Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/dqQe6ybqV0qmT390DBcD7VPONS0.roa
File: dqQe6ybqV0qmT390DBcD7VPONS0.roa (raw, json)
Hash identifier: br+yKiw2k75pdH69kTbUWurmUqz+X+Lf/SGTiBES25g=
Subject key identifier: 76:A4:1E:EB:26:EA:57:4A:A6:4F:7F:74:0C:17:03:ED:53:CE:35:2D
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 0193AFC4129413CE838FE85E45C019B5504B
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/dqQe6ybqV0qmT390DBcD7VPONS0.roa
Signing time: Tue 10 Dec 2024 08:51:22 +0000
ROA not before: Tue 10 Dec 2024 08:51:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48126
IP address blocks: 91.229.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:af:c4:12:94:13:ce:83:8f:e8:5e:45:c0:19:b5:50:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Dec 10 08:51:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=76a41eeb26ea574aa64f7f740c1703ed53ce352d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:4d:0f:0e:f4:6f:0a:f8:90:5f:39:75:2c:ec:
73:57:79:b7:f5:cf:4a:bd:78:1f:8f:a2:07:e1:1c:
73:2b:6a:b7:da:97:d8:3a:69:28:2b:ad:21:c5:3a:
4e:ae:a6:62:bd:47:26:54:63:42:15:d9:bb:0e:51:
0e:b9:85:f1:8d:2b:aa:a6:bf:e0:b6:4c:7c:c9:bf:
af:6d:66:f0:83:41:1f:0d:0e:cc:d9:ed:79:c4:db:
bc:fc:b0:46:dd:d1:0a:e3:73:2a:5e:65:54:a9:c9:
6d:5e:83:40:bd:fe:08:2f:06:37:1c:64:04:e9:87:
6e:85:87:1a:83:8c:f1:52:ce:7c:b3:a0:8e:91:3b:
56:c0:f5:9f:15:97:f9:5a:30:a3:08:34:db:63:30:
bf:ec:4d:67:48:85:d1:dd:87:f5:64:2c:d8:66:e4:
3d:96:c8:96:42:39:4e:fb:2c:a0:76:ee:bb:e3:34:
76:bc:2a:6d:5f:fb:c9:c9:6a:7a:3d:db:f8:08:9d:
41:13:2a:eb:32:78:22:94:10:44:75:c3:13:4c:ad:
df:df:ef:38:11:6a:dc:30:26:dd:53:cd:d1:d0:44:
21:41:49:f8:34:88:e9:db:ab:12:5e:da:f1:b6:7d:
18:f9:6f:9a:f2:c8:93:54:c2:e2:39:1c:21:cc:11:
2c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A4:1E:EB:26:EA:57:4A:A6:4F:7F:74:0C:17:03:ED:53:CE:35:2D
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/dqQe6ybqV0qmT390DBcD7VPONS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.248.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ce:e3:22:0f:8f:b2:5b:ba:dd:f8:42:81:87:5f:21:e7:dd:
71:00:1f:79:43:4a:03:44:15:95:d2:cd:55:53:ce:a2:f8:9c:
a1:77:47:4a:1d:8f:5f:e2:a1:b8:9b:ce:0a:39:15:9e:97:af:
a7:c8:e0:5c:e4:ce:dd:e7:58:ca:0b:d4:54:1d:e2:50:78:31:
bf:b3:be:06:04:97:07:2b:a8:40:81:d0:5c:86:6e:49:df:d0:
6b:29:8b:9a:a2:f4:11:9e:ea:cd:d3:29:8a:04:f8:31:b9:a2:
bc:f0:00:4a:87:75:1f:13:82:7b:3b:5a:bc:96:c2:6d:58:18:
cb:cc:21:e8:f8:05:b7:92:b7:cc:d4:87:2a:62:8f:1e:23:ce:
26:3d:ca:cc:71:fc:24:f2:f0:73:94:10:53:45:75:45:64:23:
38:d0:65:1c:cb:4b:ae:8e:32:08:5f:e1:47:9f:bb:77:99:68:
a7:e3:ed:b0:fb:f8:6a:ee:a2:cb:d6:bf:34:20:a0:24:58:62:
d6:17:53:0a:f3:7f:67:fe:64:9c:22:32:d9:89:46:8d:16:e1:
ea:2e:5f:1f:bb:fb:4c:aa:92:ba:8a:d7:d0:05:86:4f:f2:28:
0b:d7:1c:66:44:82:be:7e:ac:2c:93:9c:c9:06:d3:e6:dd:fa:
18:32:7d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:48:06 2025 by rpki-client