Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/ILMIPoeAh6Mp9Q-FEoKjBIMPdAM.roa
File: ILMIPoeAh6Mp9Q-FEoKjBIMPdAM.roa (raw, json)
Hash identifier: 5aktyEB76Rn5TuWGXiVEAOmlZjNF43pV1TNogR1WVfw=
Subject key identifier: 20:B3:08:3E:87:80:87:A3:29:F5:0F:85:12:82:A3:04:83:0F:74:03
Certificate issuer: /CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
Certificate serial: 0194266B4B62477D20CEFC8A2E5C36694B35
Authority key identifier: E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/ILMIPoeAh6Mp9Q-FEoKjBIMPdAM.roa
Signing time: Thu 02 Jan 2025 09:49:13 +0000
ROA not before: Thu 02 Jan 2025 09:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3303
IP address blocks: 91.226.202.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:4b:62:47:7d:20:ce:fc:8a:2e:5c:36:69:4b:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2abf6d3df539bb7c1684fb4f46179d0da06b083
Validity
Not Before: Jan 2 09:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=20b3083e878087a329f50f851282a304830f7403
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2e:e7:22:73:60:72:dd:77:a0:75:dc:3f:10:
04:4c:9c:5b:7d:68:f7:31:34:53:58:c0:a5:8b:5d:
01:ca:96:60:ba:08:a4:40:b6:1c:17:bc:c7:88:cc:
5b:8f:76:bd:73:e6:b0:72:bd:9e:9b:f6:e0:97:fe:
ee:52:fb:33:db:aa:2c:af:b8:56:ee:8c:b3:40:4c:
97:22:26:6e:d7:13:c5:1a:0e:ae:54:21:12:bb:d3:
fd:f9:cc:4c:cc:ca:bc:66:35:a1:61:78:17:4a:05:
57:ce:90:3d:9c:73:59:19:af:cd:8c:b5:88:a7:b1:
84:9b:eb:fa:7c:65:a9:ce:ba:ab:3b:ad:3c:49:dd:
2b:83:9e:6c:d0:48:8f:1d:e0:3d:d5:3b:7e:1b:f1:
60:ec:91:70:99:81:d3:7b:cd:6e:26:51:cf:62:1e:
51:f7:58:f2:fe:5b:67:76:21:4f:4a:4e:c3:66:9b:
98:15:4a:2c:b9:2a:d4:71:d8:22:a0:b7:23:82:e5:
d0:1b:ba:91:1a:f4:68:63:5b:4b:7a:9d:6f:15:2c:
03:fd:34:d0:d9:92:42:04:6f:43:bb:a7:b4:64:06:
a1:96:b0:85:ff:37:26:56:e5:c5:80:2b:7a:ab:3f:
cc:75:10:bc:4b:61:90:55:67:f3:f4:1f:42:5a:bf:
0b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B3:08:3E:87:80:87:A3:29:F5:0F:85:12:82:A3:04:83:0F:74:03
X509v3 Authority Key Identifier:
keyid:E2:AB:F6:D3:DF:53:9B:B7:C1:68:4F:B4:F4:61:79:D0:DA:06:B0:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4qv2099Tm7fBaE-09GF50NoGsIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/ILMIPoeAh6Mp9Q-FEoKjBIMPdAM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f3a28b-377e-43c7-b9fd-b7a1b4ae1511/1/4qv2099Tm7fBaE-09GF50NoGsIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.202.0/24
Signature Algorithm: sha256WithRSAEncryption
93:ca:0f:0c:8d:09:b1:44:af:f0:e4:3e:91:da:8c:14:9c:78:
37:5c:06:57:aa:06:79:a2:fe:08:17:f2:f9:06:49:4b:cf:4a:
f9:f7:b8:de:0c:b4:2c:df:0f:e4:04:fb:82:4f:e0:b6:db:a9:
3f:fa:e5:49:5a:6d:30:b6:90:92:f1:df:47:1d:e0:69:7e:64:
aa:d9:40:ab:41:32:cb:9a:33:a7:5c:2b:55:14:72:2d:c6:2f:
3f:aa:f8:01:c4:ea:fc:34:97:31:f7:ab:6f:6e:0e:da:57:42:
c1:30:3c:46:be:3c:f8:63:c3:e7:ac:b5:6e:df:8c:7b:e0:b5:
51:70:bd:cc:e8:75:93:21:03:37:d5:40:11:53:07:29:f5:e6:
7b:77:f4:4b:7a:fb:1f:98:b8:ab:a5:e3:ec:f2:f5:46:44:0b:
7d:a5:23:5c:9f:e9:ea:ba:83:48:54:02:80:11:e1:26:c8:4c:
65:eb:2e:d9:63:0f:2b:64:75:24:af:39:f7:1f:24:43:d6:00:
ec:06:6e:9c:73:6d:6e:4e:18:3a:e6:c4:d6:e0:42:59:48:6f:
f1:02:87:9f:ad:87:1a:8e:09:95:5b:93:99:af:9b:2d:e7:15:
94:c9:18:da:0b:c8:35:3d:98:0a:f3:b2:f0:30:77:12:d3:97:
ec:64:dc:ac
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma0tiR30gzvyKLlw2aUs1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyYWJmNmQzZGY1MzliYjdjMTY4NGZiNGY0NjE3OWQwZGEw
NmIwODMwHhcNMjUwMTAyMDk0OTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMGIzMDgzZTg3ODA4N2EzMjlmNTBmODUxMjgyYTMwNDgzMGY3NDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S7nInNgct13oHXcPxAETJxbfWj3
MTRTWMCli10BypZgugikQLYcF7zHiMxbj3a9c+awcr2em/bgl/7uUvsz26osr7hW
7oyzQEyXIiZu1xPFGg6uVCESu9P9+cxMzMq8ZjWhYXgXSgVXzpA9nHNZGa/NjLWI
p7GEm+v6fGWpzrqrO608Sd0rg55s0EiPHeA91Tt+G/Fg7JFwmYHTe81uJlHPYh5R
91jy/ltndiFPSk7DZpuYFUosuSrUcdgioLcjguXQG7qRGvRoY1tLep1vFSwD/TTQ
2ZJCBG9Du6e0ZAahlrCF/zcmVuXFgCt6qz/MdRC8S2GQVWfz9B9CWr8LYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCCzCD6HgIejKfUPhRKCowSDD3QDMB8GA1UdIwQY
MBaAFOKr9tPfU5u3wWhPtPRhedDaBrCDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHF2MjA5OVRtN2ZCYUUtMDlHRjUwTm9Hc0lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mM2EyOGItMzc3ZS00M2M3LWI5ZmQt
YjdhMWI0YWUxNTExLzEvSUxNSVBvZUFoNk1wOVEtRkVvS2pCSU1QZEFNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mM2EyOGItMzc3ZS00M2M3LWI5ZmQtYjdhMWI0YWUxNTEx
LzEvNHF2MjA5OVRtN2ZCYUUtMDlHRjUwTm9Hc0lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+LKMA0G
CSqGSIb3DQEBCwUAA4IBAQCTyg8MjQmxRK/w5D6R2owUnHg3XAZXqgZ5ov4IF/L5
BklLz0r597jeDLQs3w/kBPuCT+C226k/+uVJWm0wtpCS8d9HHeBpfmSq2UCrQTLL
mjOnXCtVFHItxi8/qvgBxOr8NJcx96tvbg7aV0LBMDxGvjz4Y8PnrLVu34x74LVR
cL3M6HWTIQM31UARUwcp9eZ7d/RLevsfmLirpePs8vVGRAt9pSNcn+nquoNIVAKA
EeEmyExl6y7ZYw8rZHUkrzn3HyRD1gDsBm6cc21uThg65sTW4EJZSG/xAoefrYca
jgmVW5OZr5st5xWUyRjaC8g1PZgK87LwMHcS05fsZNys
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:08:02 2025 by rpki-client