Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/AqcoNOW_E-xWBo1Rt_yWTCfd42I.roa
File: AqcoNOW_E-xWBo1Rt_yWTCfd42I.roa (raw, json)
Hash identifier: QWci9V2NjIY+SYFiDofrhj2aiBG+2NbxvfuonR2gWB0=
Subject key identifier: 02:A7:28:34:E5:BF:13:EC:56:06:8D:51:B7:FC:96:4C:27:DD:E3:62
Certificate issuer: /CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Certificate serial: 01942220266FEDBF7BFD3B89E6C995F16FF7
Authority key identifier: 5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/AqcoNOW_E-xWBo1Rt_yWTCfd42I.roa
Signing time: Wed 01 Jan 2025 13:48:39 +0000
ROA not before: Wed 01 Jan 2025 13:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209155
IP address blocks: 91.211.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:26:6f:ed:bf:7b:fd:3b:89:e6:c9:95:f1:6f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6140f17312784ef62ae3be030c0c2cc661a702
Validity
Not Before: Jan 1 13:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=02a72834e5bf13ec56068d51b7fc964c27dde362
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:47:6d:c8:ff:ee:82:cc:00:b4:fe:c1:82:4d:
61:2d:0f:f5:95:43:26:38:85:55:29:73:b9:24:a5:
a6:4f:2a:e6:1f:55:ae:7c:33:1d:68:9f:1f:0b:15:
b1:ec:08:01:19:c0:12:19:cd:93:11:7e:8f:f0:4a:
40:33:97:b3:b4:f0:f8:ce:99:f9:8d:cc:66:e9:bb:
05:d3:b4:fb:4a:b4:a4:d1:08:f9:82:31:0b:05:61:
f3:43:6a:9e:d1:52:0f:fa:dd:ac:d9:e3:ef:a4:ce:
79:8a:ad:c6:fc:50:81:ca:6c:00:a1:fb:3b:39:24:
e5:08:a1:47:79:b2:67:03:cb:5b:94:85:98:13:a0:
e7:7f:d5:05:51:06:48:b2:0b:65:fa:df:6c:aa:3b:
85:89:1e:63:e8:bd:e5:9b:61:6c:17:df:68:74:6f:
e3:86:33:20:2f:df:89:38:e7:9d:0c:61:18:33:3b:
b5:fe:30:aa:92:23:be:83:04:85:7c:ab:3b:ff:72:
66:e2:24:39:15:5a:d3:5a:1d:cd:5c:37:71:cf:46:
82:2e:fc:3d:52:7c:5d:e0:6b:cf:14:03:14:55:ca:
15:fb:2e:72:fe:00:65:81:04:80:2c:86:2a:d5:31:
6a:26:b8:c8:11:6b:38:c7:83:28:67:51:70:cf:dd:
02:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:A7:28:34:E5:BF:13:EC:56:06:8D:51:B7:FC:96:4C:27:DD:E3:62
X509v3 Authority Key Identifier:
keyid:5E:61:40:F1:73:12:78:4E:F6:2A:E3:BE:03:0C:0C:2C:C6:61:A7:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XmFA8XMSeE72KuO-AwwMLMZhpwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/AqcoNOW_E-xWBo1Rt_yWTCfd42I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/c4ce32-c220-40c9-8be8-0dbcba275417/1/XmFA8XMSeE72KuO-AwwMLMZhpwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.90.0/24
Signature Algorithm: sha256WithRSAEncryption
00:8d:1c:ed:08:29:8b:87:31:d8:ad:f1:fd:58:4d:87:0c:7e:
85:f4:ed:aa:ac:18:da:6b:5b:1b:84:04:9b:e4:73:b6:83:04:
34:f0:bf:0b:38:66:ce:e6:0d:a3:55:fe:56:30:f9:e1:a6:59:
ee:81:f0:4d:49:1a:5b:1b:bb:fa:78:ce:42:ef:74:a4:ab:78:
29:d7:26:e0:83:49:67:95:8d:33:77:ec:44:c0:76:f9:3f:19:
1f:50:47:b7:f5:31:75:6c:0f:6b:13:5a:4b:9d:88:a9:eb:22:
1d:90:31:fc:ef:a3:e2:57:2b:83:c9:56:e7:14:c8:1f:0c:77:
c3:3f:d6:49:74:99:79:01:41:a1:cc:d5:1c:e1:61:f5:99:d3:
45:37:73:cc:02:8c:53:f5:ce:84:91:cf:01:b5:16:41:c3:a6:
c2:fe:4d:d0:45:e6:d3:e6:69:a1:c5:e5:73:b9:e1:39:32:05:
a9:96:80:7c:bf:7c:a7:81:ea:1f:9f:6a:5f:fe:cd:4c:12:8e:
09:d0:80:4a:a2:ca:a9:63:d0:c4:e0:1c:4a:44:2d:aa:e5:15:
0b:54:78:b7:15:67:5e:2e:35:82:fe:46:8a:d0:c7:1d:c1:df:
a0:3b:89:8d:20:9b:ac:64:2a:72:b7:76:ba:1d:b5:5a:e1:18:
d9:25:73:3c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiICZv7b97/TuJ5smV8W/3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNjE0MGYxNzMxMjc4NGVmNjJhZTNiZTAzMGMwYzJjYzY2
MWE3MDIwHhcNMjUwMTAxMTM0ODM5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMmE3MjgzNGU1YmYxM2VjNTYwNjhkNTFiN2ZjOTY0YzI3ZGRlMzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kdtyP/ugswAtP7Bgk1hLQ/1lUMm
OIVVKXO5JKWmTyrmH1WufDMdaJ8fCxWx7AgBGcASGc2TEX6P8EpAM5eztPD4zpn5
jcxm6bsF07T7SrSk0Qj5gjELBWHzQ2qe0VIP+t2s2ePvpM55iq3G/FCBymwAofs7
OSTlCKFHebJnA8tblIWYE6Dnf9UFUQZIsgtl+t9sqjuFiR5j6L3lm2FsF99odG/j
hjMgL9+JOOedDGEYMzu1/jCqkiO+gwSFfKs7/3Jm4iQ5FVrTWh3NXDdxz0aCLvw9
Unxd4GvPFAMUVcoV+y5y/gBlgQSALIYq1TFqJrjIEWs4x4MoZ1Fwz90CeQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAKnKDTlvxPsVgaNUbf8lkwn3eNiMB8GA1UdIwQY
MBaAFF5hQPFzEnhO9irjvgMMDCzGYacCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jNGNlMzItYzIyMC00MGM5LThiZTgt
MGRiY2JhMjc1NDE3LzEvQXFjb05PV19FLXhXQm8xUnRfeVdUQ2ZkNDJJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9jNGNlMzItYzIyMC00MGM5LThiZTgtMGRiY2JhMjc1NDE3
LzEvWG1GQThYTVNlRTcyS3VPLUF3d01MTVpocHdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9NaMA0G
CSqGSIb3DQEBCwUAA4IBAQAAjRztCCmLhzHYrfH9WE2HDH6F9O2qrBjaa1sbhASb
5HO2gwQ08L8LOGbO5g2jVf5WMPnhplnugfBNSRpbG7v6eM5C73Skq3gp1ybgg0ln
lY0zd+xEwHb5PxkfUEe39TF1bA9rE1pLnYip6yIdkDH876PiVyuDyVbnFMgfDHfD
P9ZJdJl5AUGhzNUc4WH1mdNFN3PMAoxT9c6Ekc8BtRZBw6bC/k3QRebT5mmhxeVz
ueE5MgWploB8v3yngeofn2pf/s1MEo4J0IBKosqpY9DE4BxKRC2q5RULVHi3FWde
LjWC/kaK0Mcdwd+gO4mNIJusZCpyt3a6HbVa4RjZJXM8
-----END CERTIFICATE-----
Generated at Tue Apr 8 20:58:22 2025 by rpki-client