Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/qznnQ-v33pCD5fJCMq_QfAFaVVY.roa
File: qznnQ-v33pCD5fJCMq_QfAFaVVY.roa (raw, json)
Hash identifier: 0VqZD7dxruPTKQ34pdbfgNvG+cfqa/rYpHKqqEaQD/s=
Subject key identifier: AB:39:E7:43:EB:F7:DE:90:83:E5:F2:42:32:AF:D0:7C:01:5A:55:56
Certificate issuer: /CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Certificate serial: 019427B5CCC13046F896F62CD68417A7500B
Authority key identifier: 2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/qznnQ-v33pCD5fJCMq_QfAFaVVY.roa
Signing time: Thu 02 Jan 2025 15:50:13 +0000
ROA not before: Thu 02 Jan 2025 15:50:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15083
IP address blocks: 93.95.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:cc:c1:30:46:f8:96:f6:2c:d6:84:17:a7:50:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f78e0066bb27c5f52e7025d61190daa90b97348
Validity
Not Before: Jan 2 15:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ab39e743ebf7de9083e5f24232afd07c015a5556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c4:74:41:34:2f:42:3e:a3:32:02:9c:9e:6a:
2b:33:09:1b:b0:78:93:72:f3:73:90:27:d1:f0:47:
d9:75:3f:b9:81:35:a7:57:22:f9:df:f0:0e:4d:31:
f6:de:b6:24:11:f8:11:f8:5c:e4:77:42:68:06:de:
72:91:47:f6:a8:92:19:16:89:30:4f:aa:4c:bd:56:
3c:9c:2a:91:1d:87:41:8c:a7:07:bb:c6:cf:b7:32:
05:19:df:11:13:ee:75:73:92:41:35:95:b8:80:be:
8a:3d:d9:e7:63:75:7e:cc:36:84:67:f6:75:d9:57:
52:8d:40:10:52:44:e8:38:39:89:f5:02:4e:f6:fc:
e5:44:85:17:a3:c5:5c:46:ea:81:65:00:6f:08:f6:
20:a7:50:e6:93:46:81:19:9e:08:d0:c0:28:fa:5a:
52:68:d6:5b:01:55:6a:d0:dc:55:52:77:9d:22:13:
11:1b:44:27:96:3d:1f:d6:01:f6:d9:1a:97:d5:a3:
2f:6a:50:7c:84:76:3d:b5:51:9b:3d:d4:d3:96:88:
a1:70:3f:7f:ac:25:0e:3d:91:4a:78:0a:b9:45:ec:
a8:ef:d9:f4:dc:ec:93:2f:f0:64:3e:08:6f:ef:ae:
cb:28:88:fb:3b:28:0c:bf:ca:85:87:22:63:79:23:
23:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:39:E7:43:EB:F7:DE:90:83:E5:F2:42:32:AF:D0:7C:01:5A:55:56
X509v3 Authority Key Identifier:
keyid:2F:78:E0:06:6B:B2:7C:5F:52:E7:02:5D:61:19:0D:AA:90:B9:73:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L3jgBmuyfF9S5wJdYRkNqpC5c0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/qznnQ-v33pCD5fJCMq_QfAFaVVY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/230ac7-ec0c-44de-85a8-b2b7962c2d81/1/L3jgBmuyfF9S5wJdYRkNqpC5c0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.95.24.0/24
Signature Algorithm: sha256WithRSAEncryption
59:e2:08:6d:a9:a1:e0:e2:12:7f:f7:cf:2f:b3:3e:6c:7a:d2:
da:32:fa:32:d5:85:10:61:9a:fe:fb:f5:d7:45:03:e7:3e:e9:
ab:f7:a6:bb:0c:ba:c0:cf:f0:9c:36:9b:a3:22:b9:42:ec:a9:
13:1c:3e:e8:a6:56:a3:29:43:aa:e0:98:5a:53:5e:b9:4a:e1:
00:14:f1:fa:c1:f4:d9:57:91:49:a9:dd:ef:d0:10:8d:eb:1a:
66:48:07:e6:4e:51:a3:33:fb:2e:8a:37:ce:3d:46:5b:c5:de:
c6:81:22:91:d8:97:e2:34:c0:b9:08:dd:a8:3a:4a:a2:3b:c6:
9d:dd:84:3e:cf:93:21:c6:04:7e:d0:ff:ea:43:13:ee:56:28:
c7:83:58:28:ba:88:c5:5c:61:b3:a0:eb:ca:ed:9e:a1:0d:5e:
62:bc:32:74:81:9e:7e:49:f9:c5:ca:d3:08:2a:85:bc:ce:5f:
50:0f:76:2a:6c:32:18:83:a0:ca:cb:73:aa:82:dc:16:a5:42:
a1:5b:e8:c0:aa:1a:ae:76:d9:94:49:8d:0e:2d:78:af:e8:5d:
ee:cc:2c:45:81:ca:2e:2e:f1:a7:6e:9d:d0:7b:4b:99:ea:ca:
5f:a5:3e:e5:87:56:34:21:0a:be:5f:3a:65:2b:50:9f:2d:07:
58:34:a9:0c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntczBMEb4lvYs1oQXp1ALMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNzhlMDA2NmJiMjdjNWY1MmU3MDI1ZDYxMTkwZGFhOTBi
OTczNDgwHhcNMjUwMTAyMTU1MDEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjM5ZTc0M2ViZjdkZTkwODNlNWYyNDIzMmFmZDA3YzAxNWE1NTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMR0QTQvQj6jMgKcnmorMwkbsHiT
cvNzkCfR8EfZdT+5gTWnVyL53/AOTTH23rYkEfgR+Fzkd0JoBt5ykUf2qJIZFokw
T6pMvVY8nCqRHYdBjKcHu8bPtzIFGd8RE+51c5JBNZW4gL6KPdnnY3V+zDaEZ/Z1
2VdSjUAQUkToODmJ9QJO9vzlRIUXo8VcRuqBZQBvCPYgp1Dmk0aBGZ4I0MAo+lpS
aNZbAVVq0NxVUnedIhMRG0Qnlj0f1gH22RqX1aMvalB8hHY9tVGbPdTTloihcD9/
rCUOPZFKeAq5Reyo79n03OyTL/BkPghv767LKIj7OygMv8qFhyJjeSMj8wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKs550Pr996Qg+XyQjKv0HwBWlVWMB8GA1UdIwQY
MBaAFC944AZrsnxfUucCXWEZDaqQuXNIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDNqZ0JtdXlmRjlTNXdKZFlSa05xcEM1YzBnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMzBhYzctZWMwYy00NGRlLTg1YTgt
YjJiNzk2MmMyZDgxLzEvcXpublEtdjMzcENENWZKQ01xX1FmQUZhVlZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yMzBhYzctZWMwYy00NGRlLTg1YTgtYjJiNzk2MmMyZDgx
LzEvTDNqZ0JtdXlmRjlTNXdKZFlSa05xcEM1YzBnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXV8YMA0G
CSqGSIb3DQEBCwUAA4IBAQBZ4ghtqaHg4hJ/988vsz5setLaMvoy1YUQYZr++/XX
RQPnPumr96a7DLrAz/CcNpujIrlC7KkTHD7oplajKUOq4JhaU165SuEAFPH6wfTZ
V5FJqd3v0BCN6xpmSAfmTlGjM/suijfOPUZbxd7GgSKR2JfiNMC5CN2oOkqiO8ad
3YQ+z5MhxgR+0P/qQxPuVijHg1gouojFXGGzoOvK7Z6hDV5ivDJ0gZ5+SfnFytMI
KoW8zl9QD3YqbDIYg6DKy3OqgtwWpUKhW+jAqhqudtmUSY0OLXiv6F3uzCxFgcou
LvGnbp3Qe0uZ6spfpT7lh1Y0IQq+XzplK1CfLQdYNKkM
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:17:48 2025 by rpki-client