Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/qyVuEE_iZxUcQNKHUqVvNbUSd5Q.roa
File: qyVuEE_iZxUcQNKHUqVvNbUSd5Q.roa (raw, json)
Hash identifier: yJBmopjTpiGvBLTxepISwc4Bu7mb8teVZwXirlkcbTI=
Subject key identifier: AB:25:6E:10:4F:E2:67:15:1C:40:D2:87:52:A5:6F:35:B5:12:77:94
Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Certificate serial: 019424B294342494D343CE758D5BFE309A4B
Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/qyVuEE_iZxUcQNKHUqVvNbUSd5Q.roa
Signing time: Thu 02 Jan 2025 01:47:50 +0000
ROA not before: Thu 02 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 91.237.174.0/24 maxlen: 24
91.237.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:94:34:24:94:d3:43:ce:75:8d:5b:fe:30:9a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c
Validity
Not Before: Jan 2 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab256e104fe267151c40d28752a56f35b5127794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e8:8f:05:fd:84:ba:55:c3:96:c5:ec:09:9c:
93:1e:34:be:32:7a:7a:00:96:17:b2:b3:f6:14:98:
7f:18:35:20:9c:df:74:92:72:47:53:64:fa:04:07:
53:d4:65:93:d4:8a:04:1e:6d:b8:d7:59:79:ee:47:
a9:27:75:c6:be:33:71:63:7d:76:08:01:d0:51:a7:
c6:7e:ea:d9:93:08:3c:ee:ce:0f:b0:48:9d:12:60:
9d:60:2c:f5:33:a9:67:69:0e:72:d1:9f:9a:fe:27:
95:39:9f:17:05:8a:24:ab:ea:dc:32:77:d1:c3:00:
51:e9:6a:3d:e2:ed:de:8b:d6:64:10:f0:c1:d0:a8:
2a:ef:d3:66:a0:cb:c7:ed:a4:ab:60:f0:a1:4b:53:
28:b0:5b:9a:ae:4a:41:6c:28:04:39:92:a6:07:f3:
8b:2d:ba:23:ac:81:bd:60:57:99:d0:7e:bf:62:82:
a0:56:f0:7c:5a:c2:9a:ad:7c:bf:69:06:16:6f:38:
67:f3:b8:6f:32:77:cf:fc:f7:e2:04:86:83:ec:f1:
51:0d:04:a4:d0:48:71:ce:d3:42:d2:7b:80:f2:4e:
d2:af:f4:a6:30:35:c3:b6:ca:e6:d2:b9:36:3b:81:
17:dc:57:a9:48:9d:5e:d6:49:52:18:64:37:fa:0b:
66:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:25:6E:10:4F:E2:67:15:1C:40:D2:87:52:A5:6F:35:B5:12:77:94
X509v3 Authority Key Identifier:
keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/qyVuEE_iZxUcQNKHUqVvNbUSd5Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.174.0/23
Signature Algorithm: sha256WithRSAEncryption
71:15:9a:40:86:cb:b5:99:9f:d0:e9:62:ca:1c:6c:56:5e:bc:
11:14:9d:7f:20:bf:02:4e:6e:5c:da:54:82:36:44:ce:70:85:
f8:32:d6:fb:e4:71:41:40:90:fe:ea:c1:b5:f8:5b:62:84:18:
28:27:75:b7:97:34:48:24:43:58:d8:9a:4b:6c:3a:63:0a:70:
8f:50:42:c4:3a:17:7f:bd:cb:7a:88:93:7b:ab:9b:41:dc:f6:
d5:d5:27:f2:ee:57:ac:b7:96:39:22:f7:02:5d:98:49:7d:39:
62:39:0a:92:2f:94:ce:21:33:3e:22:da:b9:4d:cc:61:e3:e9:
df:82:8a:c4:f9:6b:5e:48:e6:67:b8:34:7f:84:b9:67:5f:1c:
9c:68:db:39:a5:45:0a:22:b8:33:6d:f3:69:8a:0f:b9:cd:1b:
8d:5b:98:e5:5b:be:7a:c3:87:89:32:c2:30:b4:ef:ae:fa:b2:
0e:b4:7e:d9:5b:73:c9:54:ea:03:96:96:c6:fb:91:4d:11:88:
53:e8:46:7f:a0:fb:42:b9:d4:de:f1:39:b8:ab:96:11:50:70:
40:6a:92:75:a3:76:52:20:1e:04:30:ff:c4:5d:85:15:5e:6f:
2e:c2:d9:7c:e8:95:fc:30:d9:6f:e3:51:18:ab:27:60:98:64:
92:05:85:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:52:26 2025 by rpki-client