Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/QEHZF8Tlk9QKI2YxEH34bnx0Z1c.roa
File: QEHZF8Tlk9QKI2YxEH34bnx0Z1c.roa (raw, json)
Hash identifier: 8+749rwNuEEuELLtmccQKg/as7h9BdIGWfJq5dqwT3A=
Subject key identifier: 40:41:D9:17:C4:E5:93:D4:0A:23:66:31:10:7D:F8:6E:7C:74:67:57
Certificate issuer: /CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Certificate serial: 01942369DAC6E2E9C6CE9950D53381651041
Authority key identifier: D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/QEHZF8Tlk9QKI2YxEH34bnx0Z1c.roa
Signing time: Wed 01 Jan 2025 19:48:47 +0000
ROA not before: Wed 01 Jan 2025 19:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61335
IP address blocks: 91.242.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:da:c6:e2:e9:c6:ce:99:50:d5:33:81:65:10:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1de07a1a1f65bd116e11f9f1108604b6e95ccfd
Validity
Not Before: Jan 1 19:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4041d917c4e593d40a236631107df86e7c746757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c8:08:b5:c2:82:51:d7:5e:3a:d7:d3:6a:11:
08:38:91:63:a1:8e:b9:1d:21:29:7d:ba:93:a9:40:
9a:fb:1c:e8:93:b3:c6:83:d7:b4:5b:16:cd:c7:82:
ba:e0:35:5f:f6:a7:da:e2:49:4b:02:3e:77:d1:b0:
af:f5:d6:90:db:ea:b7:59:1f:c8:a2:80:90:f5:d3:
49:df:88:de:d9:a9:12:66:06:3f:15:15:2e:a2:a8:
6f:09:0e:38:20:ce:83:93:0b:f7:bc:23:14:d3:00:
ac:e9:9b:cb:db:b9:3d:ce:9c:4d:ad:9c:17:e9:02:
4f:d0:9f:18:db:ff:d9:74:7d:60:be:ed:dd:17:39:
3b:8f:73:29:af:02:6e:d2:ea:a0:fd:37:fc:ff:33:
1f:74:15:65:99:0f:c0:82:6c:94:11:6d:44:43:78:
c7:b0:a8:cb:12:06:d7:79:6c:e4:a5:be:d8:6a:4d:
cc:7a:89:08:a6:27:a6:74:6b:22:69:17:62:98:3a:
17:55:d1:39:a8:3e:ec:b4:cd:8d:dc:1f:56:91:08:
d6:10:73:b4:6a:67:52:14:62:b9:d3:c0:ee:b7:02:
7b:5a:b7:a5:d3:e6:d4:25:c1:ef:84:ef:e3:e6:33:
fc:f5:67:8f:49:d7:5a:53:8c:61:c4:f8:11:b8:6d:
6b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:41:D9:17:C4:E5:93:D4:0A:23:66:31:10:7D:F8:6E:7C:74:67:57
X509v3 Authority Key Identifier:
keyid:D1:DE:07:A1:A1:F6:5B:D1:16:E1:1F:9F:11:08:60:4B:6E:95:CC:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4HoaH2W9EW4R-fEQhgS26VzP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/QEHZF8Tlk9QKI2YxEH34bnx0Z1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/4963ec-576f-4167-993c-99f182213d4f/1/0d4HoaH2W9EW4R-fEQhgS26VzP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.163.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:0d:60:7c:45:68:77:0e:46:48:8a:8a:34:c6:b6:c3:dc:a0:
dd:52:f9:b4:cb:f2:56:82:2d:56:c8:bd:4a:3f:28:1b:c8:28:
3e:96:02:8b:2e:c7:0e:57:c6:12:e6:fa:db:0c:31:b6:12:d8:
61:7b:23:09:37:50:54:8b:4f:42:fa:db:bb:27:b7:38:be:4f:
dd:52:a6:52:04:a6:01:67:3c:c2:d7:ab:bd:9b:db:64:9d:37:
a0:66:d1:f3:67:ed:6c:d2:dd:db:14:84:ca:cb:19:37:f2:b1:
b7:55:06:1f:38:bb:0d:ba:71:7b:39:58:93:98:71:2a:76:97:
d9:3f:d4:2e:29:76:8a:81:fb:3f:b1:e4:f7:6a:52:8b:2b:9a:
f3:eb:3b:73:e6:49:c8:e5:da:1b:78:31:bb:5b:06:a1:9b:c0:
6b:fe:fb:85:1b:cd:4b:83:11:88:a9:9d:c1:35:0b:ab:0a:bb:
bc:6c:51:8d:58:d2:f4:6f:40:49:a8:52:9b:b5:8c:19:e8:02:
4d:95:a8:ef:84:ca:78:a2:2e:2c:df:32:a5:cf:a6:9b:32:2c:
88:ca:49:f6:35:40:ef:1b:0e:d9:45:b8:bc:a1:97:98:17:89:
89:27:16:db:89:dc:12:63:5d:8a:bf:10:31:9f:5f:b0:71:fb:
10:04:d5:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQjadrG4unGzplQ1TOBZRBBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxZGUwN2ExYTFmNjViZDExNmUxMWY5ZjExMDg2MDRiNmU5
NWNjZmQwHhcNMjUwMTAxMTk0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDQxZDkxN2M0ZTU5M2Q0MGEyMzY2MzExMDdkZjg2ZTdjNzQ2NzU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMgItcKCUddeOtfTahEIOJFjoY65
HSEpfbqTqUCa+xzok7PGg9e0WxbNx4K64DVf9qfa4klLAj530bCv9daQ2+q3WR/I
ooCQ9dNJ34je2akSZgY/FRUuoqhvCQ44IM6Dkwv3vCMU0wCs6ZvL27k9zpxNrZwX
6QJP0J8Y2//ZdH1gvu3dFzk7j3MprwJu0uqg/Tf8/zMfdBVlmQ/AgmyUEW1EQ3jH
sKjLEgbXeWzkpb7Yak3MeokIpiemdGsiaRdimDoXVdE5qD7stM2N3B9WkQjWEHO0
amdSFGK508DutwJ7Wrel0+bUJcHvhO/j5jP89WePSddaU4xhxPgRuG1rkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEBB2RfE5ZPUCiNmMRB9+G58dGdXMB8GA1UdIwQY
MBaAFNHeB6Gh9lvRFuEfnxEIYEtulcz9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy80OTYzZWMtNTc2Zi00MTY3LTk5M2Mt
OTlmMTgyMjEzZDRmLzEvUUVIWkY4VGxrOVFLSTJZeEVIMzRibngwWjFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy80OTYzZWMtNTc2Zi00MTY3LTk5M2MtOTlmMTgyMjEzZDRm
LzEvMGQ0SG9hSDJXOUVXNFItZkVRaGdTMjZWelAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/KjMA0G
CSqGSIb3DQEBCwUAA4IBAQANDWB8RWh3DkZIioo0xrbD3KDdUvm0y/JWgi1WyL1K
PygbyCg+lgKLLscOV8YS5vrbDDG2EthheyMJN1BUi09C+tu7J7c4vk/dUqZSBKYB
ZzzC16u9m9tknTegZtHzZ+1s0t3bFITKyxk38rG3VQYfOLsNunF7OViTmHEqdpfZ
P9QuKXaKgfs/seT3alKLK5rz6ztz5knI5dobeDG7Wwahm8Br/vuFG81LgxGIqZ3B
NQurCru8bFGNWNL0b0BJqFKbtYwZ6AJNlajvhMp4oi4s3zKlz6abMiyIykn2NUDv
Gw7ZRbi8oZeYF4mJJxbbidwSY12KvxAxn1+wcfsQBNWJ
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:39:37 2025 by rpki-client