Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/799f28-5270-4929-990a-0909b41f55f1/1/SQUAN5WYovx12eWa8CdrB2tmkjg.roa
File: SQUAN5WYovx12eWa8CdrB2tmkjg.roa (raw, json)
Hash identifier: uSjmKjfohlh26tejPFdpoQCfYsw5Y2rIWuQYJf2/zsc=
Subject key identifier: 49:05:00:37:95:98:A2:FC:75:D9:E5:9A:F0:27:6B:07:6B:66:92:38
Certificate issuer: /CN=c556a6c781cba4ce5bcb142fb42afd881a9fa667
Certificate serial: 01856D0AB80F38643B3A3152758AABAB5A59
Authority key identifier: C5:56:A6:C7:81:CB:A4:CE:5B:CB:14:2F:B4:2A:FD:88:1A:9F:A6:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xVamx4HLpM5byxQvtCr9iBqfpmc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/799f28-5270-4929-990a-0909b41f55f1/1/SQUAN5WYovx12eWa8CdrB2tmkjg.roa
Signing time: Sun 01 Jan 2023 11:14:57 +0000
ROA not before: Sun 01 Jan 2023 11:14:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29024
IP address blocks: 185.3.48.0/22 maxlen: 22
91.189.40.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:b8:0f:38:64:3b:3a:31:52:75:8a:ab:ab:5a:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c556a6c781cba4ce5bcb142fb42afd881a9fa667
Validity
Not Before: Jan 1 11:14:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=490500379598a2fc75d9e59af0276b076b669238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:31:06:5f:a9:1a:0d:d7:46:21:67:ef:e2:91:
ea:b8:3a:49:a3:13:c0:57:cf:aa:44:ef:d4:a5:2b:
5d:f7:2f:05:89:5f:12:65:b6:9d:31:2c:20:80:76:
ca:3e:f9:cc:58:bd:31:91:46:9c:a5:13:5a:7e:39:
b4:ef:ad:fa:28:10:52:5c:41:5e:93:6f:c2:6c:6e:
ec:1e:15:bb:09:07:4a:ad:cf:6c:74:15:7a:49:11:
77:8a:01:cf:e5:4f:31:c2:56:0e:57:8d:7d:d9:df:
6a:b7:cc:9b:61:9c:a4:87:1d:32:30:d0:84:8e:7e:
1c:8f:0c:da:fd:7a:d3:62:c6:f0:38:dd:24:8e:b7:
06:2c:0b:2b:af:95:72:50:00:89:f2:1a:4d:d5:0f:
8b:2b:b2:6c:9e:98:9a:e0:14:df:0b:6b:b9:5c:5f:
be:fc:69:44:d9:20:79:1f:fe:75:7f:8c:0e:60:94:
3b:3b:26:e4:72:0b:50:cf:3e:1e:22:56:6a:15:1f:
8b:ae:6a:42:9f:ee:18:a0:74:05:8b:16:25:1c:b1:
05:6b:f1:28:3a:05:e8:2a:4b:4f:10:1f:45:0f:1e:
a4:53:61:51:56:43:c4:d1:bc:eb:d4:f7:d1:7c:d4:
59:6c:ad:36:73:84:27:45:d4:cb:d6:af:ff:4a:bc:
37:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:05:00:37:95:98:A2:FC:75:D9:E5:9A:F0:27:6B:07:6B:66:92:38
X509v3 Authority Key Identifier:
keyid:C5:56:A6:C7:81:CB:A4:CE:5B:CB:14:2F:B4:2A:FD:88:1A:9F:A6:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xVamx4HLpM5byxQvtCr9iBqfpmc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/799f28-5270-4929-990a-0909b41f55f1/1/SQUAN5WYovx12eWa8CdrB2tmkjg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/799f28-5270-4929-990a-0909b41f55f1/1/xVamx4HLpM5byxQvtCr9iBqfpmc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.189.40.0/21
185.3.48.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:b5:43:e3:94:d7:21:7d:9a:d4:82:dd:ec:76:56:ed:82:24:
3f:78:00:25:3e:30:68:25:f5:fa:ab:6a:54:71:35:64:c7:de:
40:c4:c6:8d:fb:81:6f:39:69:06:e0:33:2b:73:23:cd:31:f4:
3e:b4:9d:01:8f:e5:20:76:84:70:f4:d7:1d:97:04:da:dc:8b:
13:43:f8:0a:ad:fc:4f:81:d4:d0:5f:28:97:3d:2f:24:78:ef:
bb:a7:a0:e3:70:03:6f:62:f9:cd:12:64:0a:11:57:d7:f1:79:
b4:c0:07:c6:1b:2d:ca:b1:6b:4e:56:62:5a:61:ae:21:75:96:
1b:9b:f2:5e:3c:d7:30:c7:a8:b5:37:97:f5:31:1e:c4:46:7b:
6e:ce:9b:60:eb:dd:d2:74:b1:67:b5:db:2f:5b:96:a4:71:2f:
79:58:62:9e:ce:b0:4f:19:d5:7b:18:6e:0d:45:9e:91:08:b3:
17:b9:3d:a6:c0:4d:29:90:24:61:f5:58:38:fc:b7:4f:64:39:
b8:4c:42:16:52:e8:93:1f:6a:65:6f:51:0c:e6:cd:f2:7b:57:
70:3f:d6:9d:91:6f:98:25:36:d3:d9:c1:5d:21:d8:e2:9c:5c:
06:90:a1:cd:59:c4:ec:da:16:e6:bf:89:21:ac:d6:aa:7b:64:
23:3a:6e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 07:29:44 2025 by rpki-client