Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/qsQCT6UNZXlqsu2v2DLFUykH7sk.roa
File: qsQCT6UNZXlqsu2v2DLFUykH7sk.roa (raw, json)
Hash identifier: GXnPWBj7LIlynkpTHAuJodlLFiW6fUYPHh7FYEk3i3A=
Subject key identifier: AA:C4:02:4F:A5:0D:65:79:6A:B2:ED:AF:D8:32:C5:53:29:07:EE:C9
Certificate issuer: /CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Certificate serial: 019427B3809A273E2C1A8224C19BDFDFDD15
Authority key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/qsQCT6UNZXlqsu2v2DLFUykH7sk.roa
Signing time: Thu 02 Jan 2025 15:47:42 +0000
ROA not before: Thu 02 Jan 2025 15:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8315
IP address blocks: 91.223.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:80:9a:27:3e:2c:1a:82:24:c1:9b:df:df:dd:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Validity
Not Before: Jan 2 15:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aac4024fa50d65796ab2edafd832c5532907eec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0a:1c:03:56:9b:b6:13:0e:ab:5e:b6:76:48:
40:2d:1b:46:65:05:10:10:5b:df:2e:42:f3:df:4f:
c2:f5:34:66:9d:b8:90:5e:35:e5:27:dd:e4:ac:82:
e6:0a:de:4d:16:23:32:5c:2e:31:1f:0c:0a:b6:5b:
5c:b7:8f:ca:8a:08:fc:4b:3d:34:9e:30:4a:e1:0a:
e1:5a:f0:f6:56:62:5a:fb:92:f8:1a:54:81:4e:b8:
17:12:14:67:05:dd:b6:32:39:3d:da:78:e4:4f:58:
7c:58:bc:a0:a1:c1:82:94:c1:50:c0:18:34:bc:2c:
3c:e5:2c:7e:2e:15:b5:19:64:e4:7b:ca:ee:df:fd:
22:c2:65:66:4c:8c:0a:82:48:61:01:c9:bf:92:35:
32:1a:f1:fa:eb:86:47:3e:87:03:b4:49:cd:00:7e:
74:de:ff:21:22:8d:48:11:4b:1e:5f:d6:e6:d6:c7:
3c:f9:f5:fc:50:03:ad:a0:fa:db:ef:59:4c:83:f4:
0a:1f:15:f7:5c:50:f5:a9:f4:15:7a:ee:15:bf:e4:
1d:4d:dc:a9:77:e0:da:88:a1:fd:a5:7c:96:a7:78:
9f:3f:11:60:33:a8:84:ee:d3:2e:42:a6:c7:0b:14:
76:3b:a1:fb:66:ca:9d:44:b4:97:3a:3c:d2:b5:26:
d7:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C4:02:4F:A5:0D:65:79:6A:B2:ED:AF:D8:32:C5:53:29:07:EE:C9
X509v3 Authority Key Identifier:
keyid:6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/qsQCT6UNZXlqsu2v2DLFUykH7sk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.124.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:8d:11:76:cf:eb:2f:bf:88:10:57:04:24:61:05:11:9a:c0:
35:9e:a8:e4:3b:ef:3b:a8:66:4d:2f:80:2e:ee:75:60:8d:66:
ed:fa:30:9b:6d:cb:0a:75:23:85:99:99:1f:f4:e6:78:eb:76:
a3:6f:c6:ea:88:13:cd:ce:8e:5e:c0:e2:1f:40:35:bd:9f:24:
f5:d0:58:c6:61:b3:25:67:af:a0:16:fc:ed:26:cc:88:57:a4:
cc:a2:ed:35:ed:fd:ce:23:b8:b9:0b:95:bc:c4:dc:24:2c:9c:
34:65:e9:f9:a8:ed:c1:8b:74:62:a4:d1:8f:74:a4:ef:1b:1f:
3b:a6:06:b3:34:13:d4:2f:38:f9:2e:d2:7f:8d:0d:75:d5:fb:
29:ee:63:d3:76:bd:7b:a9:db:53:e5:8e:e2:19:7a:cf:cc:88:
e5:27:25:2f:42:73:9d:24:bf:9a:da:f4:cf:0e:32:aa:45:15:
21:af:16:b7:9a:24:84:1f:83:f2:39:56:a6:64:a4:a1:c4:67:
13:69:b7:2a:1e:a2:fd:fa:ed:9d:3b:28:ea:66:36:9d:1d:bb:
79:20:78:44:10:1d:b5:d6:18:a2:b5:b0:84:03:97:16:90:74:
cf:d9:a6:cb:a3:3d:ae:cb:fd:8c:a4:d9:1d:67:9b:9c:75:b7:
17:b9:6b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:01 2025 by rpki-client on console.sobornost.net