Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/qjBjdrunKiTcPXqIE7s1xh7dwEw.roa
File: qjBjdrunKiTcPXqIE7s1xh7dwEw.roa (raw, json)
Hash identifier: uHoSIY7qke5jgdqqvLbgYTxS1uVZNz+Tj5AJ31INqCE=
Subject key identifier: AA:30:63:76:BB:A7:2A:24:DC:3D:7A:88:13:BB:35:C6:1E:DD:C0:4C
Certificate issuer: /CN=fc05169be4c74952672597df103eeb1b47bb68a3
Certificate serial: 0194221F554A25246E72A4DBC349E0EBF729
Authority key identifier: FC:05:16:9B:E4:C7:49:52:67:25:97:DF:10:3E:EB:1B:47:BB:68:A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_AUWm-THSVJnJZffED7rG0e7aKM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/qjBjdrunKiTcPXqIE7s1xh7dwEw.roa
Signing time: Wed 01 Jan 2025 13:47:46 +0000
ROA not before: Wed 01 Jan 2025 13:47:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57998
IP address blocks: 91.237.154.0/23 maxlen: 23
91.237.154.0/24 maxlen: 24
91.237.155.0/24 maxlen: 24
91.237.156.0/22 maxlen: 22
91.237.156.0/24 maxlen: 24
91.237.157.0/24 maxlen: 24
91.237.158.0/24 maxlen: 24
91.237.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:55:4a:25:24:6e:72:a4:db:c3:49:e0:eb:f7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc05169be4c74952672597df103eeb1b47bb68a3
Validity
Not Before: Jan 1 13:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aa306376bba72a24dc3d7a8813bb35c61eddc04c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e3:5e:38:ef:aa:5c:bc:28:ee:ec:33:f8:d5:
7a:7a:17:13:b8:15:11:c2:cd:8a:9d:77:89:ef:ff:
a7:c4:2f:3f:85:aa:ed:7e:96:0e:c5:df:a1:4b:30:
90:bd:dc:ef:a3:a5:77:d1:e9:a0:13:58:f2:3e:48:
84:52:46:bb:f6:37:9f:0f:ed:87:5b:e8:85:4b:19:
86:c2:a1:a7:23:24:4f:ca:4c:3a:19:3b:f1:19:e7:
5b:c4:b2:f7:31:7b:3b:8e:65:a1:0a:04:1b:17:e4:
3e:a3:d6:00:92:49:56:98:9e:5b:f0:58:16:28:48:
91:be:c4:5b:80:ee:4c:12:d0:d1:ce:fb:44:bd:ba:
36:a5:97:6e:ef:c6:14:96:08:e8:36:8b:8c:37:01:
fb:1c:0a:e4:1f:f0:6a:1a:8e:79:3b:bc:73:89:58:
68:f7:91:25:62:07:e0:ba:53:34:75:42:cd:8d:f8:
f7:aa:4c:eb:ed:69:49:6e:5d:03:d7:ff:4a:0a:73:
68:2f:20:fe:f1:9a:79:64:f4:b3:e2:9e:21:d4:2c:
0d:e1:50:a1:63:67:8b:07:a6:a6:8a:7f:09:24:ac:
dc:06:94:5f:cc:65:aa:d1:09:78:a5:82:7c:fd:a1:
79:09:01:41:3e:ea:79:ec:14:5f:59:72:dd:92:86:
57:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:30:63:76:BB:A7:2A:24:DC:3D:7A:88:13:BB:35:C6:1E:DD:C0:4C
X509v3 Authority Key Identifier:
keyid:FC:05:16:9B:E4:C7:49:52:67:25:97:DF:10:3E:EB:1B:47:BB:68:A3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_AUWm-THSVJnJZffED7rG0e7aKM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/qjBjdrunKiTcPXqIE7s1xh7dwEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b59baf-113e-460b-93e7-338a98a1d9cb/1/_AUWm-THSVJnJZffED7rG0e7aKM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.154.0-91.237.159.255
Signature Algorithm: sha256WithRSAEncryption
b9:6d:4d:f1:ee:62:55:a4:97:25:ba:a1:14:50:71:db:4c:5a:
18:cb:0b:9f:bf:c8:64:77:9f:f9:a4:16:98:fd:5b:7e:a6:7f:
81:f5:79:f8:97:94:b5:71:7b:89:7c:2a:ef:0f:15:bc:f4:8c:
31:f6:64:d0:47:6d:a1:a3:1f:53:c2:4f:b3:6f:a7:6d:b0:1d:
67:13:d5:f7:e5:12:84:fc:62:a4:8c:2e:73:ed:d3:32:25:2d:
12:57:a9:0b:b8:68:03:ba:c0:09:f0:8b:8c:8b:8d:e0:35:05:
df:96:2b:ea:e9:48:da:ba:93:3c:d7:86:eb:e2:90:fc:09:ec:
6a:87:ae:64:e8:ac:60:ff:3c:7a:4c:7a:cf:fe:07:61:72:d2:
73:ed:51:65:0e:bb:01:a1:7a:f7:93:a3:cd:d6:5e:af:db:b0:
49:49:6d:c9:78:51:2c:47:d3:fe:11:b4:cd:b2:56:31:e0:8f:
f6:1f:1d:74:9e:e3:19:c0:47:62:02:db:77:aa:b0:17:02:e7:
3b:6c:de:3a:77:db:37:65:4e:b7:7f:3d:a7:0a:ea:ab:32:92:
da:bd:42:c8:a1:04:6f:7e:93:0d:25:3e:ba:f8:69:fc:7f:11:
f9:ea:f3:2d:59:3d:9c:19:c7:76:01:a6:db:35:db:80:eb:62:
2e:31:18:25
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZQiH1VKJSRucqTbw0ng6/cpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMDUxNjliZTRjNzQ5NTI2NzI1OTdkZjEwM2VlYjFiNDdi
YjY4YTMwHhcNMjUwMTAxMTM0NzQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTMwNjM3NmJiYTcyYTI0ZGMzZDdhODgxM2JiMzVjNjFlZGRjMDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuNeOO+qXLwo7uwz+NV6ehcTuBUR
ws2KnXeJ7/+nxC8/hartfpYOxd+hSzCQvdzvo6V30emgE1jyPkiEUka79jefD+2H
W+iFSxmGwqGnIyRPykw6GTvxGedbxLL3MXs7jmWhCgQbF+Q+o9YAkklWmJ5b8FgW
KEiRvsRbgO5MEtDRzvtEvbo2pZdu78YUlgjoNouMNwH7HArkH/BqGo55O7xziVho
95ElYgfgulM0dULNjfj3qkzr7WlJbl0D1/9KCnNoLyD+8Zp5ZPSz4p4h1CwN4VCh
Y2eLB6amin8JJKzcBpRfzGWq0Ql4pYJ8/aF5CQFBPup57BRfWXLdkoZXIwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKowY3a7pyok3D16iBO7NcYe3cBMMB8GA1UdIwQY
MBaAFPwFFpvkx0lSZyWX3xA+6xtHu2ijMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0FVV20tVEhTVkpuSlpmZkVEN3JHMGU3YUtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9iNTliYWYtMTEzZS00NjBiLTkzZTct
MzM4YTk4YTFkOWNiLzEvcWpCamRydW5LaVRjUFhxSUU3czF4aDdkd0V3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9iNTliYWYtMTEzZS00NjBiLTkzZTctMzM4YTk4YTFkOWNi
LzEvX0FVV20tVEhTVkpuSlpmZkVEN3JHMGU3YUtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAFb7ZoD
BAVb7YAwDQYJKoZIhvcNAQELBQADggEBALltTfHuYlWklyW6oRRQcdtMWhjLC5+/
yGR3n/mkFpj9W36mf4H1efiXlLVxe4l8Ku8PFbz0jDH2ZNBHbaGjH1PCT7Nvp22w
HWcT1fflEoT8YqSMLnPt0zIlLRJXqQu4aAO6wAnwi4yLjeA1Bd+WK+rpSNq6kzzX
huvikPwJ7GqHrmTorGD/PHpMes/+B2Fy0nPtUWUOuwGheveTo83WXq/bsElJbcl4
USxH0/4RtM2yVjHgj/YfHXSe4xnAR2IC23eqsBcC5zts3jp32zdlTrd/PacK6qsy
ktq9QsihBG9+kw0lPrr4afx/Efnq8y1ZPZwZx3YBpts124DrYi4xGCU=
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:40 2025 by rpki-client