Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/Qh43lPsEBt8Qo6vC3vfbFfDaGOk.roa
File: Qh43lPsEBt8Qo6vC3vfbFfDaGOk.roa (raw, json)
Hash identifier: 0PE+I+ON1fJ6KKIKU0z2pGuB7EWsXXtH4Cby91UNdDc=
Subject key identifier: 42:1E:37:94:FB:04:06:DF:10:A3:AB:C2:DE:F7:DB:15:F0:DA:18:E9
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 0195DCF4901206B85C442384279FBF06DB07
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/Qh43lPsEBt8Qo6vC3vfbFfDaGOk.roa
Signing time: Fri 28 Mar 2025 13:32:49 +0000
ROA not before: Fri 28 Mar 2025 13:32:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215287
IP address blocks: 91.108.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:dc:f4:90:12:06:b8:5c:44:23:84:27:9f:bf:06:db:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Mar 28 13:32:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=421e3794fb0406df10a3abc2def7db15f0da18e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f5:63:f1:b9:e0:a3:d6:54:a1:28:a6:10:37:
38:cd:b2:d1:3a:ca:d1:6f:3d:6c:75:5f:38:d9:08:
bc:c8:0a:92:71:85:7c:8a:31:06:7c:bb:f5:67:14:
b0:da:66:78:0a:b0:15:ec:0a:b4:1d:5a:d2:c8:c5:
ea:31:4c:bd:0d:0f:2d:4a:6c:14:e2:ca:31:5e:fe:
b1:09:ae:f3:9f:37:db:62:b9:f5:67:08:13:4b:85:
db:cb:4e:e8:1a:0d:de:86:60:df:c1:75:c0:20:2c:
9c:8d:03:76:83:5f:39:16:53:1f:95:0b:2d:11:cd:
d2:ab:89:6c:e1:01:95:a6:0b:48:25:1c:a9:17:1b:
9a:a6:ea:1f:1f:4e:78:e6:1f:44:14:c9:27:4d:0f:
fc:14:79:2a:e4:4c:4a:5e:6f:70:7b:32:24:5d:c2:
c2:88:e8:98:2d:58:93:13:12:f2:ce:31:f6:c4:f3:
41:27:06:c7:db:ee:16:f4:cf:69:73:94:71:cc:06:
b0:36:9c:33:a8:39:ff:51:c5:91:e7:7a:ee:62:68:
39:7f:76:9d:c7:0d:76:93:a5:88:22:93:5a:75:07:
e0:42:84:e6:34:b2:aa:c2:33:28:97:e6:5c:40:bd:
4e:ef:58:85:9e:0b:13:3d:25:45:54:89:7b:7e:e1:
be:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1E:37:94:FB:04:06:DF:10:A3:AB:C2:DE:F7:DB:15:F0:DA:18:E9
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/Qh43lPsEBt8Qo6vC3vfbFfDaGOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.253.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:71:33:8a:0e:78:d2:cd:8b:6a:ac:eb:7c:46:64:c2:d1:9c:
05:49:fa:c1:c5:18:17:45:2a:ed:bd:92:30:4b:6b:7b:87:eb:
5a:6b:23:aa:d6:42:59:74:cb:35:57:43:cb:12:b1:fb:81:f9:
3e:c8:41:b5:58:a1:d5:94:fb:d1:06:d6:50:a9:17:08:42:0d:
4f:8d:0c:9b:63:ba:57:e2:77:e1:ea:4f:e0:9c:27:28:35:6f:
ef:0e:d6:3e:6e:b7:88:98:c2:26:64:1d:9f:6e:7d:3b:a0:1c:
73:40:f5:f5:9d:e9:0d:1b:ed:9c:c0:ba:46:9a:ef:c0:79:bd:
dc:90:25:36:8a:92:b6:71:71:10:30:56:11:5a:ac:1e:7e:56:
41:9d:1a:95:af:b6:34:99:86:43:77:87:88:4e:19:c4:8f:fc:
58:2c:f0:09:4e:19:48:37:0e:21:55:3f:95:96:0d:07:3c:6d:
2c:d9:a5:3d:24:f2:d5:2a:3f:a0:0a:1e:c7:5b:fa:53:a3:65:
a1:81:1a:23:f8:ba:e3:f5:01:83:73:62:d7:0a:6e:fb:4f:88:
73:c3:2a:72:67:64:84:3e:2c:6f:5a:46:1b:23:d6:0e:9d:b6:
61:e4:ab:0d:5d:2e:7f:ac:e0:d2:00:be:4d:38:7f:c0:97:91:
aa:89:36:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:32:00 2025 by rpki-client