Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/13dc12-fcfa-498e-9f0d-e9ddb8d1c453/1/mQu3xSG-Grp-egF0-lHxRSth-CQ.roa
File: mQu3xSG-Grp-egF0-lHxRSth-CQ.roa (raw, json)
Hash identifier: FYTvKCT+FfNJfV5Bl5U1kjGHyylAfyupzsRXqmFEskk=
Subject key identifier: 99:0B:B7:C5:21:BE:1A:BA:7E:7A:01:74:FA:51:F1:45:2B:61:F8:24
Certificate issuer: /CN=a0094996f4bc87995d20d2a2a2dc843aad4e4738
Certificate serial: 0186BD72C84AF7FDF693620468CC5356252B
Authority key identifier: A0:09:49:96:F4:BC:87:99:5D:20:D2:A2:A2:DC:84:3A:AD:4E:47:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oAlJlvS8h5ldINKiotyEOq1ORzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/13dc12-fcfa-498e-9f0d-e9ddb8d1c453/1/mQu3xSG-Grp-egF0-lHxRSth-CQ.roa
Signing time: Tue 07 Mar 2023 19:01:01 +0000
ROA not before: Tue 07 Mar 2023 19:01:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211627
IP address blocks: 91.209.161.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:bd:72:c8:4a:f7:fd:f6:93:62:04:68:cc:53:56:25:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0094996f4bc87995d20d2a2a2dc843aad4e4738
Validity
Not Before: Mar 7 19:01:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=990bb7c521be1aba7e7a0174fa51f1452b61f824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:92:d5:c9:97:88:d1:4c:3f:53:04:58:4f:d9:
a5:e4:c6:83:87:36:bd:56:0a:ce:f4:2b:9b:b9:2c:
cf:56:74:68:88:d5:7c:45:9c:c5:ea:cc:22:98:85:
9e:24:cb:95:0e:37:dd:64:2c:33:b4:11:56:ae:4b:
33:29:60:76:97:d7:8c:84:c8:95:ea:26:96:6d:b2:
73:aa:c0:88:e8:f4:04:bd:0c:62:f1:09:f8:68:57:
92:ab:15:3d:2c:19:c5:b5:01:f8:f6:c5:a9:18:40:
79:70:e3:b5:7e:78:25:dd:67:56:b0:cd:b8:b4:1e:
b2:fc:f5:4b:82:33:9f:15:ad:11:8d:6f:3c:94:40:
24:ab:f6:ad:e4:94:e8:4c:c3:de:b4:c5:be:e8:ec:
c3:1a:b2:ba:05:34:20:b5:b8:29:88:d7:da:22:50:
82:5e:2a:5e:52:db:e4:cc:41:54:53:91:bc:98:86:
67:7d:8b:ee:aa:6e:48:f8:27:fa:2c:b2:63:0b:f4:
7a:ca:f0:97:c6:e7:51:ca:1a:9b:ba:fe:f5:fc:bf:
4e:73:1d:ce:ee:ac:a0:a8:1d:fb:0c:29:b0:eb:3a:
90:72:a0:5f:9f:c0:be:59:dd:de:81:9c:25:f9:bc:
88:d4:0c:64:87:44:11:a6:21:a2:41:0f:0b:6f:80:
dd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:0B:B7:C5:21:BE:1A:BA:7E:7A:01:74:FA:51:F1:45:2B:61:F8:24
X509v3 Authority Key Identifier:
keyid:A0:09:49:96:F4:BC:87:99:5D:20:D2:A2:A2:DC:84:3A:AD:4E:47:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oAlJlvS8h5ldINKiotyEOq1ORzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/13dc12-fcfa-498e-9f0d-e9ddb8d1c453/1/mQu3xSG-Grp-egF0-lHxRSth-CQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/13dc12-fcfa-498e-9f0d-e9ddb8d1c453/1/oAlJlvS8h5ldINKiotyEOq1ORzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.161.0/24
Signature Algorithm: sha256WithRSAEncryption
61:ea:77:c7:75:c9:86:99:c5:a3:f5:df:e7:e9:19:1e:1e:af:
bc:2c:0d:4f:85:83:b5:a5:10:3d:f0:1b:59:a3:5f:b1:3a:b0:
89:a0:d9:bc:8f:1b:cc:a1:f0:a0:0e:1e:e7:37:a7:e9:96:58:
f3:b9:fd:ff:1c:4d:2c:a5:cf:3b:5e:3d:32:83:af:ec:da:0a:
71:3a:7e:c0:97:d1:36:23:28:f0:0c:4b:01:c5:1c:fc:03:68:
61:5f:84:21:4c:39:23:57:a3:f4:2f:2d:c3:bb:51:48:1d:15:
2e:35:a5:77:28:4d:30:84:fe:e9:4e:e1:33:6e:f5:03:f4:e8:
82:ce:62:92:6e:54:2a:d8:31:f0:cb:09:07:da:da:18:d3:a6:
cc:d2:ce:8e:bc:4c:92:ab:58:fd:0e:0b:fd:6f:40:60:e8:f4:
28:b8:8a:d9:61:05:7f:53:fb:0e:44:e5:f7:ac:95:95:f5:9c:
e3:f1:90:b2:6e:f2:fa:cb:83:25:b7:e5:7f:49:fb:b4:75:15:
6d:de:63:dc:54:13:15:97:ac:45:5d:4f:43:ef:0b:56:f7:6a:
c9:86:10:4d:b4:95:d1:78:1c:0b:22:cb:91:08:33:f8:23:b2:
50:29:dd:a8:5e:4b:46:ec:19:be:5c:b1:a8:3b:4c:77:91:4d:
0b:d2:32:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 00:37:35 2025 by rpki-client