Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/pb0HpyJZMsT5W8dfe0VOR5LOW_M.roa
File: pb0HpyJZMsT5W8dfe0VOR5LOW_M.roa (raw, json)
Hash identifier: 8ccg9QKMd308GM+mOMPhnrelb3Ldijvww8dEm02A/EQ=
Subject key identifier: A5:BD:07:A7:22:59:32:C4:F9:5B:C7:5F:7B:45:4E:47:92:CE:5B:F3
Certificate issuer: /CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Certificate serial: 01942067F75309F159FAB001300D76A9585F
Authority key identifier: 8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/pb0HpyJZMsT5W8dfe0VOR5LOW_M.roa
Signing time: Wed 01 Jan 2025 05:47:51 +0000
ROA not before: Wed 01 Jan 2025 05:47:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15525
IP address blocks: 91.216.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:f7:53:09:f1:59:fa:b0:01:30:0d:76:a9:58:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b31967110cabeec4a66b78037e52a87b2bc8f5d
Validity
Not Before: Jan 1 05:47:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5bd07a7225932c4f95bc75f7b454e4792ce5bf3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1f:74:cd:c8:92:d9:52:0a:7f:ed:f6:51:8e:
3f:f2:27:6d:1a:1a:b6:f5:c9:0f:8d:e0:30:8f:ee:
6b:0b:27:99:53:97:d5:65:da:f2:ad:40:aa:40:6f:
5b:a4:63:94:85:c7:db:bd:80:e2:3a:04:bc:99:fc:
0e:1c:01:3c:d3:e6:c6:63:14:76:88:de:0b:46:a6:
78:15:9f:6e:92:15:2a:cc:0a:ff:44:22:6e:5c:e2:
54:ec:1e:d5:65:cd:85:c1:62:2c:3d:95:c4:b5:f9:
68:ba:b3:1c:34:18:ed:a0:60:73:05:f0:ee:a5:f5:
44:e9:f8:19:dd:19:47:94:83:8e:2f:8b:e1:b8:57:
65:50:74:16:8a:d5:9a:a3:fd:86:40:81:4a:58:64:
c0:a3:c0:8a:a9:48:02:c6:c6:74:f3:03:94:f7:c5:
d4:a5:dc:80:fd:0e:14:9a:78:4c:46:af:68:5b:da:
ce:a6:d4:cb:04:37:b6:27:ec:8b:80:75:7c:85:cb:
4b:84:ad:00:b6:17:b7:12:6f:5f:bb:a3:ad:8b:85:
0c:3d:a5:54:7c:13:cb:69:41:bf:bb:e0:f5:f3:75:
41:df:77:1d:c2:45:3a:da:43:ca:81:53:99:6c:94:
5f:bd:3f:28:68:d1:1b:01:08:36:a7:e4:c0:04:50:
52:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BD:07:A7:22:59:32:C4:F9:5B:C7:5F:7B:45:4E:47:92:CE:5B:F3
X509v3 Authority Key Identifier:
keyid:8B:31:96:71:10:CA:BE:EC:4A:66:B7:80:37:E5:2A:87:B2:BC:8F:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izGWcRDKvuxKZreAN-Uqh7K8j10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/pb0HpyJZMsT5W8dfe0VOR5LOW_M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/31df07-dcb5-4a50-a704-a017c368466d/1/izGWcRDKvuxKZreAN-Uqh7K8j10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.117.0/24
Signature Algorithm: sha256WithRSAEncryption
66:83:72:58:33:4f:88:60:fd:ce:76:50:ec:df:1b:27:5d:81:
32:c5:86:66:d0:86:d6:c6:7d:a2:db:36:e8:50:44:42:f4:60:
80:63:a3:0e:63:6d:0c:ff:c0:de:f3:ee:4c:e7:45:48:fc:ce:
ef:4c:69:68:2a:5f:86:77:dd:f3:05:0e:69:9e:24:46:b7:d2:
12:96:76:15:18:a7:18:87:05:a0:95:f4:15:15:ad:be:d4:1e:
fa:28:f6:10:41:a9:91:ad:ae:16:ab:66:68:aa:40:f6:1e:64:
8d:6e:3f:ad:e6:c7:6f:93:d8:85:05:21:d4:40:3a:41:89:22:
bb:6b:e5:ce:16:d4:74:0e:0f:92:04:0f:6b:b5:01:d6:01:88:
25:bf:d4:d6:d4:91:8a:8d:a5:52:65:f1:e8:12:8b:12:c2:7f:
b4:15:6d:6c:c0:21:3b:c7:e6:33:f0:5b:a4:35:1d:54:1a:a7:
fb:c5:00:0d:41:00:b0:d3:d3:44:49:59:e5:7e:01:38:a4:92:
fd:cd:57:ec:3d:1b:db:c4:63:c5:ac:60:ae:c5:8a:b8:11:c0:
96:58:02:f4:c5:06:03:2a:f7:78:80:35:20:db:32:08:10:84:
32:c4:60:f8:28:34:af:7e:ba:4f:8c:6c:6c:d4:bd:0c:81:04:
ef:19:5d:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ/dTCfFZ+rABMA12qVhfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMzE5NjcxMTBjYWJlZWM0YTY2Yjc4MDM3ZTUyYTg3YjJi
YzhmNWQwHhcNMjUwMTAxMDU0NzUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNWJkMDdhNzIyNTkzMmM0Zjk1YmM3NWY3YjQ1NGU0NzkyY2U1YmYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnh90zciS2VIKf+32UY4/8idtGhq2
9ckPjeAwj+5rCyeZU5fVZdryrUCqQG9bpGOUhcfbvYDiOgS8mfwOHAE80+bGYxR2
iN4LRqZ4FZ9ukhUqzAr/RCJuXOJU7B7VZc2FwWIsPZXEtflourMcNBjtoGBzBfDu
pfVE6fgZ3RlHlIOOL4vhuFdlUHQWitWao/2GQIFKWGTAo8CKqUgCxsZ08wOU98XU
pdyA/Q4UmnhMRq9oW9rOptTLBDe2J+yLgHV8hctLhK0Athe3Em9fu6Oti4UMPaVU
fBPLaUG/u+D183VB33cdwkU62kPKgVOZbJRfvT8oaNEbAQg2p+TABFBSrwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKW9B6ciWTLE+VvHX3tFTkeSzlvzMB8GA1UdIwQY
MBaAFIsxlnEQyr7sSma3gDflKoeyvI9dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXpHV2NSREt2dXhLWnJlQU4tVXFoN0s4ajEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zMWRmMDctZGNiNS00YTUwLWE3MDQt
YTAxN2MzNjg0NjZkLzEvcGIwSHB5SlpNc1Q1VzhkZmUwVk9SNUxPV19NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8zMWRmMDctZGNiNS00YTUwLWE3MDQtYTAxN2MzNjg0NjZk
LzEvaXpHV2NSREt2dXhLWnJlQU4tVXFoN0s4ajEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9h1MA0G
CSqGSIb3DQEBCwUAA4IBAQBmg3JYM0+IYP3OdlDs3xsnXYEyxYZm0IbWxn2i2zbo
UERC9GCAY6MOY20M/8De8+5M50VI/M7vTGloKl+Gd93zBQ5pniRGt9ISlnYVGKcY
hwWglfQVFa2+1B76KPYQQamRra4Wq2ZoqkD2HmSNbj+t5sdvk9iFBSHUQDpBiSK7
a+XOFtR0Dg+SBA9rtQHWAYglv9TW1JGKjaVSZfHoEosSwn+0FW1swCE7x+Yz8Fuk
NR1UGqf7xQANQQCw09NESVnlfgE4pJL9zVfsPRvbxGPFrGCuxYq4EcCWWAL0xQYD
Kvd4gDUg2zIIEIQyxGD4KDSvfrpPjGxs1L0MgQTvGV0X
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:03:22 2025 by rpki-client