Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/5a0674-f4fc-44a5-9581-5469f9ff2fb4/1/QS5HS0CfN9YUTtmqVWp3cXewUpg.roa
File: QS5HS0CfN9YUTtmqVWp3cXewUpg.roa (raw, json)
Hash identifier: 8m0BDRVqiPkC8wa5dT3D7dhT8HeUkyUy8wXt7Q3SHAw=
Subject key identifier: 41:2E:47:4B:40:9F:37:D6:14:4E:D9:AA:55:6A:77:71:77:B0:52:98
Certificate issuer: /CN=f6f98db7fe84c9690a9b630ec2735f657a9a5878
Certificate serial: 09199299
Authority key identifier: F6:F9:8D:B7:FE:84:C9:69:0A:9B:63:0E:C2:73:5F:65:7A:9A:58:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vmNt_6EyWkKm2MOwnNfZXqaWHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/5a0674-f4fc-44a5-9581-5469f9ff2fb4/1/QS5HS0CfN9YUTtmqVWp3cXewUpg.roa
Signing time: Sat 01 Jan 2022 07:58:35 +0000
ROA not before: Sat 01 Jan 2022 07:58:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 199139
IP address blocks: 91.236.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152670873 (0x9199299)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f98db7fe84c9690a9b630ec2735f657a9a5878
Validity
Not Before: Jan 1 07:58:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=412e474b409f37d6144ed9aa556a777177b05298
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5c:23:39:4b:e1:d6:dd:44:4c:16:40:d8:4c:
29:37:c8:c6:df:21:a7:2f:dd:ad:0b:79:e1:29:1c:
ea:04:01:c1:90:0c:12:81:eb:8f:e7:bb:5f:e9:4d:
10:08:e5:36:b6:cb:91:15:12:28:99:f6:31:c8:fb:
56:4c:e8:a2:3d:47:31:f7:41:f3:cc:eb:1f:f7:c6:
f2:e8:94:cd:dc:96:06:68:ec:b5:64:ff:7c:f5:6b:
df:bf:ce:53:94:e1:0f:44:42:d5:39:c0:ed:8c:2e:
4e:47:b9:bd:95:2e:3f:aa:f3:74:60:35:ab:7a:16:
7f:96:03:b4:76:cb:28:30:82:32:86:1e:91:5f:4b:
e3:b0:a0:d4:c3:3e:28:ee:9d:f9:6c:8a:10:a5:ca:
e1:4d:b5:64:10:93:4b:e6:46:9d:12:f8:f1:12:63:
f1:a8:53:0f:ef:89:29:3b:71:c9:e5:6b:45:2a:2d:
ca:18:3a:42:9c:b6:7f:43:f3:5b:92:0b:22:27:66:
6f:82:f5:42:3f:9b:3f:6d:15:dc:3e:1b:dd:82:73:
c2:6b:46:f1:e0:55:84:5f:5d:5d:d3:a9:df:e1:84:
c3:d8:50:67:1d:2a:60:2a:74:99:fb:ff:1d:39:27:
26:14:03:f9:8f:31:bf:03:f6:35:a4:4e:b2:77:41:
d1:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2E:47:4B:40:9F:37:D6:14:4E:D9:AA:55:6A:77:71:77:B0:52:98
X509v3 Authority Key Identifier:
keyid:F6:F9:8D:B7:FE:84:C9:69:0A:9B:63:0E:C2:73:5F:65:7A:9A:58:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vmNt_6EyWkKm2MOwnNfZXqaWHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5a0674-f4fc-44a5-9581-5469f9ff2fb4/1/QS5HS0CfN9YUTtmqVWp3cXewUpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/5a0674-f4fc-44a5-9581-5469f9ff2fb4/1/9vmNt_6EyWkKm2MOwnNfZXqaWHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.19.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:f6:26:ac:c4:c4:ba:8a:25:c9:0b:53:e2:ef:48:04:cd:48:
9b:1c:5f:75:67:34:43:86:e3:33:30:5d:ae:b1:95:f3:03:f1:
4d:03:3d:e9:a8:4e:38:49:84:9e:cd:27:a5:0d:0d:b4:5b:8f:
45:46:83:06:54:3a:14:a2:a9:df:e1:dd:e6:47:b3:29:5d:a1:
20:e1:59:c4:c9:41:5d:90:d2:42:27:80:4e:53:d9:19:1e:38:
76:d7:ba:57:7d:aa:05:14:0e:8d:f9:6a:00:3d:d5:87:b9:cd:
10:bc:dc:de:62:2c:80:99:8c:44:74:fc:31:96:bc:44:29:d2:
08:79:95:3c:fd:a2:df:c9:02:96:2d:73:a8:ba:b6:51:9c:ec:
8f:a9:c7:d0:aa:11:14:45:c7:d8:45:d1:21:03:ab:b8:13:30:
eb:f4:43:d3:a0:f0:39:29:9d:eb:f3:14:e5:8b:9b:e7:63:a2:
e0:06:c8:46:46:cb:4d:e3:a5:b3:97:ec:ef:79:8e:69:35:41:
e1:36:b8:93:f3:60:52:70:f0:7c:db:f7:76:f7:eb:bf:76:b3:
45:88:d0:67:82:3e:1b:4a:95:7e:35:41:4d:32:17:89:b2:d8:
c8:17:aa:61:2b:a6:77:f4:cf:0a:95:82:a2:b9:31:8a:be:33:
ad:ad:55:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:48 2025 by rpki-client