Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/QOPe1cLW7EaWSDo3eq_hBQK39Wo.roa
File: QOPe1cLW7EaWSDo3eq_hBQK39Wo.roa (raw, json)
Hash identifier: N6OU5OMUXPa8ri34/Wuotfq2VOjXlYSfy+37I0hPZzM=
Subject key identifier: 40:E3:DE:D5:C2:D6:EC:46:96:48:3A:37:7A:AF:E1:05:02:B7:F5:6A
Certificate issuer: /CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Certificate serial: 019427B56F00975B660C8204205F0C00DB06
Authority key identifier: E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/QOPe1cLW7EaWSDo3eq_hBQK39Wo.roa
Signing time: Thu 02 Jan 2025 15:49:49 +0000
ROA not before: Thu 02 Jan 2025 15:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8811
IP address blocks: 91.231.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:6f:00:97:5b:66:0c:82:04:20:5f:0c:00:db:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2e4cfe47aed51ec71aa75f536189bad6e862deb
Validity
Not Before: Jan 2 15:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=40e3ded5c2d6ec4696483a377aafe10502b7f56a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:55:ff:22:63:9f:42:63:63:db:a7:22:83:0c:
dc:3f:6d:f6:d6:72:64:d3:e7:d4:80:14:b9:79:31:
51:7e:cb:73:12:af:d7:73:69:c7:fe:8f:7a:c0:43:
2e:e2:37:16:54:c5:2b:c6:00:2e:56:c0:5a:71:b0:
b5:cb:6d:92:f2:d2:9a:5d:75:54:1c:a5:1a:c5:81:
a1:5a:a7:59:27:80:af:b7:e9:9a:de:05:fb:0e:ab:
c0:3f:4b:45:23:7e:7e:a5:46:be:ea:a1:40:9b:9e:
09:05:42:4e:d6:3a:7b:53:1b:e2:7b:a2:3a:99:9c:
c2:24:b8:51:3f:7f:e6:5c:36:40:26:20:87:e5:82:
d0:7b:52:9a:45:27:b0:db:60:48:fb:25:f9:95:99:
55:cf:50:12:b0:39:dc:a3:dc:a3:27:ce:c1:fd:00:
74:35:42:d0:16:40:26:da:3f:d3:cc:43:50:73:89:
c6:0b:c4:b7:58:e2:43:b5:a9:2a:c3:92:cc:ad:70:
a3:45:47:7e:e3:59:a2:a6:3a:02:b6:91:48:c0:ed:
90:c6:00:38:e6:1e:54:6c:5d:4d:89:91:3e:96:fa:
2d:fa:d8:57:40:c0:e2:68:4e:81:5a:62:18:78:11:
02:da:46:61:63:4c:8b:36:2e:94:99:72:7e:04:bb:
62:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E3:DE:D5:C2:D6:EC:46:96:48:3A:37:7A:AF:E1:05:02:B7:F5:6A
X509v3 Authority Key Identifier:
keyid:E2:E4:CF:E4:7A:ED:51:EC:71:AA:75:F5:36:18:9B:AD:6E:86:2D:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4uTP5HrtUexxqnX1NhibrW6GLes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/QOPe1cLW7EaWSDo3eq_hBQK39Wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/e4ccbb-fd61-4fc4-aabd-a1883c8b1fe4/1/4uTP5HrtUexxqnX1NhibrW6GLes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.148.0/22
Signature Algorithm: sha256WithRSAEncryption
18:5f:77:a1:4f:c5:d4:6a:47:d6:47:4b:ce:db:20:53:72:58:
3e:65:b3:1b:ae:6e:0d:8b:aa:1c:1b:09:32:00:6f:35:0d:12:
0d:44:8c:d7:7f:05:fe:ef:48:23:26:0c:54:0b:a7:17:36:1a:
c6:28:a9:bc:6a:1a:1d:5e:d5:0f:23:b1:1f:ba:2b:39:05:a6:
ac:4b:ad:ac:d4:71:83:3a:b1:c0:98:a6:32:a9:09:8f:4a:34:
a4:3a:e7:79:a0:42:57:56:5d:cd:f3:7e:88:4f:e3:fe:8f:49:
73:d3:70:ce:9a:60:44:f6:8e:09:7a:91:86:01:9a:41:b2:61:
0f:75:c9:dc:a9:e9:11:68:1a:c0:74:ee:6d:ae:59:f7:81:da:
99:a8:20:32:aa:03:d2:82:cd:8e:f3:12:07:dc:02:2c:ff:00:
b8:2f:18:23:20:9e:4f:0c:05:66:74:16:c9:0e:48:54:e6:50:
7b:22:a4:0f:45:90:9a:a1:95:14:2f:1e:61:73:34:48:ba:b0:
e4:ec:7f:50:59:3c:76:8a:ff:82:f3:7b:6f:af:4f:40:13:25:
5e:29:74:94:88:f2:e5:43:35:45:95:6a:f2:17:bc:f1:88:1c:
5f:a4:91:b6:75:17:5c:3e:dc:7b:1b:42:d1:c7:39:4e:ad:ec:
15:12:46:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:28:17 2025 by rpki-client