Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-O_6WTCc8RkjZoHK6TiYu8fsS7s.roa
File: 1-O_6WTCc8RkjZoHK6TiYu8fsS7s.roa (raw, json)
Hash identifier: dnE0ArjF08lPKmyJanssevWqDs7WvVoVrW80o4IPKJM=
Subject key identifier: F8:EF:FA:59:30:9C:F1:19:23:66:81:CA:E9:38:98:BB:C7:EC:4B:BB
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428245679E46DC91B6892B61E23591408
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-O_6WTCc8RkjZoHK6TiYu8fsS7s.roa
Signing time: Thu 02 Jan 2025 17:50:57 +0000
ROA not before: Thu 02 Jan 2025 17:50:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2914
IP address blocks: 91.92.240.0/20 maxlen: 20
94.156.64.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:56:79:e4:6d:c9:1b:68:92:b6:1e:23:59:14:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:50:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8effa59309cf119236681cae93898bbc7ec4bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:9f:db:5a:ba:46:fe:cf:40:55:ab:3f:f0:98:
56:f2:51:20:46:ce:ab:7c:11:53:3d:33:5b:4e:48:
eb:b4:2d:ad:46:b3:96:93:a0:9e:41:46:f3:29:33:
14:b3:55:d4:02:cb:59:b8:cb:49:73:ba:13:a8:56:
ab:9a:f1:be:2e:af:f3:04:4c:8b:66:87:0d:0f:29:
a4:7d:4d:f3:ce:6d:1f:ec:27:ef:cb:78:60:05:0d:
4e:1f:20:5c:fc:79:f0:11:d6:25:b6:22:4f:db:cf:
59:2d:03:81:ef:ae:20:a2:ec:d2:c7:ff:00:05:63:
cc:03:0e:b2:8f:cd:49:68:ce:8b:90:e2:a6:eb:18:
b1:70:73:b4:56:8c:39:4b:d2:d9:8d:54:6e:ee:be:
6c:89:93:60:7d:05:a9:f2:1a:c9:3f:ae:70:2b:c4:
ba:59:6a:1c:21:13:8e:54:cc:9b:30:6e:c6:30:e6:
35:f6:16:5f:c7:7a:fd:d4:0e:48:72:b3:0d:a3:00:
21:d5:f8:c0:54:88:e3:8b:77:78:bc:ce:c8:7a:d2:
50:6c:9b:65:1c:ed:9e:a7:ba:2b:e9:f9:bc:ff:7f:
44:82:c6:42:5c:2e:a0:14:fb:af:9a:72:81:6d:0f:
73:35:a8:7b:bf:97:10:0f:0a:15:70:da:3a:c3:50:
3f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:EF:FA:59:30:9C:F1:19:23:66:81:CA:E9:38:98:BB:C7:EC:4B:BB
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/1-O_6WTCc8RkjZoHK6TiYu8fsS7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.92.240.0/20
94.156.64.0/21
Signature Algorithm: sha256WithRSAEncryption
06:e3:88:c8:d8:5e:c0:06:1c:d0:13:8e:9e:d5:67:71:88:f4:
4a:af:7e:74:5a:23:ec:67:14:d7:8a:0e:43:4a:c0:15:19:5d:
24:02:a0:83:6f:9f:83:81:50:7a:0e:f9:41:3b:71:fa:97:cc:
cc:74:4b:ac:73:1b:f6:51:e5:8c:72:f6:5d:51:4e:33:a4:1e:
54:e8:26:d8:b4:41:27:69:d0:52:26:5f:07:bc:e6:f5:59:46:
b4:72:b0:b0:b1:5b:a1:c3:d3:45:6a:d2:0c:76:08:07:75:5d:
52:e7:91:01:ee:1c:4a:2c:c8:80:57:9f:23:79:94:d8:56:74:
68:5f:5c:81:cb:ab:76:a4:c5:f8:3f:92:b6:95:41:dd:84:ee:
3b:60:81:da:bd:9b:fb:d0:73:f3:52:22:a5:a5:e3:f9:f1:2c:
1a:75:6a:d5:44:3b:80:b7:99:d9:7c:fe:16:9b:9f:9a:7b:b9:
18:ee:ce:d1:54:0b:df:53:54:6f:b9:81:7d:01:4d:ef:f5:83:
2c:06:cb:e1:30:8f:21:51:74:0e:02:53:41:ef:16:e6:13:1f:
c5:c4:bb:91:2c:c2:81:2a:1d:d6:8d:df:4a:26:ed:67:6c:ec:
d5:4e:d4:77:a3:d2:f9:66:cc:94:4e:6e:93:7a:79:e4:9a:74:
16:c2:b9:b6
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgISAZQoJFZ55G3JG2iSth4jWRQIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjUwMTAyMTc1MDU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOGVmZmE1OTMwOWNmMTE5MjM2NjgxY2FlOTM4OThiYmM3ZWM0YmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp/bWrpG/s9AVas/8JhW8lEgRs6r
fBFTPTNbTkjrtC2tRrOWk6CeQUbzKTMUs1XUAstZuMtJc7oTqFarmvG+Lq/zBEyL
ZocNDymkfU3zzm0f7Cfvy3hgBQ1OHyBc/HnwEdYltiJP289ZLQOB764gouzSx/8A
BWPMAw6yj81JaM6LkOKm6xixcHO0Vow5S9LZjVRu7r5siZNgfQWp8hrJP65wK8S6
WWocIROOVMybMG7GMOY19hZfx3r91A5IcrMNowAh1fjAVIjji3d4vM7IetJQbJtl
HO2ep7or6fm8/39EgsZCXC6gFPuvmnKBbQ9zNah7v5cQDwoVcNo6w1A/AwIDAQAB
o4ICEDCCAgwwHQYDVR0OBBYEFPjv+lkwnPEZI2aByuk4mLvH7Eu7MB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvMS1PXzZXVENjOFJralpvSEs2VGlZdThmc1M3cy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDMvOTEzYTNhLWY1NTAtNDZmMC1hY2M3LWNkM2NhNTk3NTcx
Mi8xL0lzU3NQanhEMXcwRk5KeUJXNnJkT0sxM1hwMC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAlBggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEBFtc8AME
A16cQDANBgkqhkiG9w0BAQsFAAOCAQEABuOIyNhewAYc0BOOntVncYj0Sq9+dFoj
7GcU14oOQ0rAFRldJAKgg2+fg4FQeg75QTtx+pfMzHRLrHMb9lHljHL2XVFOM6Qe
VOgm2LRBJ2nQUiZfB7zm9VlGtHKwsLFbocPTRWrSDHYIB3VdUueRAe4cSizIgFef
I3mU2FZ0aF9cgcurdqTF+D+StpVB3YTuO2CB2r2b+9Bz81IipaXj+fEsGnVq1UQ7
gLeZ2Xz+Fpufmnu5GO7O0VQL31NUb7mBfQFN7/WDLAbL4TCPIVF0DgJTQe8W5hMf
xcS7kSzCgSod1o3fSibtZ2zs1U7Ud6PS+WbMlE5uk3p55Jp0FsK5tg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 08:56:08 2025 by rpki-client