Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/qu7vMGQcvRYv7s2ySlulG6L93rk.roa
File: qu7vMGQcvRYv7s2ySlulG6L93rk.roa (raw, json)
Hash identifier: MEMNuLUG6QK5Jryxt/02AqlLZl7VyqgmTmooG82bGe0=
Subject key identifier: AA:EE:EF:30:64:1C:BD:16:2F:EE:CD:B2:4A:5B:A5:1B:A2:FD:DE:B9
Certificate issuer: /CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Certificate serial: 01942444D1D52286252EB7E3CF7CE273BFC0
Authority key identifier: 28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/qu7vMGQcvRYv7s2ySlulG6L93rk.roa
Signing time: Wed 01 Jan 2025 23:47:57 +0000
ROA not before: Wed 01 Jan 2025 23:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60945
IP address blocks: 91.218.58.0/24 maxlen: 24
92.60.44.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:d1:d5:22:86:25:2e:b7:e3:cf:7c:e2:73:bf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28ac9edd240bfc4520ce0bc9b245963d24e2bfe2
Validity
Not Before: Jan 1 23:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aaeeef30641cbd162feecdb24a5ba51ba2fddeb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:50:db:aa:bc:9e:c4:14:17:0b:a6:bb:0a:
2a:92:f0:08:b6:96:17:9d:b2:b2:95:f9:b4:70:8b:
d9:c1:d2:d5:10:65:dd:ec:f1:94:73:c5:37:c5:0c:
d9:90:ff:49:37:38:55:1c:37:f8:86:36:88:b5:82:
92:57:8e:cc:af:4b:2e:09:33:3d:2e:88:04:ec:28:
bf:32:f9:f9:c1:9e:93:d8:86:b6:9b:db:c4:c8:dc:
4e:22:1e:72:71:68:71:27:4e:91:c5:6f:94:af:27:
7a:63:a3:16:d5:f2:ca:26:b4:ba:d5:72:3c:2d:43:
12:3a:60:c8:57:f7:c5:b2:94:4c:0b:f9:f3:13:82:
b9:60:12:ca:f3:01:c0:a9:3b:16:6e:91:35:f6:6e:
d1:31:61:6f:a8:e7:15:75:04:59:58:2c:25:77:9a:
f4:6d:11:da:18:62:4c:aa:5a:7c:c6:b9:98:fb:c1:
4a:8c:43:6d:11:92:12:71:12:53:17:57:58:2c:b1:
76:1b:9d:c8:bf:61:b5:8c:21:5c:49:66:4d:e8:6f:
50:be:a7:6d:c6:63:37:89:b7:90:28:1d:58:05:3a:
00:06:67:54:c8:7e:ca:ac:7d:d7:73:c0:87:78:e2:
c0:aa:8b:06:68:ba:bb:ca:a8:21:11:66:1f:2f:8b:
9f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:EE:EF:30:64:1C:BD:16:2F:EE:CD:B2:4A:5B:A5:1B:A2:FD:DE:B9
X509v3 Authority Key Identifier:
keyid:28:AC:9E:DD:24:0B:FC:45:20:CE:0B:C9:B2:45:96:3D:24:E2:BF:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KKye3SQL_EUgzgvJskWWPSTiv-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/qu7vMGQcvRYv7s2ySlulG6L93rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/360b17-7e17-451b-abd5-85a534f180fd/1/KKye3SQL_EUgzgvJskWWPSTiv-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.58.0/24
92.60.44.0/22
Signature Algorithm: sha256WithRSAEncryption
4f:10:a0:2e:07:c6:80:90:b0:cd:6b:ba:c2:a8:57:ef:0e:01:
90:39:5b:f9:9b:d5:a7:18:65:c2:44:fc:d5:73:9b:96:39:b4:
4e:b0:1d:e5:a2:3a:c4:32:5f:90:e8:4a:9b:96:77:c3:cf:b6:
44:e3:a2:41:84:0c:86:b2:8e:f7:1e:d6:ca:bd:21:7e:0f:66:
f2:7a:9b:ef:88:68:16:d3:11:5a:36:79:f3:cb:c0:31:0f:ea:
54:fb:2d:c2:1a:da:30:8c:cc:1c:b2:75:21:17:c5:65:03:00:
82:d9:8d:bb:41:18:f6:db:55:f3:c1:af:51:ed:d7:5c:ba:5f:
95:94:34:34:05:19:03:ca:12:d2:2c:a2:b0:8b:fc:3c:09:ba:
63:0c:c6:82:4f:f2:17:c2:fc:9c:37:5f:04:7e:5d:b8:51:3e:
e3:f1:40:3f:fe:e2:c5:5e:ab:6c:e6:d0:13:6a:05:a7:d5:34:
e3:a3:59:e0:dd:f1:bb:86:b5:8f:47:d9:c7:06:23:60:ba:5d:
8f:75:9c:05:26:81:6e:bd:13:0b:99:7b:69:e2:81:b6:80:38:
1f:b2:6e:1a:e3:e6:5d:6f:98:b7:5f:eb:76:fe:65:1a:06:fd:
25:04:12:37:93:4e:8a:20:ae:65:8b:0a:ff:f7:ba:01:e5:e2:
c3:9d:e5:12
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQkRNHVIoYlLrfjz3zic7/AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YWM5ZWRkMjQwYmZjNDUyMGNlMGJjOWIyNDU5NjNkMjRl
MmJmZTIwHhcNMjUwMTAxMjM0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWVlZWYzMDY0MWNiZDE2MmZlZWNkYjI0YTViYTUxYmEyZmRkZWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAtQ26q8nsQUFwumuwoqkvAItpYX
nbKylfm0cIvZwdLVEGXd7PGUc8U3xQzZkP9JNzhVHDf4hjaItYKSV47Mr0suCTM9
LogE7Ci/Mvn5wZ6T2Ia2m9vEyNxOIh5ycWhxJ06RxW+Uryd6Y6MW1fLKJrS61XI8
LUMSOmDIV/fFspRMC/nzE4K5YBLK8wHAqTsWbpE19m7RMWFvqOcVdQRZWCwld5r0
bRHaGGJMqlp8xrmY+8FKjENtEZIScRJTF1dYLLF2G53Iv2G1jCFcSWZN6G9Qvqdt
xmM3ibeQKB1YBToABmdUyH7KrH3Xc8CHeOLAqosGaLq7yqghEWYfL4uf+wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKru7zBkHL0WL+7NskpbpRui/d65MB8GA1UdIwQY
MBaAFCisnt0kC/xFIM4LybJFlj0k4r/iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0t5ZTNTUUxfRVVnemd2SnNrV1dQU1Rpdi1JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zNjBiMTctN2UxNy00NTFiLWFiZDUt
ODVhNTM0ZjE4MGZkLzEvcXU3dk1HUWN2Ull2N3MyeVNsdWxHNkw5M3JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zNjBiMTctN2UxNy00NTFiLWFiZDUtODVhNTM0ZjE4MGZk
LzEvS0t5ZTNTUUxfRVVnemd2SnNrV1dQU1Rpdi1JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9o6AwQC
XDwsMA0GCSqGSIb3DQEBCwUAA4IBAQBPEKAuB8aAkLDNa7rCqFfvDgGQOVv5m9Wn
GGXCRPzVc5uWObROsB3lojrEMl+Q6EqblnfDz7ZE46JBhAyGso73HtbKvSF+D2by
epvviGgW0xFaNnnzy8AxD+pU+y3CGtowjMwcsnUhF8VlAwCC2Y27QRj221Xzwa9R
7ddcul+VlDQ0BRkDyhLSLKKwi/w8CbpjDMaCT/IXwvycN18Efl24UT7j8UA//uLF
Xqts5tATagWn1TTjo1ng3fG7hrWPR9nHBiNgul2PdZwFJoFuvRMLmXtp4oG2gDgf
sm4a4+Zdb5i3X+t2/mUaBv0lBBI3k06KIK5liwr/97oB5eLDneUS
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:39:29 2025 by rpki-client