Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/QyiciSZUfA8bsg20fCYi0TNFfDg.roa
File: QyiciSZUfA8bsg20fCYi0TNFfDg.roa (raw, json)
Hash identifier: nzxPGRU8Smq/P38KhFAc/j16WQcASyHCTt9cYC5aCls=
Subject key identifier: 43:28:9C:89:26:54:7C:0F:1B:B2:0D:B4:7C:26:22:D1:33:45:7C:38
Certificate issuer: /CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Certificate serial: 019424B3FF1053508F35BAB145DC173E7733
Authority key identifier: 72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/QyiciSZUfA8bsg20fCYi0TNFfDg.roa
Signing time: Thu 02 Jan 2025 01:49:23 +0000
ROA not before: Thu 02 Jan 2025 01:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48642
IP address blocks: 91.211.20.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ff:10:53:50:8f:35:ba:b1:45:dc:17:3e:77:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72a3c6ca435ebdbf96fffa4c5d98e4600828f712
Validity
Not Before: Jan 2 01:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=43289c8926547c0f1bb20db47c2622d133457c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:e5:71:d7:fd:a2:76:25:e7:8d:5a:e5:ad:7b:
54:42:a4:60:c6:20:8a:a4:86:65:d1:8e:34:e3:61:
c1:83:c9:0c:2f:89:42:fb:a0:95:a1:14:51:74:66:
ba:39:95:50:49:e7:04:60:e8:de:9b:1e:ce:75:1d:
06:86:42:8a:f7:60:48:03:a5:99:22:b3:f7:6e:b9:
92:5a:93:9e:1b:01:c9:df:7d:21:7e:7b:56:e6:30:
d7:f9:a5:fd:35:2a:c3:12:ea:9a:b9:da:c0:9a:c9:
bd:2e:7d:c5:de:77:51:02:cb:9a:90:52:42:51:ae:
19:99:0d:f5:a4:92:4f:cc:9b:70:65:f8:48:fc:b8:
30:21:2b:8c:fa:75:17:56:eb:44:d9:41:f4:d4:16:
0d:a3:ed:81:35:33:cf:e8:62:3f:17:6a:22:98:fd:
3b:81:30:06:54:d6:e6:7c:e0:d0:3b:a6:b1:c1:bf:
c1:e2:b0:85:84:b8:ab:10:45:79:d7:c1:bc:79:83:
64:e6:26:6d:69:b2:22:72:95:f9:e0:e8:25:b5:5c:
7d:53:88:2f:8c:08:67:e2:56:d3:4c:98:4e:7c:7c:
db:25:df:f2:cc:79:4f:a9:5e:00:64:a2:82:aa:82:
9f:38:ef:75:91:de:4c:1a:00:09:37:4e:40:cc:44:
ea:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:28:9C:89:26:54:7C:0F:1B:B2:0D:B4:7C:26:22:D1:33:45:7C:38
X509v3 Authority Key Identifier:
keyid:72:A3:C6:CA:43:5E:BD:BF:96:FF:FA:4C:5D:98:E4:60:08:28:F7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cqPGykNevb-W__pMXZjkYAgo9xI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/QyiciSZUfA8bsg20fCYi0TNFfDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ed1594-2b3f-4962-acab-ceb21b8e832b/1/cqPGykNevb-W__pMXZjkYAgo9xI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.20.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:3f:e0:07:9e:7f:dc:cb:d2:ac:f2:6b:d1:e9:fa:1c:f3:cf:
f5:3f:fe:39:cc:dd:1d:d0:87:35:ca:58:ea:6e:0d:f6:fa:d4:
6d:7e:8c:9b:b9:1f:34:8e:eb:4e:48:67:4f:73:dd:7a:8a:a8:
4b:6a:27:00:4f:0b:ca:0b:09:6e:34:e2:e5:45:fb:cf:4d:5d:
9c:e3:86:e7:2e:98:de:79:1f:50:5a:ec:68:02:28:02:04:3c:
2a:32:cf:c9:ad:c2:5a:bc:83:5d:e7:d4:58:9b:7f:b5:a2:0d:
93:a9:a3:13:42:4b:c4:9a:5b:dc:09:a7:a9:da:f2:84:56:95:
2d:bf:da:c2:16:9c:3e:c1:63:0e:69:cb:73:f1:b4:3c:45:21:
ca:fa:44:0d:d5:94:f7:69:1b:db:37:af:bb:96:67:84:20:02:
a9:2a:fa:33:99:bd:72:3d:6c:e2:d7:f6:38:bb:6f:88:82:2c:
57:1e:be:84:d2:5c:73:e7:13:d9:cb:40:f2:30:a7:b7:aa:ea:
60:28:43:e7:e3:f0:01:c0:83:9b:27:92:36:5f:9b:99:3b:cd:
64:5f:42:5f:7e:94:d3:18:85:65:a3:8e:f8:58:e5:4e:90:7d:
9e:6b:0d:e2:88:a2:99:7f:3e:c4:5f:fe:0e:52:c9:6f:5d:11:
3b:a1:a5:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:46 2025 by rpki-client on console.sobornost.net