Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/sQpCyqrYhPNlqPdrmizFtrGO14c.roa
File: sQpCyqrYhPNlqPdrmizFtrGO14c.roa (raw, json)
Hash identifier: yjB8Md4YNzJrNV3sVTOoBXACOOSqrVWUCWDSaqokA0I=
Subject key identifier: B1:0A:42:CA:AA:D8:84:F3:65:A8:F7:6B:9A:2C:C5:B6:B1:8E:D7:87
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01945E92E0C77F05298758B53E9C0A92FDC4
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/sQpCyqrYhPNlqPdrmizFtrGO14c.roa
Signing time: Mon 13 Jan 2025 07:31:11 +0000
ROA not before: Mon 13 Jan 2025 07:31:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139659
IP address blocks: 91.208.236.0/24 maxlen: 24
91.208.240.0/24 maxlen: 24
91.208.245.0/24 maxlen: 24
91.208.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:5e:92:e0:c7:7f:05:29:87:58:b5:3e:9c:0a:92:fd:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 13 07:31:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b10a42caaad884f365a8f76b9a2cc5b6b18ed787
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:47:33:bc:61:f5:5e:9f:d4:b8:e5:02:10:2a:
a4:f5:57:0b:21:26:6a:81:34:ce:2d:88:69:c0:f1:
b3:84:9f:c4:0c:06:d9:58:be:49:4c:bb:a7:fd:07:
d5:c4:a0:5b:f9:dc:b2:37:d5:48:74:16:f4:fd:82:
d9:f7:31:96:0d:f0:0c:15:dd:0c:08:b2:68:f0:e5:
d0:71:53:57:7f:41:94:b5:a3:50:96:9d:6c:2b:2b:
4d:8e:15:d2:ee:1d:fa:cb:06:64:ba:e7:0e:20:2f:
f4:f7:36:b1:e2:b9:c6:85:a2:1c:cd:6f:22:86:19:
c6:d5:97:6a:2d:ac:ea:d8:13:96:29:c3:be:bf:02:
98:65:65:1f:d6:de:ed:e2:7d:17:c0:f3:a1:1f:f5:
3f:19:d4:ab:dc:7c:32:7b:e7:2a:12:69:8d:ea:0b:
9c:52:56:25:00:c1:61:55:b0:f7:06:36:80:69:b9:
73:9f:e2:bd:cd:19:09:e6:43:f6:12:24:27:10:30:
f6:e0:d1:11:4b:36:a9:8f:c8:2f:9c:8e:eb:7b:db:
cb:fb:09:5b:98:72:af:32:23:af:3c:5d:cf:64:9e:
03:da:7c:ff:20:85:4e:0a:b3:c9:9e:0a:29:d8:ee:
21:ba:55:d9:99:7f:58:78:a3:1f:4c:98:b3:2c:b5:
18:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0A:42:CA:AA:D8:84:F3:65:A8:F7:6B:9A:2C:C5:B6:B1:8E:D7:87
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/sQpCyqrYhPNlqPdrmizFtrGO14c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.236.0/24
91.208.240.0/24
91.208.245.0-91.208.246.255
Signature Algorithm: sha256WithRSAEncryption
90:37:d4:a3:16:59:c2:0b:ff:fc:f3:b3:96:72:82:af:38:ad:
bb:71:64:a0:dd:65:be:ee:d5:cd:28:aa:03:f8:dd:10:41:fc:
f3:e3:09:50:d4:3d:47:71:3d:29:46:fe:f5:c5:b8:d5:a8:ec:
85:69:29:75:71:85:2b:b8:5b:15:74:ca:a0:5c:6d:04:18:da:
ea:41:e1:07:71:21:6c:95:73:8c:e9:ec:05:c9:fd:7a:53:4c:
b4:6d:51:60:bd:52:8e:80:6f:89:5a:d8:1b:a2:6b:f4:46:f1:
c9:db:e3:82:50:2e:51:d1:06:4e:81:20:97:ee:7e:5e:66:9c:
0f:d0:4f:a9:ae:96:e4:6f:4d:07:5b:6e:d2:2d:46:97:4b:a6:
bb:8c:f1:ec:20:af:5f:67:86:5e:ac:bd:6b:48:8d:77:f6:56:
bd:22:fa:55:39:fd:98:20:2f:4b:89:3e:d9:dd:e7:6e:a3:af:
8b:4f:b3:b7:4c:65:bc:e8:7d:28:c4:ba:44:2f:f2:7c:87:5d:
e8:15:40:e4:fb:e2:9a:1a:9b:65:82:31:04:d1:b5:46:fc:b5:
12:81:cc:36:f5:70:34:f8:41:c3:1b:49:c7:a3:74:2d:7b:06:
d5:ef:14:7a:9e:5b:c2:84:23:e2:4b:59:63:32:4a:5b:74:d2:
8f:ed:8c:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:24:49 2025 by rpki-client