Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/QxhZicwGUVQxP9IW9_Bs3YT2TWA.roa
File: QxhZicwGUVQxP9IW9_Bs3YT2TWA.roa (raw, json)
Hash identifier: BTcN4T7DZ6v6RQWA7fyITvrdQwjA1FWvrUllA9/iU9g=
Subject key identifier: 43:18:59:89:CC:06:51:54:31:3F:D2:16:F7:F0:6C:DD:84:F6:4D:60
Certificate issuer: /CN=a27c641b530a7c6ba234022e3327246232367100
Certificate serial: 0194228DD2D64B8A73204C67081EE94090AC
Authority key identifier: A2:7C:64:1B:53:0A:7C:6B:A2:34:02:2E:33:27:24:62:32:36:71:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/onxkG1MKfGuiNAIuMyckYjI2cQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/QxhZicwGUVQxP9IW9_Bs3YT2TWA.roa
Signing time: Wed 01 Jan 2025 15:48:27 +0000
ROA not before: Wed 01 Jan 2025 15:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60606
IP address blocks: 91.239.200.0/22 maxlen: 23
2001:67c:e94::/48 maxlen: 49
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d2:d6:4b:8a:73:20:4c:67:08:1e:e9:40:90:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a27c641b530a7c6ba234022e3327246232367100
Validity
Not Before: Jan 1 15:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43185989cc065154313fd216f7f06cdd84f64d60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:63:70:f3:e6:a4:80:02:33:b1:63:d7:ee:18:
58:f4:37:ab:5e:36:c0:51:49:ef:6c:7b:85:a3:33:
0f:55:3b:4c:ba:18:71:ba:08:01:e1:4f:7f:01:c3:
d4:5e:ef:43:16:bb:8f:43:b3:bf:71:3b:e7:69:5e:
a3:43:fb:c0:f6:33:7e:2c:65:d3:54:fe:a3:a5:e2:
ab:17:3c:c5:8e:a7:7e:fc:a2:b9:56:d7:ac:b6:05:
aa:bc:71:75:cc:92:57:d8:0b:69:bc:1a:8a:38:be:
66:c4:cb:0b:8a:37:e1:08:e6:4d:64:d8:48:ad:a9:
d7:49:f6:c2:f1:df:5c:39:b7:d0:f7:8b:68:d6:17:
35:ad:72:f9:a5:c9:c1:04:8f:2e:aa:44:80:1d:a8:
8b:91:48:ee:f1:6c:d8:9d:49:d6:9d:39:31:88:6d:
e4:24:12:66:d9:a4:1e:25:44:39:e9:bf:8c:6b:ef:
d3:41:1a:15:40:84:aa:f9:7f:7c:b3:ae:c1:96:c4:
ec:20:27:b9:6c:91:f3:a5:16:2d:f2:0d:95:cc:79:
3a:83:45:ad:79:9f:e7:8d:ce:37:47:0e:1a:74:5f:
83:a6:d3:f3:d1:a3:a5:64:d4:30:c0:f0:10:8c:47:
04:c5:2b:9f:5b:0a:28:21:ab:23:3f:ec:de:43:7f:
a0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:18:59:89:CC:06:51:54:31:3F:D2:16:F7:F0:6C:DD:84:F6:4D:60
X509v3 Authority Key Identifier:
keyid:A2:7C:64:1B:53:0A:7C:6B:A2:34:02:2E:33:27:24:62:32:36:71:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/onxkG1MKfGuiNAIuMyckYjI2cQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/QxhZicwGUVQxP9IW9_Bs3YT2TWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/006f56-1d8e-45cc-8694-1f188fcce855/1/onxkG1MKfGuiNAIuMyckYjI2cQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.200.0/22
IPv6:
2001:67c:e94::/48
Signature Algorithm: sha256WithRSAEncryption
0c:7d:01:91:a7:58:c1:b6:f0:85:98:00:5f:b0:0b:62:38:28:
51:a4:91:a2:a9:e9:fe:27:d6:f5:95:30:3e:89:62:0c:90:fd:
9d:e5:ee:4d:f7:d0:96:79:78:8e:e9:89:33:ea:13:67:0b:4b:
1a:58:a4:95:aa:da:86:d3:58:40:0a:bd:7b:a8:d7:be:75:d1:
5a:14:4a:1e:b5:4b:ce:80:40:b8:5f:6d:e4:37:23:a2:b8:ba:
b3:2d:e0:67:1f:9e:11:a7:65:53:a4:92:0c:27:bf:f7:22:cc:
53:aa:e6:33:8d:99:24:6b:ce:60:7f:65:42:1d:a0:90:d7:2b:
7f:07:66:6c:ae:e6:80:ed:b3:ff:59:ad:90:ec:34:07:e6:bd:
60:94:db:4b:05:58:a0:b9:e8:96:99:7e:ea:aa:eb:3c:5d:8d:
7f:f9:9d:6d:97:dc:5e:90:c1:08:88:cf:5d:fc:d6:c7:d1:70:
f9:d3:8c:90:8d:7d:b3:b2:9e:9d:9b:00:3b:dd:b5:eb:36:02:
00:72:22:01:af:dc:91:f4:bb:f8:92:81:a8:bb:5f:b4:59:6f:
89:ba:9b:5d:3c:6a:92:44:37:69:50:23:aa:9c:86:ef:85:75:
e2:4c:75:1e:7a:2e:01:a5:9c:94:77:33:22:07:af:b9:f5:9b:
f1:89:b7:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:48 2025 by rpki-client