Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/6b6ef2-82e2-429a-a797-c682232b5525/1/QyB8VESxnvcN-KNMQllwLjZ4-jo.roa
File: QyB8VESxnvcN-KNMQllwLjZ4-jo.roa (raw, json)
Hash identifier: 9MyNKKIK+C2h3GEJi6qTGGLT12OujONMx92KqHiCGz4=
Subject key identifier: 43:20:7C:54:44:B1:9E:F7:0D:F8:A3:4C:42:59:70:2E:36:78:FA:3A
Certificate issuer: /CN=a82a0705aa84a63b01bf7d56d61ffef55d984992
Certificate serial: 028E9095
Authority key identifier: A8:2A:07:05:AA:84:A6:3B:01:BF:7D:56:D6:1F:FE:F5:5D:98:49:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qCoHBaqEpjsBv31W1h_-9V2YSZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/6b6ef2-82e2-429a-a797-c682232b5525/1/QyB8VESxnvcN-KNMQllwLjZ4-jo.roa
Signing time: Sat 01 Jan 2022 12:02:50 +0000
ROA not before: Sat 01 Jan 2022 12:02:50 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61971
IP address blocks: 91.226.136.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 42897557 (0x28e9095)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a82a0705aa84a63b01bf7d56d61ffef55d984992
Validity
Not Before: Jan 1 12:02:50 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=43207c5444b19ef70df8a34c4259702e3678fa3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:47:14:37:97:b2:f8:26:4d:10:43:e5:a2:b3:
88:af:cc:90:9b:9f:78:19:dc:10:6a:fb:79:ed:64:
cb:01:5c:b9:86:1d:47:a6:ea:dd:5f:2f:70:d6:05:
ba:52:11:71:9a:0e:52:67:5a:f7:1f:16:84:d2:66:
ad:93:08:54:62:83:36:e3:89:bf:6b:a9:1d:b2:b6:
f2:2b:d8:ea:a3:c7:71:d8:88:7f:b1:07:5c:d2:ea:
23:98:34:09:9e:36:c5:d1:cb:ab:9a:f3:50:96:22:
20:fe:5e:68:98:43:d8:ea:c0:89:7c:45:c8:27:7d:
99:9f:7d:8c:55:51:c1:c5:49:b9:d6:41:60:dd:df:
d1:c0:cd:de:06:19:cc:b0:3b:ee:24:f3:91:bc:85:
6c:a8:e8:04:ce:38:99:e0:e4:81:bb:fd:0e:3a:61:
91:02:de:a0:d2:ba:1c:3f:ea:c1:a6:38:2f:1a:2a:
04:1a:7b:1d:56:62:e0:7d:36:e6:dc:5d:88:66:29:
81:1a:aa:09:55:1b:b5:71:39:22:bc:2b:3b:4c:ab:
94:4f:41:e6:7f:7f:0c:51:c7:73:2f:a4:8e:b8:ea:
47:f9:9e:a0:5f:9a:8d:1e:0a:44:ca:5a:1a:ce:45:
92:44:0a:2b:12:06:c9:4e:06:c3:6e:97:17:8e:22:
de:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:20:7C:54:44:B1:9E:F7:0D:F8:A3:4C:42:59:70:2E:36:78:FA:3A
X509v3 Authority Key Identifier:
keyid:A8:2A:07:05:AA:84:A6:3B:01:BF:7D:56:D6:1F:FE:F5:5D:98:49:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qCoHBaqEpjsBv31W1h_-9V2YSZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6b6ef2-82e2-429a-a797-c682232b5525/1/QyB8VESxnvcN-KNMQllwLjZ4-jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/6b6ef2-82e2-429a-a797-c682232b5525/1/qCoHBaqEpjsBv31W1h_-9V2YSZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.136.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:19:2c:6d:74:4b:33:37:17:d0:35:32:d0:b9:d0:a3:5a:a2:
e8:fb:5e:d2:c8:20:10:25:3e:c9:a1:e4:75:8a:2e:b5:08:de:
75:4b:2b:4f:cb:d2:19:22:24:08:9c:24:8e:4b:e7:eb:c2:16:
5d:76:6b:ee:b2:b1:0c:28:9e:d0:79:e0:34:db:16:a7:5b:a6:
e8:f7:3c:40:9b:b7:b7:53:3e:c8:3a:44:e5:ac:42:32:14:d0:
e7:8d:8f:fa:f7:d8:7e:4b:94:18:02:2a:5e:b7:8b:62:b9:22:
90:1d:e0:57:69:37:39:54:f1:65:aa:36:e8:f1:3f:0e:fe:0d:
5b:e1:18:e9:74:26:69:ba:75:60:9a:b9:13:a3:c9:3f:59:d2:
9f:e8:0d:aa:41:d8:55:0e:fc:b0:dc:25:63:84:1a:7c:5e:1b:
42:8f:43:a2:47:f0:b4:05:c6:b2:55:4b:b0:4a:3d:38:b7:76:
96:04:f1:f7:5a:a4:d0:52:59:ac:d9:5c:d2:d9:6e:51:65:8b:
3e:79:3b:1a:39:20:f8:8e:1a:5d:34:29:b7:ea:fc:d2:ed:a3:
be:cb:50:b1:e7:d8:af:5b:5c:df:5f:68:21:ce:a1:d9:48:2a:
fe:b1:6f:f6:f8:47:7c:06:0a:25:8b:60:2c:9a:9e:8e:17:27:
cb:2a:ca:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 20:49:24 2025 by rpki-client