Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b9411c-0201-4430-bfa5-532de28348ab/1/qSxo9zgJ1WdOt3KPYVW0ckbAObM.roa
File: qSxo9zgJ1WdOt3KPYVW0ckbAObM.roa (raw, json)
Hash identifier: adu43Kg4/oAiobtxxArSlXXvuFVNmCw/EQzP4MwDiLk=
Subject key identifier: A9:2C:68:F7:38:09:D5:67:4E:B7:72:8F:61:55:B4:72:46:C0:39:B3
Certificate issuer: /CN=cf0b4e42012ab2561248bc18f0442c2007c8caa2
Certificate serial: 01840B0F37042BBE212D910FFB4B4AE003E4
Authority key identifier: CF:0B:4E:42:01:2A:B2:56:12:48:BC:18:F0:44:2C:20:07:C8:CA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zwtOQgEqslYSSLwY8EQsIAfIyqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b9411c-0201-4430-bfa5-532de28348ab/1/qSxo9zgJ1WdOt3KPYVW0ckbAObM.roa
Signing time: Mon 24 Oct 2022 17:34:17 +0000
ROA not before: Mon 24 Oct 2022 17:34:17 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50272
IP address blocks: 91.235.60.0/22 maxlen: 22
195.238.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:0b:0f:37:04:2b:be:21:2d:91:0f:fb:4b:4a:e0:03:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf0b4e42012ab2561248bc18f0442c2007c8caa2
Validity
Not Before: Oct 24 17:34:17 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a92c68f73809d5674eb7728f6155b47246c039b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7b:79:fd:8a:6a:d1:b5:9a:57:19:81:22:0a:
d9:c5:a1:5f:13:ba:fe:ce:57:5d:af:35:97:0a:6f:
ad:e3:15:b3:51:e0:cf:28:f0:c3:0e:c2:48:11:4c:
21:f1:13:e5:f7:63:5a:d8:14:68:9f:24:f3:4b:a1:
27:d8:67:e1:f5:4c:0c:b1:87:74:91:4a:f4:bc:53:
c1:c8:b6:94:21:c5:66:ce:84:58:d0:f7:e6:ca:cf:
d7:a9:43:b0:75:26:4b:f2:ba:95:f2:c5:ba:be:6a:
08:52:66:2d:fd:0f:74:ca:51:b9:86:16:3f:32:21:
d0:cd:36:bd:2d:46:53:bf:fb:33:a2:04:a6:de:f0:
2b:51:37:cd:41:aa:f2:7a:35:a5:dc:3f:e8:c3:89:
6a:6b:29:b0:a5:be:a0:1d:20:7d:60:13:dc:31:4d:
c2:4a:4a:1c:f8:42:e4:2b:c3:0e:01:6b:df:19:9c:
65:4c:6a:a7:46:01:24:3f:0c:e0:07:44:19:fe:9c:
16:38:00:6f:b8:dc:cd:0e:c7:7d:df:3b:b9:6c:ed:
bf:08:68:ec:34:e0:70:eb:ae:c1:d8:d4:88:4c:84:
9f:f1:30:ab:83:67:d8:68:4d:48:c8:1f:f9:15:a0:
99:a2:11:ea:17:f9:5e:bf:7a:eb:1b:82:76:0d:8c:
51:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2C:68:F7:38:09:D5:67:4E:B7:72:8F:61:55:B4:72:46:C0:39:B3
X509v3 Authority Key Identifier:
keyid:CF:0B:4E:42:01:2A:B2:56:12:48:BC:18:F0:44:2C:20:07:C8:CA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zwtOQgEqslYSSLwY8EQsIAfIyqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b9411c-0201-4430-bfa5-532de28348ab/1/qSxo9zgJ1WdOt3KPYVW0ckbAObM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b9411c-0201-4430-bfa5-532de28348ab/1/zwtOQgEqslYSSLwY8EQsIAfIyqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.60.0/22
195.238.234.0/24
Signature Algorithm: sha256WithRSAEncryption
78:44:d3:86:9a:b1:2e:85:08:3c:fa:e1:8e:8f:da:e7:20:1d:
d4:3b:ec:b5:b4:26:d1:15:e2:34:63:cd:a5:b0:6d:10:09:84:
35:e5:f6:0e:72:d5:01:96:24:87:16:1c:57:43:8d:4d:84:c3:
85:47:1b:6e:0b:21:52:3d:4a:fc:1f:11:75:5e:6e:fa:7d:8a:
ae:74:49:21:6e:ef:87:9c:8b:dd:57:5d:a6:48:a5:c7:df:c5:
23:2d:be:c1:86:98:2f:f8:4b:9d:7b:aa:1f:3c:78:3b:2f:51:
79:31:4a:29:a0:b3:3a:fd:ec:63:ad:cd:71:ed:d6:44:ee:e6:
1a:66:42:f9:7d:08:e7:22:cf:d7:e0:ab:2a:5e:61:07:2f:f7:
7a:ec:3a:7a:97:fd:e5:f1:e3:cf:e1:27:4e:a5:45:fa:a6:4c:
1a:6a:da:59:e4:41:c4:52:8b:2e:f9:f6:df:02:e8:35:d6:22:
0f:b4:85:75:70:b2:f2:fc:47:51:cd:a1:8a:62:b7:75:d1:8d:
6a:1c:72:61:0a:cf:aa:f6:e5:0d:16:4e:85:92:89:8a:b8:c0:
b6:cd:16:68:e1:67:78:0b:3b:cc:34:34:c0:b3:3a:1f:62:2a:
aa:3a:4e:85:d6:af:e0:1a:66:2e:7b:da:99:5d:a7:e0:c2:68:
54:1c:53:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:05:03 2025 by rpki-client