Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/918257-5feb-4205-9174-f7d74f321ea4/1/m-QJV-GleJOjgwrLjVsim-NEw9U.roa
File: m-QJV-GleJOjgwrLjVsim-NEw9U.roa (raw, json)
Hash identifier: SGRejXPzOIpG6YloQ/e66h1i6ozRhsNX4Jd8bp8bjCc=
Subject key identifier: 9B:E4:09:57:E1:A5:78:93:A3:83:0A:CB:8D:5B:22:9B:E3:44:C3:D5
Certificate issuer: /CN=a63b17080cf7f2a991e9294c1ddb70edb54174ef
Certificate serial: 01882086B1E1FF23FA723CB78912629E10A3
Authority key identifier: A6:3B:17:08:0C:F7:F2:A9:91:E9:29:4C:1D:DB:70:ED:B5:41:74:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjsXCAz38qmR6SlMHdtw7bVBdO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/918257-5feb-4205-9174-f7d74f321ea4/1/m-QJV-GleJOjgwrLjVsim-NEw9U.roa
Signing time: Mon 15 May 2023 17:47:58 +0000
ROA not before: Mon 15 May 2023 17:47:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 91.242.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:20:86:b1:e1:ff:23:fa:72:3c:b7:89:12:62:9e:10:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63b17080cf7f2a991e9294c1ddb70edb54174ef
Validity
Not Before: May 15 17:47:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9be40957e1a57893a3830acb8d5b229be344c3d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:18:19:70:f3:44:d7:43:7a:1c:cc:fd:c4:8e:
a6:65:c5:9c:f6:88:2a:bd:bd:a6:00:0f:e7:9c:e5:
7d:76:df:91:25:38:a0:71:2f:eb:18:74:c0:38:b1:
c1:69:30:2b:17:40:6f:26:27:bd:82:4a:22:4d:b1:
f2:da:06:f6:95:b5:c9:ec:75:f5:18:9d:4f:24:0a:
c2:f2:fa:9c:f1:c0:01:68:94:19:14:e7:4f:d9:82:
f5:ca:8d:08:a1:09:31:cf:f4:d6:5e:14:e8:86:84:
f4:38:75:17:39:b7:0f:a5:59:39:d6:e9:35:91:96:
4a:ed:2f:58:1f:fa:d0:26:73:a0:57:67:71:57:e8:
82:a2:b9:39:8a:f1:f8:43:90:1b:ff:36:22:81:71:
10:a6:fe:5d:d7:b4:48:f4:08:32:ee:2f:f3:5d:3d:
96:19:81:09:27:bf:70:3a:9f:5a:cb:d0:21:e9:b4:
76:f9:50:3d:30:97:5d:e3:33:3e:eb:90:77:b7:91:
33:53:5b:d7:6c:b8:1a:bd:7e:3c:4e:f6:e0:05:84:
75:92:b8:6a:b7:cc:ee:89:e3:ca:99:e3:7f:10:a5:
09:0e:18:07:2b:f1:52:c3:21:65:57:36:63:f4:cf:
24:1c:9c:cc:6c:8a:ea:97:c5:6a:72:90:84:49:fc:
9a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E4:09:57:E1:A5:78:93:A3:83:0A:CB:8D:5B:22:9B:E3:44:C3:D5
X509v3 Authority Key Identifier:
keyid:A6:3B:17:08:0C:F7:F2:A9:91:E9:29:4C:1D:DB:70:ED:B5:41:74:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjsXCAz38qmR6SlMHdtw7bVBdO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/918257-5feb-4205-9174-f7d74f321ea4/1/m-QJV-GleJOjgwrLjVsim-NEw9U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/918257-5feb-4205-9174-f7d74f321ea4/1/pjsXCAz38qmR6SlMHdtw7bVBdO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.233.0/24
Signature Algorithm: sha256WithRSAEncryption
83:97:e0:1b:c8:9d:8c:dd:cc:fb:c8:35:3d:52:05:07:53:3f:
d6:d4:a3:a1:cd:1f:07:3d:f4:c5:d6:0d:1b:4e:bc:26:64:0a:
13:3b:56:d9:17:b8:91:60:e7:f3:78:0a:0f:ac:15:46:6b:05:
92:fb:c1:b3:1d:be:92:fd:b7:2b:b6:fa:da:6c:24:9e:d4:6d:
d6:2d:85:62:68:64:72:1e:0f:43:70:40:75:fb:0f:e0:76:69:
5f:ae:59:13:32:5a:55:db:fe:c5:89:88:85:da:27:cf:94:b2:
5e:0c:77:93:36:74:00:6e:47:12:96:55:19:74:3e:6c:dd:22:
53:27:3b:0f:34:b0:bf:c8:37:95:02:c7:a6:92:1f:89:4d:26:
b5:b2:1f:9e:1a:07:7e:13:b1:13:a8:da:f1:aa:1e:99:11:7d:
0d:34:23:9f:8c:da:98:8d:93:b7:91:9d:00:d8:10:b3:17:e4:
6b:18:bb:e8:35:c6:c9:08:33:9d:7f:c1:ce:f6:1d:56:6d:c0:
79:e5:26:b3:14:5f:8a:d3:f2:90:95:3d:f3:cf:ba:60:a6:d2:
95:d8:43:65:21:04:d1:a3:73:e3:12:ed:38:19:0b:c8:63:88:
af:90:1c:7a:98:8f:57:48:99:ed:37:4b:ee:d7:0a:7c:eb:03:
96:51:53:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 02:16:27 2025 by rpki-client