Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/62ba04-8c01-4845-95bc-d0729d90e27a/1/0nckyU3FAa632p69srB4C7P-ujM.roa
File: 0nckyU3FAa632p69srB4C7P-ujM.roa (raw, json)
Hash identifier: w2X3sQ92sDIq0uwqwTaP+v2+SINfIedcVhed8o/rP9Y=
Subject key identifier: D2:77:24:C9:4D:C5:01:AE:B7:DA:9E:BD:B2:B0:78:0B:B3:FE:BA:33
Certificate issuer: /CN=feac88baf93dc07a1d29a50db3d50575d332c799
Certificate serial: 018673DD2104C3BDDEF64FC4CCCC28626A4D
Authority key identifier: FE:AC:88:BA:F9:3D:C0:7A:1D:29:A5:0D:B3:D5:05:75:D3:32:C7:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_qyIuvk9wHodKaUNs9UFddMyx5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/62ba04-8c01-4845-95bc-d0729d90e27a/1/0nckyU3FAa632p69srB4C7P-ujM.roa
Signing time: Tue 21 Feb 2023 12:05:17 +0000
ROA not before: Tue 21 Feb 2023 12:05:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50738
IP address blocks: 91.236.79.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:73:dd:21:04:c3:bd:de:f6:4f:c4:cc:cc:28:62:6a:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feac88baf93dc07a1d29a50db3d50575d332c799
Validity
Not Before: Feb 21 12:05:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d27724c94dc501aeb7da9ebdb2b0780bb3feba33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0b:0e:40:52:10:b0:3f:6e:e5:49:3d:ed:0a:
1d:2f:a5:11:ae:5d:15:b3:04:9e:98:b2:53:49:b2:
d4:c8:75:85:fd:ef:20:d0:a5:2f:b2:89:1e:05:ec:
6b:f6:71:db:dd:96:3a:32:e8:b8:8e:e7:b7:57:e8:
d8:6b:cb:f7:93:c0:b5:2e:4b:c6:ec:cd:28:f9:a1:
41:a5:34:78:cd:83:fd:4e:88:4d:1f:d0:9b:1b:95:
a6:d7:bb:4c:09:33:7c:80:e3:ff:c4:a5:0e:94:d3:
db:3b:1c:1f:7f:5a:40:38:79:89:4e:1d:13:eb:48:
23:31:67:a7:53:7d:95:e7:20:f9:06:9d:69:6c:7e:
a9:7b:9a:af:f0:1b:dd:fd:3d:9c:ab:55:db:bc:79:
45:f1:46:49:0e:e3:0b:92:a9:e2:92:ed:60:c6:56:
84:16:cd:7c:f2:57:a3:34:1c:d1:8c:d9:61:e6:ee:
37:2a:5c:f2:49:10:69:01:d9:a7:25:51:e7:70:2b:
a1:08:2d:2f:8b:64:c8:1e:c5:31:44:24:40:b2:ad:
97:f5:91:d3:9b:02:fb:2a:b4:9e:33:f3:30:89:02:
9d:a4:81:09:74:b6:21:54:82:00:95:c5:fe:80:d5:
19:90:4c:7f:e1:18:a1:3d:67:31:57:a2:db:a8:6f:
62:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:77:24:C9:4D:C5:01:AE:B7:DA:9E:BD:B2:B0:78:0B:B3:FE:BA:33
X509v3 Authority Key Identifier:
keyid:FE:AC:88:BA:F9:3D:C0:7A:1D:29:A5:0D:B3:D5:05:75:D3:32:C7:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_qyIuvk9wHodKaUNs9UFddMyx5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/62ba04-8c01-4845-95bc-d0729d90e27a/1/0nckyU3FAa632p69srB4C7P-ujM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/62ba04-8c01-4845-95bc-d0729d90e27a/1/_qyIuvk9wHodKaUNs9UFddMyx5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.79.0/24
Signature Algorithm: sha256WithRSAEncryption
30:ed:1c:22:76:46:7a:43:00:a5:b0:8d:94:1e:48:b0:3b:20:
e5:ab:dc:e3:47:a6:73:71:55:f3:10:57:21:b7:25:c1:a6:5b:
c3:6c:50:d5:1a:d0:93:92:5d:ae:7d:e3:e9:2e:2d:e0:36:db:
6e:30:d4:e8:55:32:61:18:06:be:e4:e4:11:d1:37:5a:a2:19:
30:8d:d3:f6:83:f5:45:38:5b:db:74:32:9b:8c:01:1d:22:44:
05:56:90:50:aa:3c:95:51:bd:a1:8f:80:b4:ed:fb:db:b8:00:
24:80:67:6a:78:49:cd:85:ad:38:d3:a6:f0:24:51:8d:67:78:
4e:ed:aa:d7:82:e6:45:c1:d8:24:29:4a:c2:42:7c:6e:47:ef:
03:36:a4:c0:84:8d:76:bb:cc:db:33:6c:34:25:59:f5:97:53:
c1:27:1c:95:2f:f1:71:60:b7:dc:2d:c5:63:35:ba:79:3f:9e:
9c:d4:28:e9:2e:b5:b7:d1:ae:61:96:a6:fa:74:e4:08:e1:bd:
6c:6d:86:41:38:e1:56:5b:61:c6:bf:af:16:d8:91:34:6d:9f:
f3:c1:c2:55:d5:d8:aa:7f:c7:cd:62:85:88:26:87:5f:8e:1a:
54:f7:48:30:13:c0:83:2c:6f:93:3e:84:d1:ab:d5:87:15:5a:
d4:a8:0e:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZz3SEEw73e9k/EzMwoYmpNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYWM4OGJhZjkzZGMwN2ExZDI5YTUwZGIzZDUwNTc1ZDMz
MmM3OTkwHhcNMjMwMjIxMTIwNTE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjc3MjRjOTRkYzUwMWFlYjdkYTllYmRiMmIwNzgwYmIzZmViYTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAsOQFIQsD9u5Uk97QodL6URrl0V
swSemLJTSbLUyHWF/e8g0KUvsokeBexr9nHb3ZY6Mui4jue3V+jYa8v3k8C1LkvG
7M0o+aFBpTR4zYP9TohNH9CbG5Wm17tMCTN8gOP/xKUOlNPbOxwff1pAOHmJTh0T
60gjMWenU32V5yD5Bp1pbH6pe5qv8Bvd/T2cq1XbvHlF8UZJDuMLkqniku1gxlaE
Fs188lejNBzRjNlh5u43KlzySRBpAdmnJVHncCuhCC0vi2TIHsUxRCRAsq2X9ZHT
mwL7KrSeM/MwiQKdpIEJdLYhVIIAlcX+gNUZkEx/4RihPWcxV6LbqG9iiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNJ3JMlNxQGut9qevbKweAuz/rozMB8GA1UdIwQY
MBaAFP6siLr5PcB6HSmlDbPVBXXTMseZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3F5SXV2azl3SG9kS2FVTnM5VUZkZE15eDVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy82MmJhMDQtOGMwMS00ODQ1LTk1YmMt
ZDA3MjlkOTBlMjdhLzEvMG5ja3lVM0ZBYTYzMnA2OXNyQjRDN1AtdWpNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy82MmJhMDQtOGMwMS00ODQ1LTk1YmMtZDA3MjlkOTBlMjdh
LzEvX3F5SXV2azl3SG9kS2FVTnM5VUZkZE15eDVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+xPMA0G
CSqGSIb3DQEBCwUAA4IBAQAw7RwidkZ6QwClsI2UHkiwOyDlq9zjR6ZzcVXzEFch
tyXBplvDbFDVGtCTkl2ufePpLi3gNttuMNToVTJhGAa+5OQR0TdaohkwjdP2g/VF
OFvbdDKbjAEdIkQFVpBQqjyVUb2hj4C07fvbuAAkgGdqeEnNha0406bwJFGNZ3hO
7arXguZFwdgkKUrCQnxuR+8DNqTAhI12u8zbM2w0JVn1l1PBJxyVL/FxYLfcLcVj
Nbp5P56c1CjpLrW30a5hlqb6dOQI4b1sbYZBOOFWW2HGv68W2JE0bZ/zwcJV1diq
f8fNYoWIJodfjhpU90gwE8CDLG+TPoTRq9WHFVrUqA4z
-----END CERTIFICATE-----
Generated at Wed Mar 12 12:40:19 2025 by rpki-client