Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/866015-28e9-4898-98ac-a35d51d6dc54/1/KQy_23odaHGwIJphxWVEsYYZbJ4.roa
File: KQy_23odaHGwIJphxWVEsYYZbJ4.roa (raw, json)
Hash identifier: 9mMxYooGlJbRZQe5Jrya+PQeh1e1P7XgOu9dzJ9MMmA=
Subject key identifier: 29:0C:BF:DB:7A:1D:68:71:B0:20:9A:61:C5:65:44:B1:86:19:6C:9E
Certificate issuer: /CN=f537b74a94fc472561ac7973ede288842fcf0044
Certificate serial: 018572C38D07E34DE860F4067E291259185F
Authority key identifier: F5:37:B7:4A:94:FC:47:25:61:AC:79:73:ED:E2:88:84:2F:CF:00:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Te3SpT8RyVhrHlz7eKIhC_PAEQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/866015-28e9-4898-98ac-a35d51d6dc54/1/KQy_23odaHGwIJphxWVEsYYZbJ4.roa
Signing time: Mon 02 Jan 2023 13:54:56 +0000
ROA not before: Mon 02 Jan 2023 13:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39232
IP address blocks: 91.242.0.0/23 maxlen: 23
91.242.2.0/23 maxlen: 23
91.242.0.0/19 maxlen: 19
91.242.0.0/20 maxlen: 20
91.242.4.0/23 maxlen: 23
91.242.10.0/23 maxlen: 23
91.242.9.0/24 maxlen: 24
91.242.8.0/24 maxlen: 24
91.242.7.0/24 maxlen: 24
91.242.6.0/24 maxlen: 24
91.242.14.0/24 maxlen: 24
91.242.12.0/23 maxlen: 23
91.242.16.0/20 maxlen: 20
91.242.17.0/24 maxlen: 24
91.242.16.0/24 maxlen: 24
91.242.15.0/24 maxlen: 24
91.242.24.0/24 maxlen: 24
91.242.20.0/22 maxlen: 22
91.242.19.0/24 maxlen: 24
91.242.18.0/24 maxlen: 24
91.242.28.0/23 maxlen: 23
91.242.27.0/24 maxlen: 24
91.242.26.0/23 maxlen: 23
91.242.26.0/24 maxlen: 24
91.242.25.0/24 maxlen: 24
91.242.31.0/24 maxlen: 24
91.242.30.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:c3:8d:07:e3:4d:e8:60:f4:06:7e:29:12:59:18:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f537b74a94fc472561ac7973ede288842fcf0044
Validity
Not Before: Jan 2 13:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=290cbfdb7a1d6871b0209a61c56544b186196c9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:82:cd:79:0d:01:2f:91:c0:7f:e3:91:72:9e:
e4:5b:2e:35:ca:31:12:ef:2a:a9:9f:e3:f5:79:c7:
98:72:ee:fd:b9:9f:bb:40:06:f5:72:86:5f:06:54:
43:fd:6e:58:41:0c:30:60:e1:6a:62:32:ad:c0:bf:
7c:2c:71:96:e4:fa:19:0d:00:e1:ac:88:64:f8:ac:
fb:b3:ce:a5:ac:3e:f0:ac:2c:83:dc:b4:d8:ac:bc:
98:c0:75:c6:f7:f6:18:d5:ca:56:9c:d5:9b:4e:d5:
eb:f7:3d:7f:4e:0d:61:0f:7b:2b:5d:b2:39:22:02:
58:a8:2c:00:d7:aa:1e:88:8d:cb:b3:2a:88:d1:97:
09:76:88:49:e0:1e:55:83:62:a5:5a:b8:67:53:18:
a5:d2:ec:38:d7:e9:83:7c:e9:3b:84:11:01:5d:58:
c3:d5:03:a5:88:f9:a6:90:82:44:3e:f8:04:88:1e:
19:19:2b:fc:b5:70:77:01:ef:8a:6f:95:6a:a4:43:
3d:4f:fb:95:af:e6:df:10:41:16:13:a8:69:65:bb:
b6:09:c1:78:0f:41:64:0a:1f:2f:b5:f7:a0:fb:00:
60:a1:84:16:2e:7a:85:99:46:f9:4c:3c:80:df:f6:
15:c5:1f:6e:66:64:1a:26:11:2b:5d:72:70:22:c0:
71:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:0C:BF:DB:7A:1D:68:71:B0:20:9A:61:C5:65:44:B1:86:19:6C:9E
X509v3 Authority Key Identifier:
keyid:F5:37:B7:4A:94:FC:47:25:61:AC:79:73:ED:E2:88:84:2F:CF:00:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Te3SpT8RyVhrHlz7eKIhC_PAEQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/866015-28e9-4898-98ac-a35d51d6dc54/1/KQy_23odaHGwIJphxWVEsYYZbJ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/866015-28e9-4898-98ac-a35d51d6dc54/1/9Te3SpT8RyVhrHlz7eKIhC_PAEQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.0.0/19
Signature Algorithm: sha256WithRSAEncryption
55:b6:47:7e:49:a6:52:90:38:dc:5e:41:c9:94:53:4f:9a:2a:
e8:2c:66:84:e8:8b:5b:b6:fe:3e:e4:75:bd:f9:7e:8b:25:55:
34:50:22:9d:91:fd:8b:a3:ff:a1:35:d5:f4:cb:cc:5f:73:85:
06:a3:41:81:f6:50:d6:8e:63:db:c5:9e:d6:0a:ea:4d:fd:66:
3f:03:48:72:c0:ff:a6:42:3a:da:1e:e4:b7:6a:f6:bf:f0:85:
4c:b2:98:16:57:04:17:ff:cb:4d:3e:23:d5:c8:8b:a4:07:b1:
35:bd:9a:67:5c:ed:d8:61:0c:14:31:e1:b2:f7:7a:c7:19:b0:
43:f2:47:3e:9a:ac:0c:5f:0f:fb:1f:3c:fd:04:8a:ce:b7:48:
98:bb:9c:51:78:42:c5:2d:3d:c1:89:80:9f:d2:50:64:21:d6:
a9:35:09:1d:a8:3e:4e:a7:5f:eb:73:ed:a8:78:cc:72:55:6e:
6a:aa:9f:02:73:7c:fb:a1:06:f4:10:53:aa:1d:86:7b:f1:68:
48:75:2a:bd:8f:d2:30:24:36:31:7d:51:bb:d4:ca:77:e8:63:
1c:fb:dd:bd:90:f4:1c:70:c3:ea:a7:ab:88:3b:48:5d:50:1a:
85:9c:a4:21:4f:e3:a6:60:20:a1:21:08:05:1c:48:1a:aa:65:
87:69:4a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:49:12 2025 by rpki-client