Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/qxGIc5V2UGOo-5RQHYlRF2fA71w.roa
File: qxGIc5V2UGOo-5RQHYlRF2fA71w.roa (raw, json)
Hash identifier: h5a4tqGEifTEaj/BVdKELRwwwknFMCLaIX6FM9TuR/s=
Subject key identifier: AB:11:88:73:95:76:50:63:A8:FB:94:50:1D:89:51:17:67:C0:EF:5C
Certificate issuer: /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Certificate serial: 01856FF9677B938D308268EDC251DBB42BE8
Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/qxGIc5V2UGOo-5RQHYlRF2fA71w.roa
Signing time: Mon 02 Jan 2023 00:54:54 +0000
ROA not before: Mon 02 Jan 2023 00:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49169
IP address blocks: 91.212.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:67:7b:93:8d:30:82:68:ed:c2:51:db:b4:2b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Validity
Not Before: Jan 2 00:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab11887395765063a8fb94501d89511767c0ef5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:c9:88:98:b6:f0:b2:f3:d2:8f:84:a7:8f:e2:
1f:33:0f:1b:1c:bc:92:20:37:b6:24:76:56:24:69:
d9:51:94:91:ec:75:95:9a:5e:e9:4a:2d:91:d8:27:
7b:7b:de:e1:b1:8b:1e:ad:bc:9e:c7:56:83:fe:8b:
12:8a:52:3c:7b:6a:c9:78:cf:c9:a4:cd:84:eb:40:
94:f6:aa:8f:8a:43:ae:70:df:98:2f:8a:e4:43:b8:
f6:72:41:06:63:79:67:ad:c7:7e:4f:5a:f2:2b:6b:
c4:4d:67:a9:35:c2:0e:ea:d6:b1:fe:92:a5:95:07:
b5:cd:32:b2:5f:0a:2d:9a:a3:91:1b:d7:8d:f1:e0:
54:83:1f:65:15:27:24:c9:0e:61:b4:e8:33:41:ea:
f7:d9:55:2b:f2:5f:eb:51:df:a3:d0:6a:41:b9:5a:
dd:c3:53:b7:1c:47:4a:5d:01:8a:7b:12:d4:03:aa:
a0:dc:3b:64:fc:c2:5f:99:b9:27:79:b9:6a:16:60:
9e:ff:bd:82:29:13:5f:70:b6:f8:7a:ec:80:0b:22:
86:ca:ca:0e:e3:4d:54:a1:53:d2:12:a6:ba:49:5d:
6f:3b:67:cd:47:57:66:23:fc:54:9e:e3:ae:c8:50:
82:2b:e7:aa:87:c3:27:de:4d:e7:33:a6:91:bc:b1:
6f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:11:88:73:95:76:50:63:A8:FB:94:50:1D:89:51:17:67:C0:EF:5C
X509v3 Authority Key Identifier:
keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/qxGIc5V2UGOo-5RQHYlRF2fA71w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.162.0/24
Signature Algorithm: sha256WithRSAEncryption
19:7b:0a:12:07:01:81:86:da:fc:14:d5:72:67:14:aa:bc:25:
2e:11:15:6d:e7:b7:a3:0e:28:25:71:e1:e8:c2:0f:f9:54:ab:
41:ff:f3:86:3d:4f:87:5b:39:1d:23:43:bc:ba:56:28:91:7f:
03:70:94:18:81:f2:0b:4c:cb:c7:e4:eb:9b:9b:f0:c1:dc:b8:
8c:93:01:9c:59:4e:12:08:4b:bc:1b:fa:fd:6d:ce:1c:9d:6d:
47:b6:f2:f0:bc:dd:ba:24:6f:37:90:fe:f5:e4:3e:6a:a0:08:
7c:72:ac:28:54:60:05:5a:e4:5a:0d:30:eb:62:68:35:89:05:
94:fb:a8:28:c8:71:50:67:0d:61:a2:02:57:f2:8c:6f:62:a3:
59:35:cd:fa:37:0f:6b:19:17:ae:8b:b4:67:89:f2:a7:c4:19:
62:74:69:49:5d:92:28:96:d3:0d:44:2c:a2:75:72:e8:c1:7c:
f2:8d:8d:ee:62:26:62:cc:42:1a:b1:ad:a5:0e:48:ab:ef:db:
91:a3:ee:e9:0f:d2:47:15:ff:e6:8c:ba:b6:49:9c:83:4c:28:
ae:dd:fd:12:1d:a5:18:e6:08:83:13:22:89:3c:95:d7:21:8a:
31:cf:57:6e:29:05:32:a5:c8:9c:b1:9c:89:f4:42:44:cd:45:
32:05:61:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:33 2025 by rpki-client