Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/QNMZFgzc1IGuipObCo1W0F0a3KI.roa
File: QNMZFgzc1IGuipObCo1W0F0a3KI.roa (raw, json)
Hash identifier: wspjeJtpxVccGs7TUYeaDurUBNURQ6SaxH86WDgsNpw=
Subject key identifier: 40:D3:19:16:0C:DC:D4:81:AE:8A:93:9B:0A:8D:56:D0:5D:1A:DC:A2
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 0195A41A6C0343385DD849831DB71F3BACA8
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/QNMZFgzc1IGuipObCo1W0F0a3KI.roa
Signing time: Mon 17 Mar 2025 12:35:49 +0000
ROA not before: Mon 17 Mar 2025 12:35:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 91.188.245.0/24 maxlen: 24
176.119.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:a4:1a:6c:03:43:38:5d:d8:49:83:1d:b7:1f:3b:ac:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Mar 17 12:35:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40d319160cdcd481ae8a939b0a8d56d05d1adca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:08:0c:af:cb:be:47:b6:a3:c9:29:df:9b:22:
1a:ee:b0:c2:b5:52:26:56:68:eb:83:91:ac:50:d3:
98:d5:66:43:ea:b0:2b:db:b8:1d:34:cb:a7:a4:db:
5e:70:1b:10:0e:a2:07:f0:5e:d3:f7:20:65:00:ea:
68:e6:83:58:a9:c2:0f:c6:1e:dc:41:cd:33:1a:5d:
aa:8d:e6:aa:30:9f:69:ff:e7:e5:85:a3:a9:cd:42:
9b:03:6f:f1:b2:55:30:c8:50:a9:7c:33:24:e3:33:
fd:93:91:4f:71:a8:7d:c9:ab:33:46:10:03:62:b4:
e0:90:2f:5d:99:57:2e:89:c3:cd:cc:3e:55:46:f4:
2e:77:23:4e:3e:05:62:ce:26:ba:ea:17:e2:eb:ce:
52:6a:36:46:6d:ae:21:7a:f2:23:fa:c2:6a:8d:d8:
c6:5b:cc:c5:2b:67:39:cc:f9:9c:e4:8b:cc:c6:56:
14:25:56:f2:58:58:18:6b:8a:ef:8e:ed:85:d0:40:
17:f9:c8:40:cb:cf:2e:f9:7f:d6:f8:67:28:12:35:
07:65:b1:03:aa:c3:19:47:61:0f:f2:d4:67:3d:a0:
1a:89:b7:1c:02:fb:06:0b:53:a1:ee:ff:ed:28:eb:
bd:06:f5:1f:25:46:e5:20:da:ca:6e:ac:87:30:c9:
a4:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D3:19:16:0C:DC:D4:81:AE:8A:93:9B:0A:8D:56:D0:5D:1A:DC:A2
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/QNMZFgzc1IGuipObCo1W0F0a3KI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.245.0/24
176.119.143.0/24
Signature Algorithm: sha256WithRSAEncryption
03:6e:c4:f2:c2:06:47:ab:f0:67:c4:52:b8:5b:11:05:9a:ce:
30:31:2b:48:69:fd:12:d8:c6:f0:2d:08:17:68:7f:af:4e:8b:
ce:99:7c:61:a7:02:13:58:ee:67:fd:c2:71:6a:a0:29:a8:71:
bd:5e:0e:e4:e5:95:b8:41:ea:10:ab:57:33:14:54:fd:75:f9:
3c:d2:59:56:4c:42:e9:1a:c2:7c:3c:bf:c5:08:6f:87:a8:a1:
9e:d9:ac:c6:2c:39:bb:0f:21:e4:a5:ee:f4:f2:d7:bd:7e:56:
8c:5a:73:e9:6b:71:a9:42:1f:4e:cc:77:6e:ac:b9:77:dc:92:
a3:77:f9:02:22:43:cc:84:64:0b:f0:1c:54:0d:94:9a:56:21:
ca:01:37:92:1e:08:86:d1:e6:62:86:e4:36:fc:be:6a:65:05:
af:30:d2:42:92:a5:a9:c7:1e:49:10:2d:ce:5d:7f:bf:40:f3:
ba:79:c8:71:7c:c8:b9:df:dd:d0:15:8b:48:27:7f:69:3d:f2:
40:98:1d:58:b5:67:83:7b:ef:db:f4:6d:27:25:67:32:ee:da:
4f:72:ce:ec:45:28:54:4e:fb:87:91:c3:17:3b:79:bc:80:37:
38:88:65:a2:c5:4f:3c:78:42:b4:0e:03:0b:df:9d:09:df:d9:
6b:31:1b:c6
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZWkGmwDQzhd2EmDHbcfO6yoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNjZDc2MTU5YmZkOWUzMzc1MjNlZTkzMGYzZGYxMTFkNmJh
ZTczMDYwHhcNMjUwMzE3MTIzNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGQzMTkxNjBjZGNkNDgxYWU4YTkzOWIwYThkNTZkMDVkMWFkY2EyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQgMr8u+R7ajySnfmyIa7rDCtVIm
Vmjrg5GsUNOY1WZD6rAr27gdNMunpNtecBsQDqIH8F7T9yBlAOpo5oNYqcIPxh7c
Qc0zGl2qjeaqMJ9p/+flhaOpzUKbA2/xslUwyFCpfDMk4zP9k5FPcah9yaszRhAD
YrTgkC9dmVcuicPNzD5VRvQudyNOPgVizia66hfi685SajZGba4hevIj+sJqjdjG
W8zFK2c5zPmc5IvMxlYUJVbyWFgYa4rvju2F0EAX+chAy88u+X/W+GcoEjUHZbED
qsMZR2EP8tRnPaAaibccAvsGC1Oh7v/tKOu9BvUfJUblINrKbqyHMMmkwQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEDTGRYM3NSBroqTmwqNVtBdGtyiMB8GA1UdIwQY
MBaAFMzXYVm/2eM3Uj7pMPPfER1rrnMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgt
Zjg1ODlmNjgyNjkxLzEvUU5NWkZnemMxSUd1aXBPYkNvMVcwRjBhM0tJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9mNmFkYTEtN2U4YS00YjNlLWI3ZTgtZjg1ODlmNjgyNjkx
LzEvek5kaFdiX1o0emRTUHVrdzg5OFJIV3V1Y3dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW7z1AwQA
sHePMA0GCSqGSIb3DQEBCwUAA4IBAQADbsTywgZHq/BnxFK4WxEFms4wMStIaf0S
2MbwLQgXaH+vTovOmXxhpwITWO5n/cJxaqApqHG9Xg7k5ZW4QeoQq1czFFT9dfk8
0llWTELpGsJ8PL/FCG+HqKGe2azGLDm7DyHkpe708te9flaMWnPpa3GpQh9OzHdu
rLl33JKjd/kCIkPMhGQL8BxUDZSaViHKATeSHgiG0eZihuQ2/L5qZQWvMNJCkqWp
xx5JEC3OXX+/QPO6echxfMi5393QFYtIJ39pPfJAmB1YtWeDe+/b9G0nJWcy7tpP
cs7sRShUTvuHkcMXO3m8gDc4iGWixU88eEK0DgML350J39lrMRvG
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:53:30 2025 by rpki-client