Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/9bf57f-28c5-4e86-bb6e-cd0b648c3cb5/1/QPLTKNa1uGdeCgCQHe6L0OgDjy4.roa
File: QPLTKNa1uGdeCgCQHe6L0OgDjy4.roa (raw, json)
Hash identifier: wCEEzXsB1StYJ4BVwQHEHOIGyajC2Jo74z1War1r7WE=
Subject key identifier: 40:F2:D3:28:D6:B5:B8:67:5E:0A:00:90:1D:EE:8B:D0:E8:03:8F:2E
Certificate issuer: /CN=92ac933be12405a56f194d7dad703eb28e131837
Certificate serial: 03984AF7
Authority key identifier: 92:AC:93:3B:E1:24:05:A5:6F:19:4D:7D:AD:70:3E:B2:8E:13:18:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kqyTO-EkBaVvGU19rXA-so4TGDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/9bf57f-28c5-4e86-bb6e-cd0b648c3cb5/1/QPLTKNa1uGdeCgCQHe6L0OgDjy4.roa
Signing time: Thu 27 Jan 2022 19:13:58 +0000
ROA not before: Thu 27 Jan 2022 19:13:58 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 29262
IP address blocks: 141.98.51.0/24 maxlen: 24
141.98.50.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 60312311 (0x3984af7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92ac933be12405a56f194d7dad703eb28e131837
Validity
Not Before: Jan 27 19:13:58 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=40f2d328d6b5b8675e0a00901dee8bd0e8038f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:20:31:a8:be:e4:e0:dc:1a:69:b8:fe:75:f1:
e7:08:77:a8:1f:86:48:83:c8:4a:40:74:8d:ae:07:
40:25:01:b6:f4:8f:f3:22:b5:a4:da:e5:de:1f:42:
f9:bb:47:97:a9:78:0d:1e:6d:c5:e7:99:6a:27:dd:
e4:ac:c6:8c:d1:14:ce:71:e5:db:91:04:c0:cf:47:
f4:0d:fc:73:4e:16:ba:13:b9:78:48:56:95:15:80:
66:c5:75:9b:31:52:22:5b:56:94:00:ce:99:f9:a7:
7c:1f:e8:06:e6:31:87:6c:b7:fc:8f:cf:3d:95:82:
f5:fc:42:e2:0a:ba:99:f5:bb:79:49:a5:60:52:03:
09:4c:08:d4:da:08:07:84:81:ee:3d:a2:e8:b4:2e:
14:56:e6:43:c2:ed:4e:a2:78:3b:56:ad:b2:6e:9d:
10:ba:76:c1:30:f9:73:5e:da:1c:c7:32:be:c9:e6:
8d:c5:43:53:95:6c:bb:df:c5:44:86:21:32:81:b5:
f4:f5:a7:35:06:d6:e0:12:61:85:d1:c5:cc:e0:58:
10:5d:6c:4e:70:f8:6b:1e:13:80:07:18:44:73:7a:
67:51:ba:af:be:ee:2d:af:fa:50:69:a7:bd:3f:bd:
8f:0a:ef:67:85:76:2c:1c:e9:07:31:60:71:16:32:
a3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F2:D3:28:D6:B5:B8:67:5E:0A:00:90:1D:EE:8B:D0:E8:03:8F:2E
X509v3 Authority Key Identifier:
keyid:92:AC:93:3B:E1:24:05:A5:6F:19:4D:7D:AD:70:3E:B2:8E:13:18:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kqyTO-EkBaVvGU19rXA-so4TGDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9bf57f-28c5-4e86-bb6e-cd0b648c3cb5/1/QPLTKNa1uGdeCgCQHe6L0OgDjy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/9bf57f-28c5-4e86-bb6e-cd0b648c3cb5/1/kqyTO-EkBaVvGU19rXA-so4TGDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.50.0/23
Signature Algorithm: sha256WithRSAEncryption
83:71:ed:73:fd:c5:17:ac:ba:f9:89:a7:1f:8e:ff:73:87:81:
3e:af:34:a9:56:66:48:21:3f:16:1f:61:10:0b:c8:e7:2f:79:
14:16:a8:44:1d:d1:de:e0:f4:a1:4e:ac:11:e3:fa:7a:73:44:
cc:cd:f7:d3:29:5f:62:7d:66:f0:6d:32:7d:66:28:1d:ba:68:
c7:cf:23:b3:50:4f:3d:85:0c:56:6f:18:7e:36:e3:81:0f:83:
5a:73:09:66:0a:a8:e2:57:1b:41:1b:98:bd:54:0d:5d:96:d2:
a5:41:f6:fe:5e:e8:4a:55:7a:54:b6:77:21:f4:fa:d9:e0:85:
69:93:ad:d3:cf:c9:f3:f1:ee:f7:60:2b:ff:41:2a:4e:de:d6:
28:c8:08:cc:53:9a:7e:5c:df:30:f5:4b:e3:a8:1c:68:e2:ce:
16:65:ae:7a:78:12:a4:d9:6a:c9:e6:e2:be:22:49:e1:ad:64:
a1:78:4e:6e:d9:c4:24:bf:ee:a6:96:f9:6f:e6:01:8d:27:23:
37:95:73:0f:ff:02:75:bf:17:14:80:75:91:4b:05:58:2d:f4:
b6:24:b0:2e:93:1d:3d:86:ab:70:59:e1:0b:66:ec:52:c0:a5:
82:1b:42:2c:0a:25:97:f8:85:ac:14:f9:08:0d:6c:a0:c4:72:
d3:55:63:75
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA5hK9zANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5
MmFjOTMzYmUxMjQwNWE1NmYxOTRkN2RhZDcwM2ViMjhlMTMxODM3MB4XDTIyMDEy
NzE5MTM1OFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoNDBmMmQzMjhkNmI1
Yjg2NzVlMGEwMDkwMWRlZThiZDBlODAzOGYyZTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKsgMai+5ODcGmm4/nXx5wh3qB+GSIPISkB0ja4HQCUBtvSP
8yK1pNrl3h9C+btHl6l4DR5txeeZaifd5KzGjNEUznHl25EEwM9H9A38c04WuhO5
eEhWlRWAZsV1mzFSIltWlADOmfmnfB/oBuYxh2y3/I/PPZWC9fxC4gq6mfW7eUml
YFIDCUwI1NoIB4SB7j2i6LQuFFbmQ8LtTqJ4O1atsm6dELp2wTD5c17aHMcyvsnm
jcVDU5Vsu9/FRIYhMoG19PWnNQbW4BJhhdHFzOBYEF1sTnD4ax4TgAcYRHN6Z1G6
r77uLa/6UGmnvT+9jwrvZ4V2LBzpBzFgcRYyo3ECAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBRA8tMo1rW4Z14KAJAd7ovQ6AOPLjAfBgNVHSMEGDAWgBSSrJM74SQFpW8Z
TX2tcD6yjhMYNzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2txeVRPLUVrQmFWdkdVMTlyWEEtc280VEdEYy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvZjUvOWJmNTdmLTI4YzUtNGU4Ni1iYjZlLWNkMGI2NDhjM2NiNS8x
L1FQTFRLTmExdUdkZUNnQ1FIZTZMME9nRGp5NC5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjUv
OWJmNTdmLTI4YzUtNGU4Ni1iYjZlLWNkMGI2NDhjM2NiNS8xL2txeVRPLUVrQmFW
dkdVMTlyWEEtc280VEdEYy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAY1iMjANBgkqhkiG9w0BAQsFAAOC
AQEAg3Htc/3FF6y6+YmnH47/c4eBPq80qVZmSCE/Fh9hEAvI5y95FBaoRB3R3uD0
oU6sEeP6enNEzM330ylfYn1m8G0yfWYoHbpox88js1BPPYUMVm8YfjbjgQ+DWnMJ
Zgqo4lcbQRuYvVQNXZbSpUH2/l7oSlV6VLZ3IfT62eCFaZOt08/J8/Hu92Ar/0Eq
Tt7WKMgIzFOaflzfMPVL46gcaOLOFmWuengSpNlqyebiviJJ4a1koXhObtnEJL/u
ppb5b+YBjScjN5VzD/8Cdb8XFIB1kUsFWC30tiSwLpMdPYarcFnhC2bsUsClghtC
LAoll/iFrBT5CA1soMRy01VjdQ==
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:01 2025 by rpki-client