Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/USK3DF_MeFiqUsO5eyLbMIpRftM.roa
File: USK3DF_MeFiqUsO5eyLbMIpRftM.roa (raw, json)
Hash identifier: EfIlwaa4+l/J+6WJ30e/f1BqrVRRkC35cUUZDfKg660=
Subject key identifier: 51:22:B7:0C:5F:CC:78:58:AA:52:C3:B9:7B:22:DB:30:8A:51:7E:D3
Certificate issuer: /CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Certificate serial: 01942067D20E8799BC2BC92239C57C0ED96B
Authority key identifier: AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/USK3DF_MeFiqUsO5eyLbMIpRftM.roa
Signing time: Wed 01 Jan 2025 05:47:42 +0000
ROA not before: Wed 01 Jan 2025 05:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44874
IP address blocks: 91.244.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:d2:0e:87:99:bc:2b:c9:22:39:c5:7c:0e:d9:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab2e5b67f25cbd882ca4d023d21ef98d483735db
Validity
Not Before: Jan 1 05:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5122b70c5fcc7858aa52c3b97b22db308a517ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:74:52:6a:8b:43:04:73:62:12:bd:33:71:79:
b8:97:d2:a1:92:a3:e9:54:d1:f5:c8:99:02:f7:96:
2e:af:f5:f5:65:69:f9:15:40:6d:ec:07:5e:ff:f9:
09:53:79:51:36:fc:6b:8b:6d:fb:28:35:03:6c:ba:
79:c4:08:0d:d6:8f:b2:63:7d:89:ae:da:1c:fc:b6:
3b:b4:6c:19:21:76:17:8b:27:2f:21:d7:1d:56:dc:
33:2d:32:31:89:05:60:3e:26:2c:8e:d8:81:ff:2a:
64:d1:18:3d:f4:2f:b5:2d:5c:67:0d:a0:5c:76:a4:
5d:e8:16:b5:e6:d4:81:d5:5b:10:9c:ea:fe:c4:cb:
57:a7:23:57:6a:a7:52:b2:32:97:a3:cb:0e:a3:d2:
4d:1f:44:2c:10:77:f9:7a:ff:86:ba:97:35:52:36:
e3:9a:30:9f:07:a1:94:6c:09:65:0d:83:41:10:cd:
d4:80:13:4e:db:8d:3a:b4:18:be:fe:40:01:14:52:
a8:a0:59:60:5c:af:f8:fe:93:f1:a0:17:58:20:93:
86:66:6d:1e:85:c0:ad:68:6e:d0:2e:62:e9:d4:b1:
ee:c7:e9:37:8d:69:a7:d3:ae:a8:9c:15:fe:02:d7:
7c:24:cc:c9:fd:04:d4:b8:71:a3:13:fc:49:78:67:
5d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:22:B7:0C:5F:CC:78:58:AA:52:C3:B9:7B:22:DB:30:8A:51:7E:D3
X509v3 Authority Key Identifier:
keyid:AB:2E:5B:67:F2:5C:BD:88:2C:A4:D0:23:D2:1E:F9:8D:48:37:35:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qy5bZ_JcvYgspNAj0h75jUg3Nds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/USK3DF_MeFiqUsO5eyLbMIpRftM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/67ffe9-8d98-4c6d-be2a-3f6ec249717c/1/qy5bZ_JcvYgspNAj0h75jUg3Nds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.237.0/24
Signature Algorithm: sha256WithRSAEncryption
92:48:0a:d7:2b:67:36:26:fc:73:7f:2f:bc:2b:80:ff:3a:3f:
83:8c:55:d5:c2:94:9a:8e:b6:c0:a1:58:4c:30:11:02:e6:32:
33:22:fa:c0:c4:27:9c:24:af:d9:6c:bb:54:da:d2:c1:df:fd:
a1:6b:6b:ea:90:2d:6e:4f:81:12:af:e1:a5:b2:ab:6a:27:a7:
23:f1:3f:ff:c8:15:8a:90:8f:11:2f:00:04:33:69:25:ac:f9:
d4:ff:9f:fc:16:c3:35:44:0d:0b:ac:fc:fd:8f:f1:81:e2:cb:
4b:e3:a4:20:ea:f5:6a:c3:52:f7:23:55:dc:cf:0f:32:d9:b5:
79:f8:c7:84:04:c7:5d:d6:f1:e4:fb:f8:d1:62:3d:04:af:06:
bb:fe:83:77:65:15:41:eb:dc:1c:a2:c9:8f:4c:60:40:73:f3:
78:b7:41:35:f2:2e:99:bf:5c:c4:5f:44:a6:d2:8e:96:08:76:
a2:b0:0f:d6:ec:1d:fb:76:61:b4:06:aa:09:4b:32:96:fe:eb:
d1:19:b2:10:74:bf:0b:bc:bb:fa:01:9b:4c:c2:e9:4d:eb:52:
a4:c3:4c:83:38:96:ed:ed:fc:40:f8:3e:2e:e7:95:cf:40:1a:
15:07:f3:d0:e6:1f:f2:f2:d1:19:4f:7d:ca:bd:18:b9:dc:c5:
03:dd:aa:d1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ9IOh5m8K8kiOcV8DtlrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiMmU1YjY3ZjI1Y2JkODgyY2E0ZDAyM2QyMWVmOThkNDgz
NzM1ZGIwHhcNMjUwMTAxMDU0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MTIyYjcwYzVmY2M3ODU4YWE1MmMzYjk3YjIyZGIzMDhhNTE3ZWQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXRSaotDBHNiEr0zcXm4l9KhkqPp
VNH1yJkC95Yur/X1ZWn5FUBt7Ade//kJU3lRNvxri237KDUDbLp5xAgN1o+yY32J
rtoc/LY7tGwZIXYXiycvIdcdVtwzLTIxiQVgPiYsjtiB/ypk0Rg99C+1LVxnDaBc
dqRd6Ba15tSB1VsQnOr+xMtXpyNXaqdSsjKXo8sOo9JNH0QsEHf5ev+Gupc1Ujbj
mjCfB6GUbAllDYNBEM3UgBNO2406tBi+/kABFFKooFlgXK/4/pPxoBdYIJOGZm0e
hcCtaG7QLmLp1LHux+k3jWmn066onBX+Atd8JMzJ/QTUuHGjE/xJeGddHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFEitwxfzHhYqlLDuXsi2zCKUX7TMB8GA1UdIwQY
MBaAFKsuW2fyXL2ILKTQI9Ie+Y1INzXbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcXk1YlpfSmN2WWdzcE5BajBoNzVqVWczTmRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC82N2ZmZTktOGQ5OC00YzZkLWJlMmEt
M2Y2ZWMyNDk3MTdjLzEvVVNLM0RGX01lRmlxVXNPNWV5TGJNSXBSZnRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC82N2ZmZTktOGQ5OC00YzZkLWJlMmEtM2Y2ZWMyNDk3MTdj
LzEvcXk1YlpfSmN2WWdzcE5BajBoNzVqVWczTmRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/TtMA0G
CSqGSIb3DQEBCwUAA4IBAQCSSArXK2c2Jvxzfy+8K4D/Oj+DjFXVwpSajrbAoVhM
MBEC5jIzIvrAxCecJK/ZbLtU2tLB3/2ha2vqkC1uT4ESr+GlsqtqJ6cj8T//yBWK
kI8RLwAEM2klrPnU/5/8FsM1RA0LrPz9j/GB4stL46Qg6vVqw1L3I1Xczw8y2bV5
+MeEBMdd1vHk+/jRYj0Erwa7/oN3ZRVB69wcosmPTGBAc/N4t0E18i6Zv1zEX0Sm
0o6WCHaisA/W7B37dmG0BqoJSzKW/uvRGbIQdL8LvLv6AZtMwulN61Kkw0yDOJbt
7fxA+D4u55XPQBoVB/PQ5h/y8tEZT33KvRi53MUD3arR
-----END CERTIFICATE-----
Generated at Mon Apr 7 16:49:12 2025 by rpki-client