc:2a:68:34:cb:cc:e5:c1:
c9:06:fb:fe:b2:09:35:78:a0:74:69:cd:7d:ae:b2:
59:0c:bb:76:d1:53:bc:51:42:2f:80:0a:14:1e:9e:
e7:c5:14:91:39:bc:b6:17:78:da:5f:0a:7e:e4:7c:
ec:79:31:14:63:a7:1b:23:31:bc:47:41:ba:b6:fb:
d3:08:e6:87:28:8f:18:90:b2:33:9b:31:b8:c7:ec:
c2:23:a9:42:9c:99:04:ba:3e:c2:fa:8f:d8:67:26:
e8:4c:9f:1d:c0:5f:fd:e5:e6:b2:c2:d4:79:c9:94:
43:97:cb:21:d2:69:19:62:0f:97:9d:db:32:70:2c:
99:b0:cb:c0:fe:44:72:1a:a8:fb:60:35:df:dd:c4:
3c:8a:d9:26:a6:a5:7a:2d:dd:9f:58:b2:cc:1c:15:
8d:18:32:c0:5c:5f:3a:7d:e8:ea:c3:81:59:58:98:
cd:b6:ba:5c:71:6d:7c:b4:96:7a:e0:f3:da:a4:73:
c7:0e:57:70:52:41:3f:37:21:4f:1b:c4:42:fc:7c:
6e:68:8f:35:4d:69:bd:1e:b6:2a:9b:ea:57:de:d5:
73:6d:99:cb:5f:1d:7a:dc:fe:97:ad:4e:d6:09:60:
2a:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:53:48:9E:C6:E1:04:5C:91:98:88:11:96:14:8A:FC:27:0B:3E:33
X509v3 Authority Key Identifier:
keyid:F9:66:23:8B:EC:D3:56:DF:87:D0:C6:30:24:81:23:F8:F2:19:E1:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/qVNInsbhBFyRmIgRlhSK_CcLPjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a8ece7-2b6c-4451-8b3d-332dbd9a60af/1/1-WYji-zTVt-H0MYwJIEj-PIZ4Yw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.168.0-91.237.170.255
185.90.164.0/22
IPv6:
2a05:e300::/29
Signature Algorithm: sha256WithRSAEncryption
b3:e2:f8:29:e1:4d:95:32:26:c5:c3:f5:62:30:3b:83:66:69:
b0:a1:d9:8a:34:22:54:41:0f:c5:a6:44:b8:21:95:01:05:ed:
31:f9:1e:7e:ac:ab:0c:22:0d:6b:f4:f6:cc:8e:e7:6f:80:b6:
f3:29:d8:f5:af:38:88:12:fd:4d:9a:e9:81:e6:a6:86:86:43:
23:0a:ba:6f:a7:b4:f0:68:c7:5f:1e:3f:38:80:8b:91:f3:fb:
aa:87:94:37:49:cf:ad:ec:0a:09:12:fa:a9:1e:f0:f0:7d:26:
02:2b:b5:e2:a1:93:39:a2:c5:9c:f7:86:9b:fc:ab:df:23:88:
8a:bf:8f:08:8d:ee:16:f9:2c:dd:ea:20:2d:4e:1d:08:74:61:
1a:92:63:59:bb:f5:4e:8c:17:a1:26:59:18:4f:f3:3a:69:da:
5d:d9:2a:31:98:43:92:46:ee:4c:16:99:a0:3c:8d:eb:14:a7:
f6:ee:45:0d:6d:55:3a:6e:11:81:40:e6:89:42:a4:82:17:af:
fc:ab:a8:8f:c0:86:4b:20:6e:62:72:a4:60:ce:68:28:bd:97:
fc:07:73:be:ee:fe:24:73:3a:00:55:9f:69:e3:ae:54:23:51:
a2:1b:70:d4:02:b3:c4:35:e4:9d:18:f9:23:b1:47:9d:7f:75:
22:4b:69:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:37:32 2025 by rpki-client