Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/qqKoCyySI4a_WTetnQrd8Jl_ZVc.roa
File: qqKoCyySI4a_WTetnQrd8Jl_ZVc.roa (raw, json)
Hash identifier: G4fhfng6uOCmbE8g9dL8V3XeBetf5eidwSTRl7HfvEE=
Subject key identifier: AA:A2:A8:0B:2C:92:23:86:BF:59:37:AD:9D:0A:DD:F0:99:7F:65:57
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01961BBF1EA82D152E0F261B9BBBEB3CFAFC
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/qqKoCyySI4a_WTetnQrd8Jl_ZVc.roa
Signing time: Wed 09 Apr 2025 18:10:32 +0000
ROA not before: Wed 09 Apr 2025 18:10:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210976
IP address blocks: 45.91.236.0/24 maxlen: 24
45.91.237.0/24 maxlen: 24
91.240.254.0/24 maxlen: 24
185.201.28.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:1b:bf:1e:a8:2d:15:2e:0f:26:1b:9b:bb:eb:3c:fa:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Apr 9 18:10:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aaa2a80b2c922386bf5937ad9d0addf0997f6557
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d1:94:a0:76:4d:67:4e:25:c5:4a:f2:f3:a6:
8b:fe:77:b4:8d:ee:16:f0:1c:5b:89:b3:a6:12:5f:
30:d7:f4:7b:70:d0:a6:75:26:d2:b8:ad:82:a8:44:
d6:01:bc:9b:7b:45:a2:43:f5:58:f4:1f:76:a7:7b:
e4:af:2c:09:97:fc:1a:ee:48:62:79:7d:f1:e9:ab:
c1:58:1d:35:8a:e3:54:67:0e:14:24:09:c1:34:6a:
c1:c8:5a:5e:a5:39:fa:b0:cb:81:5b:32:ce:67:c0:
d4:0e:20:1a:97:4c:db:ba:0c:fc:87:c0:15:ef:4f:
2f:76:6a:22:f8:5c:df:3a:07:bd:5b:6d:c6:94:91:
1e:84:6f:a4:17:78:4e:c0:4b:c1:c8:88:7f:4d:39:
8c:4d:86:5f:29:48:f5:3b:a4:20:57:36:fd:6b:e4:
1c:bd:62:12:9c:b0:03:08:48:a4:1e:d6:5b:5a:37:
f6:c8:78:6a:9a:c1:72:0d:1c:46:3a:0a:b6:54:8a:
75:41:52:8f:5a:ad:c1:b8:f7:53:65:17:aa:8d:d8:
9b:d1:c7:f7:d5:c3:9e:e9:69:85:68:fc:8d:e5:dc:
47:ab:2a:18:1f:70:63:8c:35:b7:5e:e9:84:b2:21:
46:b4:17:e1:79:5a:29:c9:30:e5:8c:01:48:1a:2a:
2b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A2:A8:0B:2C:92:23:86:BF:59:37:AD:9D:0A:DD:F0:99:7F:65:57
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/qqKoCyySI4a_WTetnQrd8Jl_ZVc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.236.0/23
91.240.254.0/24
185.201.28.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:4c:d8:51:fe:71:4d:80:4f:98:e5:98:eb:47:dc:f1:d7:a0:
44:59:de:76:1a:ea:10:85:95:67:4d:51:84:e2:14:7c:de:dd:
25:49:cf:61:4b:1e:d2:fe:9f:f9:f2:68:a9:97:6d:22:5c:5f:
b2:71:8e:2d:3d:5a:e8:b8:78:07:12:bf:d1:e3:1b:c8:c1:86:
12:43:86:09:2f:d1:36:07:a0:6d:51:b8:5f:17:0e:a1:53:77:
b5:68:61:73:dd:22:fe:a4:c5:50:1d:58:dc:43:23:a7:52:82:
18:b7:c7:9c:a8:0a:11:4c:60:4d:bb:51:08:e4:ca:2f:5c:07:
f0:ad:9d:16:cf:24:63:d9:08:41:f2:77:1d:d0:3c:ab:f2:92:
7c:3f:95:8e:e0:3b:99:55:3f:f3:fd:cc:41:22:db:6d:d8:1b:
55:42:40:b8:f0:ed:d3:d0:10:ef:9c:47:c7:39:5d:0d:90:37:
03:f5:3f:70:ed:67:40:6c:da:ec:58:d3:e2:62:07:1c:15:b3:
58:8b:ac:e0:a1:df:c5:64:cd:40:f8:8e:2e:66:37:96:7e:6c:
49:9a:b2:a9:6e:d0:24:3d:50:b7:52:b8:c1:9e:97:af:54:9e:
79:a8:b2:2a:ae:ca:37:e4:e4:1c:34:87:1e:6c:db:94:c1:41:
be:42:54:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:30 2025 by rpki-client on console.sobornost.net