Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/BQ2_9-ItF5dIDSCPAfxbIaGC5hA.roa
File: BQ2_9-ItF5dIDSCPAfxbIaGC5hA.roa (raw, json)
Hash identifier: +G1ycNpVwWYjvSoa5pj4YTiRmj97XRdNfodhiBjoJD8=
Subject key identifier: 05:0D:BF:F7:E2:2D:17:97:48:0D:20:8F:01:FC:5B:21:A1:82:E6:10
Certificate issuer: /CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Certificate serial: 0194228D3D1843E1D401623AB24D844ABF33
Authority key identifier: 26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/BQ2_9-ItF5dIDSCPAfxbIaGC5hA.roa
Signing time: Wed 01 Jan 2025 15:47:49 +0000
ROA not before: Wed 01 Jan 2025 15:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28985
IP address blocks: 91.216.109.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:3d:18:43:e1:d4:01:62:3a:b2:4d:84:4a:bf:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=262f7322fbe9743eb471383a090b35b5296a2a8a
Validity
Not Before: Jan 1 15:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=050dbff7e22d1797480d208f01fc5b21a182e610
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cd:ff:35:2e:36:04:a4:c1:2c:9f:01:36:d8:
3e:a9:ac:14:f1:7f:25:9b:ed:8d:df:c7:a9:db:fc:
eb:95:d4:81:19:d2:31:ad:91:72:b5:91:3b:a3:bb:
68:4d:0f:28:65:2b:14:b6:21:a6:17:32:4f:14:b9:
b3:21:2d:c9:51:9d:cc:8e:6b:ee:dc:ca:d6:a9:1b:
3c:d4:ab:78:0f:d9:0d:4c:0c:5c:35:63:a7:cf:e1:
83:fc:a8:cf:18:33:9b:2d:2b:ff:4f:86:e7:31:48:
75:95:7b:a3:a5:4d:93:23:30:33:2a:aa:de:0c:a3:
a9:2e:a1:e0:bd:ad:a2:e5:59:82:ca:2e:dd:44:93:
f7:b2:1c:f7:f6:6b:12:ae:28:82:89:3d:36:d5:cf:
cc:33:05:b8:12:9e:87:20:61:c3:53:94:2d:f6:c9:
a2:f4:54:7d:bb:73:bf:41:e1:cf:b5:a6:c1:4c:15:
f2:a7:03:9e:34:f8:5d:c3:95:2a:f4:ab:fa:08:26:
fd:cc:32:63:e8:a2:e7:24:c8:19:70:39:a3:16:68:
6c:b9:85:fc:b5:98:39:c1:a0:ea:6d:5b:d5:50:fa:
f3:d7:db:5e:1b:05:ee:36:7a:0c:4d:a3:20:71:e4:
1d:26:89:f9:e4:69:a1:89:15:e4:6c:99:19:e9:5f:
13:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:0D:BF:F7:E2:2D:17:97:48:0D:20:8F:01:FC:5B:21:A1:82:E6:10
X509v3 Authority Key Identifier:
keyid:26:2F:73:22:FB:E9:74:3E:B4:71:38:3A:09:0B:35:B5:29:6A:2A:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ji9zIvvpdD60cTg6CQs1tSlqKoo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/BQ2_9-ItF5dIDSCPAfxbIaGC5hA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/d07b15-2855-4388-bcb3-50e129c8a36c/1/Ji9zIvvpdD60cTg6CQs1tSlqKoo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.109.0/24
Signature Algorithm: sha256WithRSAEncryption
88:1d:a9:18:8a:9c:44:34:c6:55:40:77:c4:d6:e6:f7:2b:e7:
b6:36:03:c7:5b:6b:44:d9:99:2e:e4:19:3f:25:a1:a8:7a:17:
d9:5e:19:b9:05:75:98:fe:39:ed:7f:17:02:e6:bd:6c:bc:1c:
79:13:69:13:b3:24:1e:d1:50:7e:5f:07:28:32:21:2e:92:b1:
9b:dc:b8:56:e7:b5:4b:60:c9:af:7a:47:cb:4f:69:c3:be:f3:
36:3f:0e:a4:26:41:e9:15:7a:4d:ed:b0:8f:a7:e8:5b:00:1e:
87:5d:38:d9:3f:ce:39:ee:4d:a6:9c:2b:6c:b4:ad:1c:16:70:
44:72:87:98:e3:90:7a:bb:a6:c5:80:35:6e:ef:ad:81:02:fc:
68:b8:bd:9f:59:e8:33:48:34:fe:bc:c3:80:86:7a:6f:d8:52:
1b:90:46:f4:49:27:0e:ba:b0:8c:f4:e4:20:ef:7a:af:88:6e:
8d:9a:6c:d0:bf:d1:d8:9e:3e:22:c3:62:41:32:45:32:c6:0a:
b1:eb:2f:0a:29:48:74:e0:21:18:41:fd:72:6c:58:8e:e6:3b:
a8:c6:a3:91:0a:91:cc:e7:9a:d5:d6:38:12:04:ac:9f:d9:12:
f0:4a:a4:47:b9:00:b3:bf:00:fa:58:7f:05:3d:1d:5c:62:18:
4b:10:27:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:05 2025 by rpki-client on console.sobornost.net