Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/jFqlbrJh0TyGkEhrngC57XJ-Gb0.roa
File: jFqlbrJh0TyGkEhrngC57XJ-Gb0.roa (raw, json)
Hash identifier: Ci3+1/Zt1KX21Iibq86D4q3nL8Q6qZ17OnVkiVZ8OJA=
Subject key identifier: 8C:5A:A5:6E:B2:61:D1:3C:86:90:48:6B:9E:00:B9:ED:72:7E:19:BD
Certificate issuer: /CN=42d4f6e42295f5403b845b52bba9679761d884d8
Certificate serial: 019424B2B43747B09D2E161D275B642B5204
Authority key identifier: 42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/jFqlbrJh0TyGkEhrngC57XJ-Gb0.roa
Signing time: Thu 02 Jan 2025 01:47:58 +0000
ROA not before: Thu 02 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16509
IP address blocks: 91.198.107.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:b4:37:47:b0:9d:2e:16:1d:27:5b:64:2b:52:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42d4f6e42295f5403b845b52bba9679761d884d8
Validity
Not Before: Jan 2 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8c5aa56eb261d13c8690486b9e00b9ed727e19bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:76:0a:df:26:7c:bd:65:a7:3c:c9:96:e0:ab:
f3:72:f8:42:20:05:c7:9f:65:c4:cb:aa:ff:e9:25:
21:57:8f:e9:e5:02:47:43:a7:1c:0c:69:97:1e:0a:
da:7d:08:ba:5c:82:8b:87:4e:a6:b1:38:ae:22:c9:
a6:f2:cc:60:67:e7:51:94:b3:f1:04:a7:cd:55:98:
63:d2:dd:2d:83:ec:d7:7d:bb:76:2e:30:58:fe:37:
ee:d4:21:20:8f:b6:8e:14:c0:95:78:13:98:af:10:
c6:98:cb:29:8f:a1:0f:7c:63:28:b7:35:83:84:b7:
e0:fb:b2:9c:e2:3e:45:8e:df:70:d8:76:cd:cf:3d:
77:c2:b9:9d:94:4b:f1:06:ca:ed:16:0a:f4:45:f2:
2b:86:6d:95:fb:30:62:a5:01:15:0b:60:62:46:38:
8b:24:10:e3:03:79:f0:cb:8f:df:c7:a3:f9:50:ce:
71:a8:ee:32:a3:fd:68:65:f5:4a:7d:a9:18:74:95:
38:43:ab:2c:bb:f2:5c:b4:f9:79:bf:26:fa:85:c0:
25:a7:ec:b1:ce:dd:9f:0f:f3:85:66:95:4c:00:64:
d2:6f:83:e0:db:51:6e:d4:7a:31:bb:38:b6:8a:b4:
96:c8:e0:1c:3e:0d:49:18:d4:a1:f6:fe:00:b4:bd:
33:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5A:A5:6E:B2:61:D1:3C:86:90:48:6B:9E:00:B9:ED:72:7E:19:BD
X509v3 Authority Key Identifier:
keyid:42:D4:F6:E4:22:95:F5:40:3B:84:5B:52:BB:A9:67:97:61:D8:84:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QtT25CKV9UA7hFtSu6lnl2HYhNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/jFqlbrJh0TyGkEhrngC57XJ-Gb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/60522f-3539-4c6d-94c1-3c76dd491006/1/QtT25CKV9UA7hFtSu6lnl2HYhNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.107.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:18:d9:63:a7:cd:79:27:fa:43:1b:f0:a1:7e:99:e3:31:47:
dd:46:85:b7:09:92:6f:55:0f:cc:f7:3f:59:f7:55:9c:e6:a5:
31:bd:d1:67:c0:58:a9:e8:50:4d:a8:ec:5a:6d:50:f1:c0:6e:
15:ac:c3:7e:13:cd:9a:2e:1d:75:6b:09:3c:e9:d6:ed:b4:b9:
7d:d9:39:91:fc:de:15:94:9e:bc:57:bd:f8:15:ef:d0:c0:5d:
81:27:9e:74:64:0e:87:df:a7:78:f3:5f:fc:bb:aa:4d:50:4a:
65:40:69:2e:d1:c6:84:eb:3c:52:3d:7d:30:04:6a:43:7f:c0:
ba:af:90:00:76:07:d8:44:49:f5:be:bf:23:69:27:17:80:50:
e3:d7:e9:f3:72:94:ee:4f:cb:8d:37:70:8e:c7:d7:50:ac:ee:
5b:d9:35:b9:42:be:b8:35:bf:b6:9e:14:16:fc:57:cc:2a:ee:
ac:26:75:bc:ab:e6:97:39:77:13:5c:79:d3:ac:7f:75:e8:56:
91:d6:24:2c:97:99:73:60:b8:5e:16:0f:fc:98:a3:85:4c:e1:
42:98:82:00:19:14:4d:88:71:88:b0:23:0e:f6:6e:c3:3c:ca:
06:9e:a6:72:e7:ee:a9:1e:e6:51:9a:89:34:ae:28:f1:a5:4a:
48:09:69:a0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQksrQ3R7CdLhYdJ1tkK1IEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyZDRmNmU0MjI5NWY1NDAzYjg0NWI1MmJiYTk2Nzk3NjFk
ODg0ZDgwHhcNMjUwMTAyMDE0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YzVhYTU2ZWIyNjFkMTNjODY5MDQ4NmI5ZTAwYjllZDcyN2UxOWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXYK3yZ8vWWnPMmW4KvzcvhCIAXH
n2XEy6r/6SUhV4/p5QJHQ6ccDGmXHgrafQi6XIKLh06msTiuIsmm8sxgZ+dRlLPx
BKfNVZhj0t0tg+zXfbt2LjBY/jfu1CEgj7aOFMCVeBOYrxDGmMspj6EPfGMotzWD
hLfg+7Kc4j5Fjt9w2HbNzz13wrmdlEvxBsrtFgr0RfIrhm2V+zBipQEVC2BiRjiL
JBDjA3nwy4/fx6P5UM5xqO4yo/1oZfVKfakYdJU4Q6ssu/JctPl5vyb6hcAlp+yx
zt2fD/OFZpVMAGTSb4Pg21Fu1Hoxuzi2irSWyOAcPg1JGNSh9v4AtL0zDQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIxapW6yYdE8hpBIa54Aue1yfhm9MB8GA1UdIwQY
MBaAFELU9uQilfVAO4RbUrupZ5dh2ITYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS82MDUyMmYtMzUzOS00YzZkLTk0YzEt
M2M3NmRkNDkxMDA2LzEvakZxbGJySmgwVHlHa0Vocm5nQzU3WEotR2IwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS82MDUyMmYtMzUzOS00YzZkLTk0YzEtM2M3NmRkNDkxMDA2
LzEvUXRUMjVDS1Y5VUE3aEZ0U3U2bG5sMkhZaE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8ZrMA0G
CSqGSIb3DQEBCwUAA4IBAQBuGNljp815J/pDG/ChfpnjMUfdRoW3CZJvVQ/M9z9Z
91Wc5qUxvdFnwFip6FBNqOxabVDxwG4VrMN+E82aLh11awk86dbttLl92TmR/N4V
lJ68V734Fe/QwF2BJ550ZA6H36d481/8u6pNUEplQGku0caE6zxSPX0wBGpDf8C6
r5AAdgfYREn1vr8jaScXgFDj1+nzcpTuT8uNN3COx9dQrO5b2TW5Qr64Nb+2nhQW
/FfMKu6sJnW8q+aXOXcTXHnTrH916FaR1iQsl5lzYLheFg/8mKOFTOFCmIIAGRRN
iHGIsCMO9m7DPMoGnqZy5+6pHuZRmok0rijxpUpICWmg
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:16:58 2025 by rpki-client