Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/MQu_fYJw4lXX2Xn8sHwRNMr-YGA.roa
File: MQu_fYJw4lXX2Xn8sHwRNMr-YGA.roa (raw, json)
Hash identifier: d1eqowaSo8oO0AxZaKYVdAdvtyaapqXssLrJg3l8Fgo=
Subject key identifier: 31:0B:BF:7D:82:70:E2:55:D7:D9:79:FC:B0:7C:11:34:CA:FE:60:60
Certificate issuer: /CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Certificate serial: 018FFE1E93B574EC9426385ABFAE6A130244
Authority key identifier: 34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/MQu_fYJw4lXX2Xn8sHwRNMr-YGA.roa
Signing time: Sun 09 Jun 2024 17:49:27 +0000
ROA not before: Sun 09 Jun 2024 17:49:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 932
IP address blocks: 91.217.162.0/24 maxlen: 24
2a12:a380::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:fe:1e:93:b5:74:ec:94:26:38:5a:bf:ae:6a:13:02:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347b487848fff63533d87c324ecc51c2c3ea2adb
Validity
Not Before: Jun 9 17:49:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=310bbf7d8270e255d7d979fcb07c1134cafe6060
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:b8:f3:d9:d6:5d:39:42:3a:ce:e8:22:4d:
31:63:75:df:c1:54:fe:c7:b0:d0:d0:c7:7e:06:bb:
66:d5:b5:b5:44:50:90:19:42:7a:49:21:67:dd:04:
d3:f8:2d:cb:30:b7:14:cb:79:51:cc:41:79:1f:13:
cb:25:b6:40:38:28:6e:62:a1:35:83:03:95:0a:94:
9b:96:69:5b:93:ee:64:2d:47:51:51:54:06:e0:10:
49:2a:27:b7:42:e8:88:ba:c3:8c:02:00:02:83:9b:
9b:1d:0b:0e:8d:db:42:ad:88:cf:39:b3:16:27:94:
19:c1:26:3d:7d:e2:f2:34:40:84:e5:07:85:7b:16:
d0:2c:07:cb:dc:55:b4:67:73:53:e5:c8:37:36:9f:
47:96:e5:95:54:d7:b4:05:98:26:43:ae:d5:17:b6:
fe:28:ba:5b:8f:79:94:82:ba:2f:46:6f:29:e1:41:
fb:07:ba:61:82:1c:dd:dd:f7:f8:df:31:99:fe:e7:
86:4b:2f:85:ed:18:5b:89:29:0d:f7:55:4a:51:2b:
7d:ed:5f:7c:0a:ed:6e:65:bf:e9:3c:dd:1f:e4:c2:
bd:95:bb:42:71:db:7c:ed:50:23:88:aa:b5:6b:db:
46:67:18:b6:2a:5d:99:92:8d:8c:0c:47:97:e6:17:
f2:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0B:BF:7D:82:70:E2:55:D7:D9:79:FC:B0:7C:11:34:CA:FE:60:60
X509v3 Authority Key Identifier:
keyid:34:7B:48:78:48:FF:F6:35:33:D8:7C:32:4E:CC:51:C2:C3:EA:2A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHtIeEj_9jUz2HwyTsxRwsPqKts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/MQu_fYJw4lXX2Xn8sHwRNMr-YGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bc7122-4d1b-46a7-aecb-230b3b72a175/1/NHtIeEj_9jUz2HwyTsxRwsPqKts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.162.0/24
IPv6:
2a12:a380::/29
Signature Algorithm: sha256WithRSAEncryption
26:f9:06:a4:b5:dc:f2:16:04:9a:a1:9e:ba:51:37:59:6b:7f:
9d:38:51:46:3d:82:d1:a5:1a:90:c6:9a:0e:c9:72:13:86:91:
5c:0c:6c:a5:17:b3:ee:4a:eb:46:af:57:c7:ab:e1:ed:99:4a:
2a:ca:4a:bf:ee:87:87:4a:9c:b4:22:de:6c:df:a5:39:76:04:
5d:3e:17:fa:94:af:19:1a:dc:ae:fd:bd:5e:b7:05:86:eb:5c:
d3:04:d1:9a:11:73:9a:a5:6b:33:ca:01:6d:08:4e:3b:3f:45:
0c:e9:e6:6c:39:9e:9f:9c:09:21:17:64:bc:89:7f:18:e7:bc:
d4:1c:13:d4:ba:11:80:aa:34:e9:48:63:da:6a:30:17:8e:79:
57:26:c4:69:ec:85:b0:ab:56:c5:2d:e1:46:e2:ea:18:ad:d2:
bc:d0:f1:b9:a9:1d:5b:e0:b0:86:79:02:35:7b:35:5b:2d:03:
fe:50:63:51:7b:5b:17:c2:e6:d1:39:3a:00:a4:df:dc:7d:8f:
70:2f:4e:7c:3a:6e:01:48:e9:ba:e5:f9:c8:a1:4c:91:3c:04:
96:0c:42:f7:7d:ca:eb:8d:1a:3d:2c:e9:4f:d1:71:6b:c1:01:
e2:03:36:99:c9:14:a3:fe:b3:a2:57:92:27:e1:11:00:1b:b6:
42:0f:33:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:20:59 2025 by rpki-client