Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/b_UNR9Xj_ycfuOSMA48F_QSRqts.roa
File: b_UNR9Xj_ycfuOSMA48F_QSRqts.roa (raw, json)
Hash identifier: V/FK04zH2Za3Nwu+0PjyuAuPUrWk9vHEnkwAOnyhoAs=
Subject key identifier: 6F:F5:0D:47:D5:E3:FF:27:1F:B8:E4:8C:03:8F:05:FD:04:91:AA:DB
Certificate issuer: /CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Certificate serial: 01942067E9944CFE6166BA67C1E671E67502
Authority key identifier: 91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/b_UNR9Xj_ycfuOSMA48F_QSRqts.roa
Signing time: Wed 01 Jan 2025 05:47:48 +0000
ROA not before: Wed 01 Jan 2025 05:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 30823
IP address blocks: 87.237.52.0/22 maxlen: 24
87.237.52.0/24 maxlen: 24
87.237.53.0/24 maxlen: 24
87.237.54.0/24 maxlen: 24
87.237.55.0/24 maxlen: 24
195.62.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e9:94:4c:fe:61:66:ba:67:c1:e6:71:e6:75:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91d0c78c309a3e99dc9ab74f2cdc0484859e7530
Validity
Not Before: Jan 1 05:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ff50d47d5e3ff271fb8e48c038f05fd0491aadb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:83:17:16:ba:7d:92:cb:09:ca:ba:e4:f2:4e:
1f:3f:c4:07:4c:55:63:bd:f2:67:3c:9f:81:98:74:
91:55:56:98:9b:dc:e0:9e:4b:ea:de:f2:cc:45:ea:
a3:12:66:bb:d9:83:26:e1:8b:14:68:36:2e:f0:67:
83:46:00:41:8f:98:10:4a:8b:0a:22:93:9f:6e:fc:
a1:32:ee:0e:33:06:78:d3:7d:12:e7:70:7c:90:a1:
47:6a:ae:be:29:1d:c3:fb:dd:e6:1b:ed:02:d0:6c:
0d:67:3e:34:73:0b:3c:a5:f9:76:77:f1:b6:b1:f9:
5d:08:2d:be:e9:ed:14:0f:29:eb:1d:5a:02:83:f7:
de:ec:9b:5a:f3:c8:71:8c:98:58:0d:6b:20:a4:32:
92:74:85:d6:f6:ae:e4:4c:93:cc:3a:33:23:df:3d:
b0:40:05:a7:47:aa:5f:d1:b1:91:9e:f5:82:88:03:
33:05:5f:54:b3:cd:1c:df:fe:1e:8d:d5:05:8b:ea:
09:9a:47:9b:a9:1f:8d:4d:a3:58:82:9b:a6:97:15:
40:30:f8:9e:e6:73:9e:ea:83:17:12:77:b1:21:db:
6d:d9:a0:0b:ce:ff:c1:eb:da:dd:89:94:0d:92:56:
46:bc:ba:5c:7d:f0:ae:ad:2e:97:db:5e:19:10:97:
fd:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:F5:0D:47:D5:E3:FF:27:1F:B8:E4:8C:03:8F:05:FD:04:91:AA:DB
X509v3 Authority Key Identifier:
keyid:91:D0:C7:8C:30:9A:3E:99:DC:9A:B7:4F:2C:DC:04:84:85:9E:75:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kdDHjDCaPpncmrdPLNwEhIWedTA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/b_UNR9Xj_ycfuOSMA48F_QSRqts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/293a2f-3997-497f-9ef1-4852c8ff8af2/1/kdDHjDCaPpncmrdPLNwEhIWedTA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.237.52.0/22
195.62.33.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:44:b8:65:db:e0:79:08:31:d7:1a:4a:8c:3c:5c:75:d5:03:
e1:bf:ba:15:9c:78:9a:0c:41:e1:ee:58:15:87:ab:06:e0:3a:
5b:ae:a2:59:23:86:00:3b:09:fb:42:e0:cb:b4:26:52:36:bd:
50:c4:81:0d:6c:84:28:58:bf:c0:af:02:77:29:25:51:d6:c1:
b7:62:b4:43:39:3a:89:32:8a:2c:04:b1:a5:eb:69:32:20:54:
ed:a5:c4:45:25:21:2e:c6:f1:6e:6a:90:a3:8e:33:77:45:06:
a5:05:d7:f7:de:fc:ad:1b:f4:99:ca:c0:f0:0c:38:65:64:1f:
19:7f:04:1f:02:45:4f:f5:30:ec:19:48:9e:49:28:c9:d8:4a:
41:6a:3a:19:f7:24:96:2e:7e:08:b1:41:47:68:82:54:34:f3:
7d:8e:c4:d4:aa:3d:16:c5:59:e6:bb:8f:99:4c:52:9c:6f:99:
62:23:5d:d4:fb:18:cd:d3:11:74:96:f7:81:ec:2d:f2:c7:79:
57:de:d2:a7:ee:0d:4c:61:9a:73:00:a4:84:bf:3f:6e:e3:a3:
d3:c2:a9:f5:0a:0c:c1:f5:dc:5b:39:b1:25:2e:4a:52:67:a1:
04:b7:3a:a9:28:31:4c:48:b8:f4:95:3f:71:d4:ce:72:74:03:
df:78:4a:d6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQgZ+mUTP5hZrpnweZx5nUCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxZDBjNzhjMzA5YTNlOTlkYzlhYjc0ZjJjZGMwNDg0ODU5
ZTc1MzAwHhcNMjUwMTAxMDU0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmY1MGQ0N2Q1ZTNmZjI3MWZiOGU0OGMwMzhmMDVmZDA0OTFhYWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYMXFrp9kssJyrrk8k4fP8QHTFVj
vfJnPJ+BmHSRVVaYm9zgnkvq3vLMReqjEma72YMm4YsUaDYu8GeDRgBBj5gQSosK
IpOfbvyhMu4OMwZ4030S53B8kKFHaq6+KR3D+93mG+0C0GwNZz40cws8pfl2d/G2
sfldCC2+6e0UDynrHVoCg/fe7Jta88hxjJhYDWsgpDKSdIXW9q7kTJPMOjMj3z2w
QAWnR6pf0bGRnvWCiAMzBV9Us80c3/4ejdUFi+oJmkebqR+NTaNYgpumlxVAMPie
5nOe6oMXEnexIdtt2aALzv/B69rdiZQNklZGvLpcffCurS6X214ZEJf9QQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFG/1DUfV4/8nH7jkjAOPBf0EkarbMB8GA1UdIwQY
MBaAFJHQx4wwmj6Z3Jq3TyzcBISFnnUwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEt
NDg1MmM4ZmY4YWYyLzEvYl9VTlI5WGpfeWNmdU9TTUE0OEZfUVNScXRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOS8yOTNhMmYtMzk5Ny00OTdmLTllZjEtNDg1MmM4ZmY4YWYy
LzEva2RESGpEQ2FQcG5jbXJkUExOd0VoSVdlZFRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCV+00AwQA
wz4hMA0GCSqGSIb3DQEBCwUAA4IBAQCaRLhl2+B5CDHXGkqMPFx11QPhv7oVnHia
DEHh7lgVh6sG4DpbrqJZI4YAOwn7QuDLtCZSNr1QxIENbIQoWL/ArwJ3KSVR1sG3
YrRDOTqJMoosBLGl62kyIFTtpcRFJSEuxvFuapCjjjN3RQalBdf33vytG/SZysDw
DDhlZB8ZfwQfAkVP9TDsGUieSSjJ2EpBajoZ9ySWLn4IsUFHaIJUNPN9jsTUqj0W
xVnmu4+ZTFKcb5liI13U+xjN0xF0lveB7C3yx3lX3tKn7g1MYZpzAKSEvz9u46PT
wqn1CgzB9dxbObElLkpSZ6EEtzqpKDFMSLj0lT9x1M5ydAPfeErW
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:25 2025 by rpki-client