Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ca33a4-4a61-44eb-95d4-ea8454bf2f4c/1/ijSTMAsFDusAQH4ETia5sENQPPc.roa
File: ijSTMAsFDusAQH4ETia5sENQPPc.roa (raw, json)
Hash identifier: MCnEN4Og92C8FNtrQu2g0q80BUPeZwbirNFmFMQ0hec=
Subject key identifier: 8A:34:93:30:0B:05:0E:EB:00:40:7E:04:4E:26:B9:B0:43:50:3C:F7
Certificate issuer: /CN=51deaa3e3f53ec4b6c138c7865437290e32a5c3a
Certificate serial: 018CC3493B890B9FC7D7C56E0C41C4D1E0AF
Authority key identifier: 51:DE:AA:3E:3F:53:EC:4B:6C:13:8C:78:65:43:72:90:E3:2A:5C:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ud6qPj9T7EtsE4x4ZUNykOMqXDo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ca33a4-4a61-44eb-95d4-ea8454bf2f4c/1/ijSTMAsFDusAQH4ETia5sENQPPc.roa
Signing time: Mon 01 Jan 2024 04:30:05 +0000
ROA not before: Mon 01 Jan 2024 04:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62240
IP address blocks: 91.212.169.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:3b:89:0b:9f:c7:d7:c5:6e:0c:41:c4:d1:e0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51deaa3e3f53ec4b6c138c7865437290e32a5c3a
Validity
Not Before: Jan 1 04:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a3493300b050eeb00407e044e26b9b043503cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a0:4d:b7:99:ac:c2:7f:98:3b:81:c5:05:29:
90:4e:0d:9b:73:18:2e:da:d6:c7:11:a7:7c:df:29:
c9:3d:cc:56:a4:ac:3a:91:2a:a0:5d:71:b3:06:ac:
9a:24:74:b7:38:34:42:9c:62:31:cf:4d:83:d9:62:
48:10:4a:1c:7e:8c:ff:47:28:5a:cf:50:1b:6d:01:
ef:78:3e:23:a2:51:0f:47:36:b4:a6:0d:db:0d:fb:
a7:d2:ce:9d:36:2a:69:86:50:c1:5c:55:36:4a:7d:
df:98:6c:ba:3d:cd:0d:ce:2b:97:fb:09:92:2f:89:
83:2c:a2:09:69:8d:b9:1b:9b:8c:fa:87:16:f8:f9:
18:5e:f6:c8:60:24:14:b9:72:a7:16:f8:93:57:7e:
7d:ed:c9:8d:5e:1a:14:4b:0e:ed:f2:86:c8:76:3f:
4c:05:a3:96:01:ec:a8:6b:90:db:18:75:b9:58:2b:
9c:d2:07:2f:5d:9f:44:95:56:74:91:0e:f3:01:3a:
74:5c:46:c0:5c:b6:d1:20:c8:3b:dc:cb:aa:3c:ff:
cc:97:22:5e:c7:57:cd:5b:4b:51:b1:7a:83:44:1a:
33:01:9d:39:02:22:f6:fa:f0:3b:19:7e:ff:a7:61:
e7:19:9c:be:63:7c:d4:fa:3b:04:73:27:60:6d:9f:
a4:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:34:93:30:0B:05:0E:EB:00:40:7E:04:4E:26:B9:B0:43:50:3C:F7
X509v3 Authority Key Identifier:
keyid:51:DE:AA:3E:3F:53:EC:4B:6C:13:8C:78:65:43:72:90:E3:2A:5C:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ud6qPj9T7EtsE4x4ZUNykOMqXDo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ca33a4-4a61-44eb-95d4-ea8454bf2f4c/1/ijSTMAsFDusAQH4ETia5sENQPPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ca33a4-4a61-44eb-95d4-ea8454bf2f4c/1/Ud6qPj9T7EtsE4x4ZUNykOMqXDo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.169.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:2d:ff:bd:c7:35:bc:b0:54:63:27:00:bc:73:84:96:c2:e4:
06:1f:38:b1:b4:b6:66:5d:44:a6:46:f2:c3:21:af:ee:e5:32:
7b:de:d4:b9:f2:1e:6f:f3:06:73:f3:e7:8f:e1:dd:1b:9d:fe:
9f:ff:c1:f4:f5:21:13:d0:11:7b:35:f1:22:a6:11:1b:9a:2c:
3b:18:63:7c:05:d8:02:7d:a5:53:9e:6e:2f:0b:3c:19:e6:80:
42:b7:d4:f1:e5:42:3a:a5:8a:6a:55:1f:d1:98:d8:97:a0:f4:
ab:ba:d4:5b:f5:39:e4:8e:88:5c:7c:81:87:0b:ac:8d:a7:a2:
fa:61:d0:ff:15:af:76:74:76:cf:4e:44:da:70:39:43:04:bb:
0f:30:47:7a:2c:08:84:0d:f6:1b:08:f8:7f:44:46:f0:6e:67:
8d:23:15:f2:2b:0e:6b:e1:bb:af:40:67:dd:5a:20:e3:81:0e:
d0:10:e4:8a:b7:f0:0a:48:a6:47:86:59:ce:6d:02:68:a9:02:
8c:bf:cb:f7:20:35:eb:9a:fa:ee:ff:7b:52:c4:e9:d6:eb:18:
7d:2d:52:d4:47:97:b7:5f:4b:5d:b3:04:de:1b:27:df:48:87:
8b:7c:de:2d:0e:3c:01:09:4d:96:16:b5:e3:98:0c:4a:be:43:
86:5e:96:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSTuJC5/H18VuDEHE0eCvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxZGVhYTNlM2Y1M2VjNGI2YzEzOGM3ODY1NDM3MjkwZTMy
YTVjM2EwHhcNMjQwMTAxMDQzMDA1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTM0OTMzMDBiMDUwZWViMDA0MDdlMDQ0ZTI2YjliMDQzNTAzY2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqBNt5mswn+YO4HFBSmQTg2bcxgu
2tbHEad83ynJPcxWpKw6kSqgXXGzBqyaJHS3ODRCnGIxz02D2WJIEEocfoz/Ryha
z1AbbQHveD4jolEPRza0pg3bDfun0s6dNipphlDBXFU2Sn3fmGy6Pc0NziuX+wmS
L4mDLKIJaY25G5uM+ocW+PkYXvbIYCQUuXKnFviTV3597cmNXhoUSw7t8obIdj9M
BaOWAeyoa5DbGHW5WCuc0gcvXZ9ElVZ0kQ7zATp0XEbAXLbRIMg73MuqPP/MlyJe
x1fNW0tRsXqDRBozAZ05AiL2+vA7GX7/p2HnGZy+Y3zU+jsEcydgbZ+kxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIo0kzALBQ7rAEB+BE4mubBDUDz3MB8GA1UdIwQY
MBaAFFHeqj4/U+xLbBOMeGVDcpDjKlw6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWQ2cVBqOVQ3RXRzRTR4NFpVTnlrT01xWERvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9jYTMzYTQtNGE2MS00NGViLTk1ZDQt
ZWE4NDU0YmYyZjRjLzEvaWpTVE1Bc0ZEdXNBUUg0RVRpYTVzRU5RUFBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9jYTMzYTQtNGE2MS00NGViLTk1ZDQtZWE4NDU0YmYyZjRj
LzEvVWQ2cVBqOVQ3RXRzRTR4NFpVTnlrT01xWERvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9SpMA0G
CSqGSIb3DQEBCwUAA4IBAQBbLf+9xzW8sFRjJwC8c4SWwuQGHzixtLZmXUSmRvLD
Ia/u5TJ73tS58h5v8wZz8+eP4d0bnf6f/8H09SET0BF7NfEiphEbmiw7GGN8BdgC
faVTnm4vCzwZ5oBCt9Tx5UI6pYpqVR/RmNiXoPSrutRb9TnkjohcfIGHC6yNp6L6
YdD/Fa92dHbPTkTacDlDBLsPMEd6LAiEDfYbCPh/REbwbmeNIxXyKw5r4buvQGfd
WiDjgQ7QEOSKt/AKSKZHhlnObQJoqQKMv8v3IDXrmvru/3tSxOnW6xh9LVLUR5e3
X0tdswTeGyffSIeLfN4tDjwBCU2WFrXjmAxKvkOGXpZI
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:23:13 2024 by rpki-client on console-fra.rpki-client.org