Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/QpO8sjXh8xWJvarxgwfrgS4f7io.roa
File: QpO8sjXh8xWJvarxgwfrgS4f7io.roa (raw, json)
Hash identifier: lorepMaA6NsWm9rt1q4ZPoVf5Jwc5w1ncGgim8O+zbc=
Subject key identifier: 42:93:BC:B2:35:E1:F3:15:89:BD:AA:F1:83:07:EB:81:2E:1F:EE:2A
Certificate issuer: /CN=275aab7dfbb152a646adf3273b31aa5dde64a1df
Certificate serial: FC22
Authority key identifier: 27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/QpO8sjXh8xWJvarxgwfrgS4f7io.roa
Signing time: Tue 28 Jun 2022 13:10:02 +0000
ROA not before: Tue 28 Jun 2022 13:10:02 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48275
IP address blocks: 91.207.180.0/24 maxlen: 32
91.207.181.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64546 (0xfc22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=275aab7dfbb152a646adf3273b31aa5dde64a1df
Validity
Not Before: Jun 28 13:10:02 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4293bcb235e1f31589bdaaf18307eb812e1fee2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:42:09:86:03:fb:4f:97:93:be:98:14:1b:dc:
bc:71:6d:6e:2a:56:bd:2c:bc:a0:82:a3:31:3a:e7:
0f:04:f8:d5:9f:a9:bb:71:43:5e:86:63:05:0a:3d:
fe:77:f2:27:dc:b1:12:87:fe:02:74:48:50:d6:7a:
c4:f2:dd:fd:32:e2:35:0c:1a:92:1f:a7:22:46:c0:
08:48:08:be:df:87:f5:88:d2:54:87:8f:1a:37:c9:
f9:f6:85:2c:b3:15:e2:91:8c:98:b9:37:8e:83:da:
12:fe:66:4b:a3:76:83:53:8a:49:4d:8e:21:52:8e:
51:4e:55:a3:31:7d:5e:e3:1b:09:c6:83:69:4c:de:
df:da:a2:6a:ae:82:2a:05:81:85:ce:58:7f:2c:84:
19:6c:7d:92:c4:7c:04:8c:4e:0f:31:cb:1b:46:51:
38:2d:34:b6:57:f1:a3:9b:f8:49:2b:90:34:7c:02:
1d:8e:2a:7a:65:a3:06:57:17:f2:26:14:d8:28:f4:
d3:ac:cb:57:21:06:24:21:55:65:53:0a:e4:8f:c9:
86:8b:aa:af:4e:34:19:24:08:87:cc:be:d8:7a:80:
96:66:b9:85:4a:cd:32:ac:b6:80:8f:20:00:f0:94:
84:65:45:70:50:29:54:98:70:c3:dd:53:e3:d4:65:
71:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:93:BC:B2:35:E1:F3:15:89:BD:AA:F1:83:07:EB:81:2E:1F:EE:2A
X509v3 Authority Key Identifier:
keyid:27:5A:AB:7D:FB:B1:52:A6:46:AD:F3:27:3B:31:AA:5D:DE:64:A1:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J1qrffuxUqZGrfMnOzGqXd5kod8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/QpO8sjXh8xWJvarxgwfrgS4f7io.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/6e27ca-7ff7-4e09-bae5-0d0d7c0189ad/1/J1qrffuxUqZGrfMnOzGqXd5kod8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.180.0/23
Signature Algorithm: sha256WithRSAEncryption
99:a6:ca:20:9c:8f:a4:f2:75:77:0f:0c:f7:62:b8:9b:97:46:
c4:95:09:3d:50:52:43:ee:3d:18:97:53:04:65:0a:0a:39:0f:
55:e4:1a:38:e3:72:44:1b:59:74:1b:58:95:e0:b8:dd:96:c1:
9f:fe:98:9b:21:4a:e4:de:2b:f5:3d:9f:23:85:0e:a2:11:6e:
a4:a6:0f:f8:d7:30:01:f8:5b:c2:7c:96:dd:58:02:26:74:84:
ea:c1:c8:c0:f3:cf:9e:f6:2d:0e:75:a2:31:24:55:9d:10:7e:
fb:77:47:af:19:2b:3a:07:19:29:a3:71:3d:a1:2e:06:88:6e:
92:3f:4d:8d:6d:e3:80:31:41:78:90:9a:9b:ac:9b:47:04:38:
90:4d:f3:0a:68:a6:50:1c:f1:29:f2:1f:65:d5:c0:79:49:69:
8e:d7:ed:b4:56:de:50:ab:8b:1a:a4:a2:c2:69:af:84:12:29:
bf:9a:2a:dd:59:65:f2:57:b2:5e:02:dd:e2:5b:43:d5:f9:97:
a4:63:15:ae:34:81:88:38:b6:25:42:16:1d:9a:b8:8e:2f:1a:
29:a6:73:b7:00:27:3a:7e:1c:1f:ac:2a:65:17:0b:c1:e3:e5:
80:72:b8:6b:4e:bd:96:46:4e:53:5c:e7:52:a9:00:30:5e:73:
b6:75:40:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:43 2025 by rpki-client