Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/_voQ0_uj539aAXxHU7Z1m-EXi2Q.roa
File: _voQ0_uj539aAXxHU7Z1m-EXi2Q.roa (raw, json)
Hash identifier: wg/qtk5ez5dTHtO7FoJ3NVjlWxw8fMf2zuJeJKs9RzI=
Subject key identifier: FE:FA:10:D3:FB:A3:E7:7F:5A:01:7C:47:53:B6:75:9B:E1:17:8B:64
Certificate issuer: /CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
Certificate serial: 018B429510009E4451080AB06BD27BC8FA15
Authority key identifier: 5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/_voQ0_uj539aAXxHU7Z1m-EXi2Q.roa
Signing time: Wed 18 Oct 2023 11:39:07 +0000
ROA not before: Wed 18 Oct 2023 11:39:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 91.210.68.0/24 maxlen: 24
2a11:68c3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:42:95:10:00:9e:44:51:08:0a:b0:6b:d2:7b:c8:fa:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5bd74e39dda400d136126e6c3efb1cf9344277ef
Validity
Not Before: Oct 18 11:39:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fefa10d3fba3e77f5a017c4753b6759be1178b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:95:c3:7f:79:98:a5:3e:04:a2:95:f4:38:e5:
57:69:31:a9:95:17:01:d2:ad:a1:a3:4e:cb:13:f1:
48:43:9b:66:d3:ea:6b:cb:5f:6a:f6:6f:70:5f:fe:
0b:8e:51:2b:0d:20:99:c6:fc:c7:c1:85:62:a7:41:
92:42:2f:87:d8:c4:5b:b9:41:83:c1:9d:bd:ec:58:
a3:4e:99:eb:b4:26:5b:29:39:10:e7:fe:6c:2f:4b:
76:9f:16:7b:49:dd:68:03:5c:e3:a5:fa:a7:dc:0a:
25:13:25:ce:f4:54:75:6e:05:15:eb:de:b4:60:5c:
ee:03:db:4b:7d:e7:17:50:9d:2c:2f:27:c9:28:cf:
26:a9:4c:88:2f:33:3e:72:e8:d6:23:22:cb:96:1f:
76:ec:1d:43:bf:48:3c:53:8c:6f:7a:09:71:da:52:
fd:74:c5:c6:89:00:50:80:e0:17:b3:3f:1d:d4:ff:
5a:c2:87:7a:69:3d:5a:e7:92:47:cd:29:37:64:e9:
13:1d:03:25:50:e5:f3:af:e6:f5:56:6b:9d:c7:3a:
42:60:8e:a9:d9:b7:1e:78:90:ca:3a:af:0d:6b:4a:
52:73:50:fc:61:a3:fe:d8:7e:56:cb:ae:43:bd:25:
a5:15:73:da:56:cb:64:2a:ee:7b:2e:b0:b3:2b:ec:
6b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:FA:10:D3:FB:A3:E7:7F:5A:01:7C:47:53:B6:75:9B:E1:17:8B:64
X509v3 Authority Key Identifier:
keyid:5B:D7:4E:39:DD:A4:00:D1:36:12:6E:6C:3E:FB:1C:F9:34:42:77:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W9dOOd2kANE2Em5sPvsc-TRCd-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/_voQ0_uj539aAXxHU7Z1m-EXi2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/89ec25-72dc-4f0f-8b2f-ad7890c2e752/1/W9dOOd2kANE2Em5sPvsc-TRCd-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.210.68.0/24
IPv6:
2a11:68c3::/32
Signature Algorithm: sha256WithRSAEncryption
8a:4d:47:96:4c:9f:ac:da:5f:60:af:4f:a2:38:50:7e:2b:e4:
90:e5:7f:22:92:2e:2f:0e:73:0f:52:4d:82:23:ad:4a:d8:46:
1b:90:a1:40:31:ef:d3:2d:92:65:b1:c1:5d:4f:e4:00:4b:71:
a5:32:86:66:5b:66:7f:ba:66:ce:4b:9b:d4:13:bb:b9:99:b7:
cb:eb:42:ba:25:e7:50:96:0a:b2:45:ec:18:f7:8d:a7:2a:90:
30:02:f1:92:da:5f:0d:6b:7b:b1:13:11:a0:fc:6f:93:99:9f:
f3:6b:49:c5:2c:01:b4:03:d2:cc:dc:cc:f8:5b:df:00:75:1e:
1a:c9:03:30:c2:f7:99:9e:5c:48:f7:f9:f1:ca:75:8f:b4:19:
02:dd:58:e8:2f:02:80:d2:1a:6d:0e:3b:2f:1f:d9:e9:f0:fa:
af:55:85:2b:4f:7c:0c:b3:56:b3:4b:2b:9e:d1:c7:2c:cc:3a:
88:52:30:4a:7d:08:a6:66:6f:fe:64:70:7d:de:e9:a3:a6:04:
b7:c1:86:9d:10:32:e3:c5:8f:52:e9:62:ad:10:39:56:02:71:
a3:76:14:3d:b7:ec:ca:d9:37:5d:76:1f:34:f2:73:2b:38:0c:
66:8c:7a:94:8d:4a:9a:38:e3:51:b1:1f:a7:8c:e4:99:41:76:
a2:9b:9f:f6
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAYtClRAAnkRRCAqwa9J7yPoVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDViZDc0ZTM5ZGRhNDAwZDEzNjEyNmU2YzNlZmIxY2Y5MzQ0
Mjc3ZWYwHhcNMjMxMDE4MTEzOTA3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZWZhMTBkM2ZiYTNlNzdmNWEwMTdjNDc1M2I2NzU5YmUxMTc4YjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJXDf3mYpT4EopX0OOVXaTGplRcB
0q2ho07LE/FIQ5tm0+pry19q9m9wX/4LjlErDSCZxvzHwYVip0GSQi+H2MRbuUGD
wZ297FijTpnrtCZbKTkQ5/5sL0t2nxZ7Sd1oA1zjpfqn3AolEyXO9FR1bgUV6960
YFzuA9tLfecXUJ0sLyfJKM8mqUyILzM+cujWIyLLlh927B1Dv0g8U4xveglx2lL9
dMXGiQBQgOAXsz8d1P9awod6aT1a55JHzSk3ZOkTHQMlUOXzr+b1VmudxzpCYI6p
2bceeJDKOq8Na0pSc1D8YaP+2H5Wy65DvSWlFXPaVstkKu57LrCzK+xrqwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFP76ENP7o+d/WgF8R1O2dZvhF4tkMB8GA1UdIwQY
MBaAFFvXTjndpADRNhJubD77HPk0QnfvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVzlkT09kMmtBTkUyRW01c1B2c2MtVFJDZC04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC84OWVjMjUtNzJkYy00ZjBmLThiMmYt
YWQ3ODkwYzJlNzUyLzEvX3ZvUTBfdWo1MzlhQVh4SFU3WjFtLUVYaTJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC84OWVjMjUtNzJkYy00ZjBmLThiMmYtYWQ3ODkwYzJlNzUy
LzEvVzlkT09kMmtBTkUyRW01c1B2c2MtVFJDZC04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW9JEMA0E
AgACMAcDBQAqEWjDMA0GCSqGSIb3DQEBCwUAA4IBAQCKTUeWTJ+s2l9gr0+iOFB+
K+SQ5X8iki4vDnMPUk2CI61K2EYbkKFAMe/TLZJlscFdT+QAS3GlMoZmW2Z/umbO
S5vUE7u5mbfL60K6JedQlgqyRewY942nKpAwAvGS2l8Na3uxExGg/G+TmZ/za0nF
LAG0A9LM3Mz4W98AdR4ayQMwwveZnlxI9/nxynWPtBkC3VjoLwKA0hptDjsvH9np
8PqvVYUrT3wMs1azSyue0ccszDqIUjBKfQimZm/+ZHB93umjpgS3wYadEDLjxY9S
6WKtEDlWAnGjdhQ9t+zK2Tdddh808nMrOAxmjHqUjUqaOONRsR+njOSZQXaim5/2
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:19:35 2025 by rpki-client