Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/1-QG4tCncv0FTtCHqg5B2GIvzr7Y.roa
File: 1-QG4tCncv0FTtCHqg5B2GIvzr7Y.roa (raw, json)
Hash identifier: Y2rS+2UdPK85e7sE5yCklBS//u+UrJBVKAmv+QqSGio=
Subject key identifier: F9:01:B8:B4:29:DC:BF:41:53:B4:21:EA:83:90:76:18:8B:F3:AF:B6
Certificate issuer: /CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Certificate serial: 019425FDA29A37420D79A34A02351937DC5B
Authority key identifier: 82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/1-QG4tCncv0FTtCHqg5B2GIvzr7Y.roa
Signing time: Thu 02 Jan 2025 07:49:26 +0000
ROA not before: Thu 02 Jan 2025 07:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 12565
IP address blocks: 91.211.164.0/22 maxlen: 22
91.211.164.0/24 maxlen: 24
91.211.165.0/24 maxlen: 24
91.211.166.0/24 maxlen: 24
91.211.167.0/24 maxlen: 24
185.76.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a2:9a:37:42:0d:79:a3:4a:02:35:19:37:dc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82e5fbc3ea525a78c630c4da864ba9a60e199bff
Validity
Not Before: Jan 2 07:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f901b8b429dcbf4153b421ea839076188bf3afb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:af:3b:9e:06:dc:66:16:37:0e:19:f6:0e:0d:
ea:74:49:0f:d9:65:d4:8e:47:68:c5:0e:ae:b1:d6:
81:07:18:84:18:52:b9:c0:cb:b3:ca:85:98:cf:53:
23:97:73:b2:95:51:7c:dd:33:48:cd:72:22:a2:5e:
2b:94:89:6a:5d:9a:22:d4:24:89:66:de:1a:3d:6e:
14:bb:0b:7a:39:45:d9:15:37:b4:2a:fd:c0:63:26:
ef:83:ab:3a:a1:54:8c:b1:d9:ef:a4:ce:36:54:67:
29:b1:ed:f3:f1:02:a5:be:4a:7c:94:5e:aa:85:4b:
af:32:50:9b:dd:10:11:28:5e:65:97:f1:0f:cd:47:
a9:78:ef:f6:1c:b3:b6:2b:6a:6f:ec:1a:37:c6:13:
3f:9d:5e:9b:a3:2e:ad:63:16:d1:b3:fd:1b:98:de:
c7:e2:6a:12:dd:27:0f:6e:a9:59:17:a5:2e:9f:a0:
f7:c8:0f:f6:61:0a:61:4f:cb:73:bd:d4:7e:bc:8b:
cd:12:f5:05:cc:a9:e7:70:42:ac:8b:11:2b:c7:1f:
58:04:9f:45:57:2d:93:1d:13:b3:db:59:df:04:20:
9f:f8:e7:a2:57:d9:ce:53:d5:58:20:65:3c:06:67:
f6:ce:e0:be:24:26:79:16:20:92:86:70:02:d5:dc:
5a:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:01:B8:B4:29:DC:BF:41:53:B4:21:EA:83:90:76:18:8B:F3:AF:B6
X509v3 Authority Key Identifier:
keyid:82:E5:FB:C3:EA:52:5A:78:C6:30:C4:DA:86:4B:A9:A6:0E:19:9B:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/guX7w-pSWnjGMMTahkuppg4Zm_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/1-QG4tCncv0FTtCHqg5B2GIvzr7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/2ece26-1781-455e-80b3-93dd6507488e/1/guX7w-pSWnjGMMTahkuppg4Zm_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.164.0/22
185.76.24.0/24
Signature Algorithm: sha256WithRSAEncryption
80:10:ad:b3:d4:6a:8a:7a:32:bd:db:7a:76:67:6b:f0:4e:b8:
21:3d:bc:9c:8e:a2:52:9c:68:e6:de:ad:39:c7:47:75:0d:35:
a9:ed:fd:4d:c9:49:49:e1:b7:57:9d:e2:0b:cf:37:bd:27:b3:
da:39:cb:8e:c0:3a:f9:a8:5f:ed:ca:98:5a:fa:34:f5:87:49:
c1:5b:35:5d:9e:45:f6:d2:63:b5:a5:da:65:35:71:40:2e:64:
27:94:3f:40:0c:2f:68:82:d9:2d:00:7a:06:82:96:b8:26:76:
46:f4:2c:35:0e:28:23:5a:99:1d:df:98:87:79:8c:f2:31:0b:
91:e1:36:c3:03:98:c4:0b:f5:ba:89:0c:13:f8:a3:07:0e:fc:
bc:1d:8f:2a:ad:15:fa:b0:d3:b3:32:ca:8e:86:12:cf:32:af:
65:02:fc:9d:7e:3b:b8:1d:5e:d8:05:fe:ca:af:97:b2:a3:70:
00:72:d6:ac:ed:1b:2d:71:e6:fe:9a:ff:bb:b4:2a:3c:c4:77:
3d:d8:73:dc:3c:64:f3:88:4a:95:18:ef:f6:87:b4:d5:6b:81:
33:84:57:d9:65:92:52:4f:d5:1f:b7:0c:45:dd:c9:81:7e:61:
22:b3:bb:cf:a6:64:16:e9:11:c2:d4:21:0d:60:34:80:04:47:
d6:85:50:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:58:17 2025 by rpki-client