Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/QZ7skJXgQRFqntNBd1BDZYJ2MWk.roa
File: QZ7skJXgQRFqntNBd1BDZYJ2MWk.roa (raw, json)
Hash identifier: CbVvmtl0o72dHF2J/T++G1v8mnEiV+dsaEnj6rQ3POQ=
Subject key identifier: 41:9E:EC:90:95:E0:41:11:6A:9E:D3:41:77:50:43:65:82:76:31:69
Certificate issuer: /CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Certificate serial: 019054BE5741603106C91FCC759CC0669948
Authority key identifier: C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/QZ7skJXgQRFqntNBd1BDZYJ2MWk.roa
Signing time: Wed 26 Jun 2024 13:31:18 +0000
ROA not before: Wed 26 Jun 2024 13:31:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44279
IP address blocks: 91.210.130.0/24 maxlen: 24
91.210.131.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:54:be:57:41:60:31:06:c9:1f:cc:75:9c:c0:66:99:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c61b51ebc84180f0a6b232e87df9d61c90faab
Validity
Not Before: Jun 26 13:31:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=419eec9095e041116a9ed3417750436582763169
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2b:72:e4:cd:17:87:6c:bc:2e:97:5a:6a:41:
94:08:05:fc:87:7d:34:43:96:2b:59:65:f0:f4:08:
7c:2b:83:cd:1d:a2:60:e6:32:0a:6a:8c:29:19:2c:
36:26:ea:35:30:52:d8:48:fe:ef:d1:57:85:3a:7b:
b4:36:09:ad:97:53:c2:53:b2:2e:64:29:a2:94:2c:
11:2c:cb:6f:83:9b:d0:3f:52:9f:24:b5:9d:e2:aa:
53:dd:7d:4f:8c:86:6c:67:38:81:a1:ee:0f:77:5e:
98:29:44:60:5d:68:09:19:0e:ec:e1:7f:94:e7:8c:
14:5e:f6:2f:df:0b:e4:cd:92:79:07:df:be:f1:9b:
50:2f:08:2a:de:6e:77:8d:67:6b:99:ad:fc:be:d4:
44:a6:b1:fa:52:2a:18:c4:05:35:a0:06:88:19:15:
cc:db:77:5c:e2:e1:0f:79:be:4d:30:d7:34:94:3f:
eb:fe:66:cf:08:b8:c4:63:a0:e6:a8:48:bf:a7:76:
e9:67:68:8e:a4:00:fb:33:59:ee:5d:54:b7:c8:08:
95:88:37:1b:ea:c3:e7:9a:e8:a5:bc:f3:0b:5a:3f:
5d:38:2b:10:b9:0c:14:55:67:07:46:0d:0f:2b:59:
af:c7:fb:46:51:1b:9b:6a:98:b1:1d:56:d4:f5:d9:
52:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9E:EC:90:95:E0:41:11:6A:9E:D3:41:77:50:43:65:82:76:31:69
X509v3 Authority Key Identifier:
keyid:C3:C6:1B:51:EB:C8:41:80:F0:A6:B2:32:E8:7D:F9:D6:1C:90:FA:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8YbUevIQYDwprIy6H351hyQ-qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/QZ7skJXgQRFqntNBd1BDZYJ2MWk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/7aadab-959a-4663-b935-8f9827344790/1/w8YbUevIQYDwprIy6H351hyQ-qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.130.0/23
Signature Algorithm: sha256WithRSAEncryption
54:1e:30:8a:25:8d:df:2d:3f:0f:c5:e6:81:22:2d:23:7e:6f:
f7:b7:0b:d6:9e:92:b8:07:05:9f:2b:fb:e0:fa:ae:70:b4:8b:
ce:9b:08:cd:4c:8e:86:6b:74:f4:c6:04:e4:e7:00:28:98:60:
82:c4:12:77:73:fa:25:fc:19:ad:82:40:10:13:e8:e7:41:4f:
24:0b:d5:af:32:31:29:29:57:87:95:c7:e2:8e:f8:73:92:75:
64:a8:ee:c2:f9:69:ed:7b:4d:7c:79:94:2f:85:77:ad:e9:90:
fe:56:bc:a0:66:6f:10:00:4b:e7:d4:49:7a:0d:3e:ea:39:32:
c9:e0:bb:bd:f8:b3:64:71:27:3d:23:78:29:49:db:91:d0:ba:
df:6f:a2:c8:3b:c3:42:c3:e6:b4:15:e9:98:68:4b:76:37:3b:
bb:8c:58:7a:52:5b:2d:88:b2:8f:cb:1d:52:89:b4:bc:da:f0:
1c:71:15:5e:95:97:05:c5:87:25:10:71:92:62:e7:36:d5:8d:
e6:32:45:4b:da:28:29:e9:7a:e5:0d:0a:1c:ab:af:6a:a1:11:
ff:c2:27:73:7c:da:5d:48:65:a6:b3:0f:cd:e7:ba:82:c4:86:
a0:f0:5c:d3:0f:0b:63:67:dc:d8:23:92:92:f7:8c:02:cc:7d:
1e:0d:87:a2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZBUvldBYDEGyR/MdZzAZplIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzYxYjUxZWJjODQxODBmMGE2YjIzMmU4N2RmOWQ2MWM5
MGZhYWIwHhcNMjQwNjI2MTMzMTE4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTllZWM5MDk1ZTA0MTExNmE5ZWQzNDE3NzUwNDM2NTgyNzYzMTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Cty5M0Xh2y8LpdaakGUCAX8h300
Q5YrWWXw9Ah8K4PNHaJg5jIKaowpGSw2Juo1MFLYSP7v0VeFOnu0Ngmtl1PCU7Iu
ZCmilCwRLMtvg5vQP1KfJLWd4qpT3X1PjIZsZziBoe4Pd16YKURgXWgJGQ7s4X+U
54wUXvYv3wvkzZJ5B9++8ZtQLwgq3m53jWdrma38vtREprH6UioYxAU1oAaIGRXM
23dc4uEPeb5NMNc0lD/r/mbPCLjEY6DmqEi/p3bpZ2iOpAD7M1nuXVS3yAiViDcb
6sPnmuilvPMLWj9dOCsQuQwUVWcHRg0PK1mvx/tGURubapixHVbU9dlSNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEGe7JCV4EERap7TQXdQQ2WCdjFpMB8GA1UdIwQY
MBaAFMPGG1HryEGA8KayMuh9+dYckPqrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhZYlVldklRWUR3cHJJeTZIMzUxaHlRLXFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS83YWFkYWItOTU5YS00NjYzLWI5MzUt
OGY5ODI3MzQ0NzkwLzEvUVo3c2tKWGdRUkZxbnROQmQxQkRaWUoyTVdrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS83YWFkYWItOTU5YS00NjYzLWI5MzUtOGY5ODI3MzQ0Nzkw
LzEvdzhZYlVldklRWUR3cHJJeTZIMzUxaHlRLXFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW9KCMA0G
CSqGSIb3DQEBCwUAA4IBAQBUHjCKJY3fLT8PxeaBIi0jfm/3twvWnpK4BwWfK/vg
+q5wtIvOmwjNTI6Ga3T0xgTk5wAomGCCxBJ3c/ol/BmtgkAQE+jnQU8kC9WvMjEp
KVeHlcfijvhzknVkqO7C+Wnte018eZQvhXet6ZD+VrygZm8QAEvn1El6DT7qOTLJ
4Lu9+LNkcSc9I3gpSduR0Lrfb6LIO8NCw+a0FemYaEt2Nzu7jFh6UlstiLKPyx1S
ibS82vAccRVelZcFxYclEHGSYuc21Y3mMkVL2igp6XrlDQocq69qoRH/widzfNpd
SGWmsw/N57qCxIag8FzTDwtjZ9zYI5KS94wCzH0eDYei
-----END CERTIFICATE-----
Generated at Wed Dec 25 21:26:36 2024 by rpki-client on console.sobornost.net