Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/Qp56EhXo02rtbXG9bpMugv8X2n0.roa
File: Qp56EhXo02rtbXG9bpMugv8X2n0.roa (raw, json)
Hash identifier: TyqFIVR8sVZ/spucHhOleEaJbMKaFD4U+qZbekh1SEU=
Subject key identifier: 42:9E:7A:12:15:E8:D3:6A:ED:6D:71:BD:6E:93:2E:82:FF:17:DA:7D
Certificate issuer: /CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Certificate serial: 01941F8C15B0F09A3A4C556C88BC4CF606A2
Authority key identifier: 25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/Qp56EhXo02rtbXG9bpMugv8X2n0.roa
Signing time: Wed 01 Jan 2025 01:47:41 +0000
ROA not before: Wed 01 Jan 2025 01:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12985
IP address blocks: 91.206.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:15:b0:f0:9a:3a:4c:55:6c:88:bc:4c:f6:06:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25c52687a5ff161d2edabc9f8e3a4876c4ad8da2
Validity
Not Before: Jan 1 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=429e7a1215e8d36aed6d71bd6e932e82ff17da7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:35:ea:d5:db:1c:02:1b:18:68:c6:93:78:80:
89:00:9f:76:6e:32:da:d9:a0:bc:4a:da:ae:dc:37:
d0:9b:ec:ec:10:4e:e0:7b:f9:56:08:8c:da:4d:01:
2b:98:b9:6a:2c:7e:ed:8b:b9:08:90:e4:e9:5b:c7:
11:79:d7:1e:64:12:6e:31:00:97:4b:ce:c3:02:00:
1f:5d:66:a5:3e:6f:32:cc:67:50:b6:7c:9b:a1:6f:
ca:7e:2c:d5:cd:d8:d3:12:0a:5e:1c:40:9f:94:01:
69:5f:9f:0b:4d:0f:e0:9b:78:62:b6:c7:1f:aa:c4:
9a:08:85:88:15:13:2d:78:ef:5b:80:c3:83:51:2f:
64:46:cc:61:32:17:e8:72:6d:43:88:ec:90:ae:d3:
05:0b:82:f9:50:8b:01:5e:01:61:c6:54:7d:7d:60:
95:8a:57:c8:0a:47:fc:4a:b0:4f:2b:67:84:e0:b2:
0f:74:57:cf:74:c4:73:10:2c:d9:48:81:55:00:79:
b0:35:6d:02:b6:6e:86:90:d6:c9:62:62:3a:89:16:
e5:cc:92:9f:b8:e9:72:66:8d:1b:0e:96:29:ec:ff:
d1:ae:7d:e4:4d:34:85:01:0b:55:61:05:9b:3f:77:
47:e6:4d:28:aa:a8:a1:b2:35:f8:28:74:4f:cc:57:
88:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9E:7A:12:15:E8:D3:6A:ED:6D:71:BD:6E:93:2E:82:FF:17:DA:7D
X509v3 Authority Key Identifier:
keyid:25:C5:26:87:A5:FF:16:1D:2E:DA:BC:9F:8E:3A:48:76:C4:AD:8D:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JcUmh6X_Fh0u2ryfjjpIdsStjaI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/Qp56EhXo02rtbXG9bpMugv8X2n0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/596506-5ac6-49b3-bd70-75dae5ddfed3/1/JcUmh6X_Fh0u2ryfjjpIdsStjaI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.180.0/24
Signature Algorithm: sha256WithRSAEncryption
09:80:05:a9:b4:d9:85:0b:cd:97:5a:06:ec:b0:3d:a6:2a:ae:
40:04:86:e3:58:45:da:21:d3:53:4b:34:b6:4f:bd:5f:9d:68:
75:c0:46:0f:7e:dc:41:94:a2:43:15:8b:80:9e:7c:3b:a7:d3:
2c:6d:6b:7e:ef:89:e1:a5:5e:8e:7f:31:34:07:de:3d:75:7e:
4e:f5:75:4d:bb:05:dc:e3:9d:88:93:f1:36:eb:5c:f9:04:53:
aa:00:8f:0c:e0:15:db:e5:76:a9:d2:9a:b2:4f:cb:1a:8b:ee:
ab:65:5b:a8:61:06:51:99:f4:5a:c3:ce:67:04:35:68:63:25:
78:79:ee:4c:d9:0e:b1:db:c4:d8:58:3a:87:0d:61:c1:29:62:
6d:6f:b2:22:5c:58:b2:ed:d8:40:3f:35:bb:40:0d:3b:ed:67:
a2:51:1d:a0:06:98:ea:42:59:f1:78:bd:a7:98:f4:5a:ea:71:
d2:e4:45:65:f8:ec:42:3c:72:c2:fa:14:aa:6d:2e:c7:91:44:
5b:2a:ad:05:d5:69:9c:be:72:34:8d:9b:64:27:04:74:55:e5:
46:e0:38:58:6f:36:7f:53:a4:f0:fe:62:f5:bf:4d:da:dc:98:
15:2c:1f:10:1b:cf:96:7a:01:02:a5:b3:5a:3a:1e:68:63:2e:
30:aa:5f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 05:21:20 2025 by rpki-client