Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/CIdrqclZnSmjRFuSBAbdKW19zw4.roa
File: CIdrqclZnSmjRFuSBAbdKW19zw4.roa (raw, json)
Hash identifier: 9geTO1Fm8NuZG2BgvP5/MT++gloTQfJHuTiZpCoTKho=
Subject key identifier: 08:87:6B:A9:C9:59:9D:29:A3:44:5B:92:04:06:DD:29:6D:7D:CF:0E
Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Certificate serial: 0194282381FAC9051F6D7BA5767D514804A6
Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/CIdrqclZnSmjRFuSBAbdKW19zw4.roa
Signing time: Thu 02 Jan 2025 17:50:03 +0000
ROA not before: Thu 02 Jan 2025 17:50:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 91.149.200.0/24 maxlen: 24
91.149.229.0/24 maxlen: 24
91.149.230.0/24 maxlen: 24
91.149.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:81:fa:c9:05:1f:6d:7b:a5:76:7d:51:48:04:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9
Validity
Not Before: Jan 2 17:50:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=08876ba9c9599d29a3445b920406dd296d7dcf0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:6d:77:f6:ab:b0:2c:bb:a2:66:aa:e2:b5:2a:
c7:ab:01:47:1a:a2:de:58:93:85:2b:b6:c7:a9:f3:
98:4b:65:5c:88:cb:d5:4d:ee:65:ce:0c:d3:bb:96:
9b:24:6e:75:42:82:62:16:88:3e:c9:da:d7:89:c7:
dd:7e:bc:89:ba:da:4e:97:22:5a:87:20:c0:18:42:
3a:41:3c:bd:6e:3f:99:7e:cc:f4:03:59:26:f8:bf:
02:bc:9c:6d:0a:3c:be:fc:5f:84:45:95:ef:62:8f:
87:fa:c5:d2:f2:71:20:17:76:64:db:2d:c6:c2:54:
44:9e:8a:10:c9:34:70:0c:40:52:51:de:95:c9:7c:
ed:b1:08:b3:99:00:1a:80:a3:91:74:71:e0:1d:66:
5c:48:70:f6:1d:8f:e0:1a:9d:0e:44:df:ad:f0:03:
d7:12:61:a6:bf:46:1a:5c:2c:4e:e7:2e:79:96:9f:
82:8b:92:8b:a3:42:86:86:de:e6:df:09:ea:b4:3d:
a5:4b:d1:8a:71:2c:54:cd:06:70:b3:7f:cc:82:c5:
b8:c8:5d:7a:20:10:67:d9:f7:ac:aa:40:b6:6f:97:
13:00:7f:af:e7:e0:6c:77:d8:51:f3:d8:ef:d9:73:
3b:2b:22:e5:74:2b:4e:84:6e:a4:68:1e:ab:b0:db:
a3:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:87:6B:A9:C9:59:9D:29:A3:44:5B:92:04:06:DD:29:6D:7D:CF:0E
X509v3 Authority Key Identifier:
keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/CIdrqclZnSmjRFuSBAbdKW19zw4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.200.0/24
91.149.229.0-91.149.231.255
Signature Algorithm: sha256WithRSAEncryption
17:50:07:46:59:25:38:98:01:00:97:06:37:2a:65:20:44:d8:
5b:f4:42:ed:03:0c:17:b1:1a:c9:71:63:38:7b:3e:66:e1:1a:
32:88:49:01:87:ee:a3:da:a8:cd:76:8d:31:c9:c2:8d:4a:07:
c5:1e:08:2e:4c:99:08:b2:56:fd:9d:a6:82:86:33:cd:66:57:
b8:a5:9a:d3:8c:e0:66:e2:c0:dd:cf:d5:63:91:78:ae:43:a7:
a1:77:86:f9:34:46:f8:68:90:41:39:e5:6d:ee:30:a4:fc:aa:
22:8c:25:a9:8e:a6:d2:ff:0e:7e:79:77:f1:e0:cf:68:14:1b:
ae:13:32:ae:3a:8c:21:ea:82:20:1f:d1:74:ce:5c:d9:a9:b0:
ae:08:6d:eb:c3:15:b2:d3:c9:6e:5d:e0:62:66:96:41:13:14:
de:5f:93:16:db:95:0c:95:1f:2d:da:0b:d4:76:0d:c9:21:94:
da:ab:05:85:87:89:38:c6:09:9d:34:45:4f:77:52:81:da:28:
92:6b:e5:c6:81:60:83:5b:25:6f:44:03:5e:0b:16:e6:1b:ad:
b5:4f:60:27:93:39:e3:22:56:9f:30:f4:48:57:e2:1c:4c:cb:
e5:de:ba:25:db:31:56:62:c1:75:aa:ab:88:d4:cc:42:68:f4:
10:bd:87:87
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgISAZQoI4H6yQUfbXuldn1RSASmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk
YzJhZjkwHhcNMjUwMTAyMTc1MDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwODg3NmJhOWM5NTk5ZDI5YTM0NDViOTIwNDA2ZGQyOTZkN2RjZjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42139quwLLuiZqritSrHqwFHGqLe
WJOFK7bHqfOYS2VciMvVTe5lzgzTu5abJG51QoJiFog+ydrXicfdfryJutpOlyJa
hyDAGEI6QTy9bj+Zfsz0A1km+L8CvJxtCjy+/F+ERZXvYo+H+sXS8nEgF3Zk2y3G
wlREnooQyTRwDEBSUd6VyXztsQizmQAagKORdHHgHWZcSHD2HY/gGp0ORN+t8APX
EmGmv0YaXCxO5y55lp+Ci5KLo0KGht7m3wnqtD2lS9GKcSxUzQZws3/MgsW4yF16
IBBn2fesqkC2b5cTAH+v5+Bsd9hR89jv2XM7KyLldCtOhG6kaB6rsNujYQIDAQAB
o4ICFzCCAhMwHQYDVR0OBBYEFAiHa6nJWZ0po0RbkgQG3Sltfc8OMB8GA1UdIwQY
MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt
N2E5MzY3NTFkYjFiLzEvQ0lkcnFjbFpuU21qUkZ1U0JBYmRLVzE5enc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi
LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQAW5XIMAwD
BABbleUDBANbleAwDQYJKoZIhvcNAQELBQADggEBABdQB0ZZJTiYAQCXBjcqZSBE
2Fv0Qu0DDBexGslxYzh7PmbhGjKISQGH7qPaqM12jTHJwo1KB8UeCC5MmQiyVv2d
poKGM81mV7ilmtOM4GbiwN3P1WOReK5Dp6F3hvk0RvhokEE55W3uMKT8qiKMJamO
ptL/Dn55d/Hgz2gUG64TMq46jCHqgiAf0XTOXNmpsK4IbevDFbLTyW5d4GJmlkET
FN5fkxbblQyVHy3aC9R2DckhlNqrBYWHiTjGCZ00RU93UoHaKJJr5caBYINbJW9E
A14LFuYbrbVPYCeTOeMiVp8w9EhX4hxMy+XeuiXbMVZiwXWqq4jUzEJo9BC9h4c=
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:25:04 2025 by rpki-client