Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/qzLXijCXGbE_acwtrJPh-2zjGNA.roa
File: qzLXijCXGbE_acwtrJPh-2zjGNA.roa (raw, json)
Hash identifier: Xb/Xzo/Add70MVAxLt6EXN5wmBOSOpEoCLA2tIVd0X8=
Subject key identifier: AB:32:D7:8A:30:97:19:B1:3F:69:CC:2D:AC:93:E1:FB:6C:E3:18:D0
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5932A6E617FEF06375B849E1CA3B3
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/qzLXijCXGbE_acwtrJPh-2zjGNA.roa
Signing time: Thu 02 Jan 2025 15:49:58 +0000
ROA not before: Thu 02 Jan 2025 15:49:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5433
IP address blocks: 91.151.176.0/20 maxlen: 20
91.151.186.0/24 maxlen: 24
91.151.189.0/24 maxlen: 24
91.151.190.0/24 maxlen: 24
2a01:8380::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:93:2a:6e:61:7f:ef:06:37:5b:84:9e:1c:a3:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab32d78a309719b13f69cc2dac93e1fb6ce318d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:20:f1:a8:6b:7a:78:7b:a7:9a:26:6b:bb:ce:
de:d1:b9:cd:58:8c:1c:fd:17:14:46:f0:04:d8:d2:
4b:94:14:55:6b:a9:69:51:60:6f:c0:ff:0a:93:60:
6f:c1:f7:52:77:a3:07:d7:3f:0a:80:e9:0c:7d:24:
75:6b:63:dd:2f:c8:90:78:3a:c0:a8:e8:04:8d:d6:
da:b0:76:71:d7:7a:ae:f5:c4:84:2b:67:b3:b6:5b:
85:46:bf:ce:2f:91:ce:ae:99:ff:a7:66:9c:d4:c7:
07:db:87:21:ee:7f:c1:74:f7:a9:6b:e2:31:e8:77:
72:35:8d:cb:12:10:ff:04:f6:44:1b:8f:a9:66:b1:
0f:b4:e5:6c:0f:56:6f:df:94:33:2b:97:2c:3b:8c:
67:5c:0b:81:0e:1c:07:3f:a3:bc:b7:6e:76:83:0f:
09:54:b5:63:e3:a8:ba:be:f3:a3:cc:0b:1c:70:e3:
d8:98:9a:f2:aa:94:54:61:d0:81:0e:07:67:5b:01:
36:39:ad:24:c0:10:ea:7b:49:c0:0d:48:47:97:e5:
15:1f:a5:fd:a1:4c:aa:f4:04:3a:e8:59:64:83:aa:
af:5e:3a:8e:6e:1a:a9:8d:ef:9f:4b:34:b2:73:dc:
9d:d7:80:86:90:03:da:08:36:95:ed:f7:6f:7a:af:
65:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:32:D7:8A:30:97:19:B1:3F:69:CC:2D:AC:93:E1:FB:6C:E3:18:D0
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/qzLXijCXGbE_acwtrJPh-2zjGNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.176.0/20
IPv6:
2a01:8380::/32
Signature Algorithm: sha256WithRSAEncryption
b8:46:17:1b:aa:82:a6:41:96:87:67:73:a7:3e:a0:03:c8:4f:
53:99:44:75:6d:3a:4a:d8:0f:0f:e3:26:f5:15:04:59:5d:cd:
ec:c2:c6:0b:95:03:2d:4b:25:35:a2:a1:d0:2f:bb:d8:fe:6e:
71:02:11:1d:a3:95:cc:eb:8c:e8:af:be:8d:59:82:a7:77:8f:
4d:c6:e2:3a:f0:1c:88:f7:e5:9c:40:c0:b2:b1:71:b7:e5:04:
52:3d:85:aa:af:de:8f:d7:e6:d5:24:d9:ae:a6:de:5e:96:7b:
d3:67:ed:96:5a:01:83:31:87:9f:5b:e5:19:b6:2e:f6:86:44:
65:57:63:22:a7:99:b5:3d:c5:fb:16:ce:99:2d:f1:49:ca:79:
c8:be:f5:e6:5d:90:24:bd:72:d5:bc:e1:57:f6:7a:c9:9a:43:
61:f3:58:11:81:06:1d:8d:61:c2:60:d1:16:65:95:26:94:5f:
25:fd:8c:70:34:66:80:2d:d5:84:78:f9:28:4e:0a:59:47:75:
74:20:a9:4a:99:7f:c7:b8:bc:d9:88:9e:84:3a:c2:9f:66:20:
37:f5:f0:e7:d1:3f:ad:42:7a:b4:9a:98:73:e9:08:fe:7b:41:
d1:75:1f:a6:e9:90:1a:f2:bc:98:c1:60:d1:89:d8:92:c4:91:
40:92:d8:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:28:30 2025 by rpki-client