Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/QdF_t5GM6hFZDI7Ycz1kPbhRE0s.roa
File: QdF_t5GM6hFZDI7Ycz1kPbhRE0s.roa (raw, json)
Hash identifier: gZA+5nFU0e3J+dZOb0p/gBtvIfB/51rVDEOTe4nlfP8=
Subject key identifier: 41:D1:7F:B7:91:8C:EA:11:59:0C:8E:D8:73:3D:64:3D:B8:51:13:4B
Certificate issuer: /CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Certificate serial: 019426D95BAABAD5162B72FD6ABDE0374F9C
Authority key identifier: 89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/QdF_t5GM6hFZDI7Ycz1kPbhRE0s.roa
Signing time: Thu 02 Jan 2025 11:49:26 +0000
ROA not before: Thu 02 Jan 2025 11:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42926
IP address blocks: 91.216.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:5b:aa:ba:d5:16:2b:72:fd:6a:bd:e0:37:4f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89939ff1293b7e22779fc55b4c83f13e52e94428
Validity
Not Before: Jan 2 11:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=41d17fb7918cea11590c8ed8733d643db851134b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:82:60:60:61:c6:32:80:85:3a:cd:20:ef:74:
d0:c2:90:75:33:b5:be:6b:a1:49:07:a2:81:6b:48:
e5:ff:08:4d:6c:15:a0:48:7b:4d:df:b2:1c:b8:bd:
5c:fb:34:33:97:bd:58:10:e1:cf:9a:9f:74:87:88:
ec:bc:53:71:d9:ad:af:c2:8a:db:90:d8:24:5b:d1:
08:be:35:0d:92:3a:8c:0f:62:22:54:e4:6f:06:8d:
90:ef:65:78:bf:d4:83:f6:af:fe:9c:f3:08:49:bf:
6e:9e:5e:c8:f3:4f:e4:91:f9:5e:33:21:59:ed:03:
5f:c7:2a:16:41:50:ff:2e:6c:a9:9b:63:91:d9:76:
64:cf:7a:4e:d8:b6:34:d4:ff:21:40:f6:46:86:42:
7f:b2:ec:6f:86:3c:fb:a8:5d:3a:59:a0:29:22:9d:
25:45:f4:39:0e:8e:31:1f:00:b7:5e:5d:17:15:c2:
e1:72:c1:db:58:b9:8b:e9:dd:ec:a3:36:88:1d:03:
25:57:3f:01:14:68:be:5f:df:cd:b9:2b:a3:58:c0:
54:25:3b:9f:b3:24:b3:42:2a:b2:89:0e:9d:a2:9c:
cd:a9:e7:b4:6f:d1:c1:f2:39:68:5e:44:4c:69:34:
ec:74:d0:50:2e:2a:d3:09:be:36:80:38:a5:05:43:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D1:7F:B7:91:8C:EA:11:59:0C:8E:D8:73:3D:64:3D:B8:51:13:4B
X509v3 Authority Key Identifier:
keyid:89:93:9F:F1:29:3B:7E:22:77:9F:C5:5B:4C:83:F1:3E:52:E9:44:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/QdF_t5GM6hFZDI7Ycz1kPbhRE0s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/a10ddf-bb6e-4bb0-beff-0e68000b3537/1/iZOf8Sk7fiJ3n8VbTIPxPlLpRCg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.119.0/24
Signature Algorithm: sha256WithRSAEncryption
87:ff:8d:3f:71:26:35:f3:06:c4:80:63:10:a8:33:95:21:fd:
b6:30:97:4c:18:4d:18:43:cc:73:8a:f8:aa:ea:0c:0a:49:68:
56:ba:9a:69:d9:aa:fe:33:d0:27:7e:06:c9:70:eb:a5:a3:c9:
4e:dc:90:fb:a0:6d:68:0b:3f:96:77:d8:c1:d9:f8:6e:e8:53:
56:bd:7e:f1:36:1b:c9:d5:8c:fc:18:63:3c:70:f1:89:2d:58:
60:6b:aa:9b:a4:83:14:a8:8b:6a:c6:13:5d:e7:b9:cb:0e:ef:
25:02:d6:d3:8d:c6:4b:af:fd:ba:17:34:02:25:60:91:9b:cb:
cf:a5:d1:eb:68:0a:cc:54:d8:ff:e2:9b:bf:20:0e:df:52:18:
b3:b6:7d:70:db:24:f0:66:93:56:e6:04:db:fc:4a:81:f4:a1:
23:bd:9a:26:b2:9b:5f:6c:e1:1b:4a:fd:67:c2:6e:9a:55:97:
3c:20:30:fb:88:c3:f7:4d:8e:9f:0c:b4:ae:4f:f0:a4:b7:c2:
d6:cf:77:e1:52:44:01:f7:66:19:7f:11:40:5d:2c:dd:2e:1b:
41:f7:92:2a:ab:20:74:d7:34:38:53:c0:b8:6b:d8:1d:ab:38:
dd:44:1e:ab:86:5a:97:63:9b:76:74:e7:88:52:b5:87:6f:c0:
54:35:c8:66
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2VuqutUWK3L9ar3gN0+cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5OTM5ZmYxMjkzYjdlMjI3NzlmYzU1YjRjODNmMTNlNTJl
OTQ0MjgwHhcNMjUwMTAyMTE0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWQxN2ZiNzkxOGNlYTExNTkwYzhlZDg3MzNkNjQzZGI4NTExMzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYJgYGHGMoCFOs0g73TQwpB1M7W+
a6FJB6KBa0jl/whNbBWgSHtN37IcuL1c+zQzl71YEOHPmp90h4jsvFNx2a2vworb
kNgkW9EIvjUNkjqMD2IiVORvBo2Q72V4v9SD9q/+nPMISb9unl7I80/kkfleMyFZ
7QNfxyoWQVD/Lmypm2OR2XZkz3pO2LY01P8hQPZGhkJ/suxvhjz7qF06WaApIp0l
RfQ5Do4xHwC3Xl0XFcLhcsHbWLmL6d3sozaIHQMlVz8BFGi+X9/NuSujWMBUJTuf
sySzQiqyiQ6dopzNqee0b9HB8jloXkRMaTTsdNBQLirTCb42gDilBUNwLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEHRf7eRjOoRWQyO2HM9ZD24URNLMB8GA1UdIwQY
MBaAFImTn/EpO34id5/FW0yD8T5S6UQoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVpPZjhTazdmaUozbjhWYlRJUHhQbExwUkNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9hMTBkZGYtYmI2ZS00YmIwLWJlZmYt
MGU2ODAwMGIzNTM3LzEvUWRGX3Q1R002aEZaREk3WWN6MWtQYmhSRTBzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9hMTBkZGYtYmI2ZS00YmIwLWJlZmYtMGU2ODAwMGIzNTM3
LzEvaVpPZjhTazdmaUozbjhWYlRJUHhQbExwUkNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9h3MA0G
CSqGSIb3DQEBCwUAA4IBAQCH/40/cSY18wbEgGMQqDOVIf22MJdMGE0YQ8xziviq
6gwKSWhWuppp2ar+M9AnfgbJcOulo8lO3JD7oG1oCz+Wd9jB2fhu6FNWvX7xNhvJ
1Yz8GGM8cPGJLVhga6qbpIMUqItqxhNd57nLDu8lAtbTjcZLr/26FzQCJWCRm8vP
pdHraArMVNj/4pu/IA7fUhiztn1w2yTwZpNW5gTb/EqB9KEjvZomsptfbOEbSv1n
wm6aVZc8IDD7iMP3TY6fDLSuT/Ckt8LWz3fhUkQB92YZfxFAXSzdLhtB95IqqyB0
1zQ4U8C4a9gdqzjdRB6rhlqXY5t2dOeIUrWHb8BUNchm
-----END CERTIFICATE-----
Generated at Tue Apr 8 19:57:00 2025 by rpki-client