Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/K-3cRrwpF1Su0ij7L9ODokewIEY.roa
File: K-3cRrwpF1Su0ij7L9ODokewIEY.roa (raw, json)
Hash identifier: 3x5IXD/2nCnMhSAj2D59st2W9RPwQ8rFfinVR62hHzk=
Subject key identifier: 2B:ED:DC:46:BC:29:17:54:AE:D2:28:FB:2F:D3:83:A2:47:B0:20:46
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 019425FC3D7E092C8CC5AA4076D5BFB1CC4E
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/K-3cRrwpF1Su0ij7L9ODokewIEY.roa
Signing time: Thu 02 Jan 2025 07:47:55 +0000
ROA not before: Thu 02 Jan 2025 07:47:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 59117
IP address blocks: 91.192.107.0/24 maxlen: 24
91.193.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:3d:7e:09:2c:8c:c5:aa:40:76:d5:bf:b1:cc:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: Jan 2 07:47:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2beddc46bc291754aed228fb2fd383a247b02046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e2:63:9a:27:4f:60:09:d9:ce:ad:55:44:ee:
31:c0:c2:7d:2f:d3:6e:9e:ac:24:a1:f8:6d:ae:8e:
10:ed:b5:84:85:22:ea:15:18:87:e5:ea:56:01:5a:
e9:d7:d4:c6:21:b1:7a:06:9e:70:d1:d9:4b:a0:e3:
5c:87:ed:39:b9:94:bd:95:c3:6c:f8:f3:be:fc:89:
10:43:12:3f:eb:ba:fb:d2:ab:7a:83:42:8d:55:91:
ea:c6:9e:97:69:bb:1c:aa:60:79:dd:00:a2:74:c4:
52:71:c0:af:b5:48:d5:45:c3:eb:11:9f:bd:bd:aa:
6f:54:9b:3b:47:47:ba:b7:82:54:ce:27:8e:45:d5:
91:9c:e2:71:31:c8:80:6f:d4:6f:d4:1c:f7:cd:cb:
ce:f5:84:43:22:34:6a:aa:d1:d2:7e:a8:27:ce:c8:
e5:c6:4f:17:1e:78:ad:9b:d7:f4:49:5c:fe:ec:8c:
cd:8c:c3:8c:52:d0:cd:fb:62:2d:b8:6f:68:e0:1e:
00:f8:16:97:35:24:91:6b:fa:a6:76:f4:88:ec:02:
41:58:d1:b0:0e:ac:e4:2c:21:c4:b5:b5:7e:1c:ed:
31:da:43:54:a1:43:3c:82:94:0c:26:ae:02:a0:9f:
be:0d:1b:92:6b:21:72:3f:58:6f:26:0e:92:09:88:
86:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:ED:DC:46:BC:29:17:54:AE:D2:28:FB:2F:D3:83:A2:47:B0:20:46
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/K-3cRrwpF1Su0ij7L9ODokewIEY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.107.0/24
91.193.59.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:ef:26:ea:be:2e:af:9d:6c:19:1b:a0:16:75:79:f3:82:ad:
04:e9:f2:56:4c:78:b5:3e:ca:25:5d:2c:1a:55:d2:17:85:70:
b5:b9:a3:21:ef:78:3d:c4:84:52:d6:b7:c6:3b:53:7f:f5:32:
29:83:93:d2:3f:31:bc:ad:4d:61:e1:77:2f:00:62:a7:49:b9:
88:f4:5d:f8:b8:98:8a:ab:44:73:56:40:ec:61:f6:01:8b:8f:
35:54:38:5a:cf:3a:11:7c:73:09:d1:40:44:6d:3a:38:50:e4:
3e:3e:d7:4c:3a:68:4c:d9:62:4a:ca:34:f1:40:66:5f:95:56:
3c:60:df:e8:4f:df:eb:b0:26:62:8f:99:68:d7:8e:fc:08:ad:
0a:59:f6:52:34:6c:7c:01:85:ac:ef:99:78:0b:f5:40:d3:b9:
0d:01:54:fb:aa:2f:c6:b8:02:94:9d:e0:d3:06:11:31:f2:be:
a9:72:32:5c:1d:99:33:21:5e:53:ee:20:70:fb:7f:f1:05:05:
4e:3e:f0:d9:7e:69:29:c5:f0:d9:60:e9:0f:47:c8:52:b7:5a:
51:2e:f7:88:28:be:24:c8:28:e8:a6:4d:bf:49:20:76:ae:01:
bd:aa:6d:7a:5f:40:9c:40:fe:9f:8c:b4:a4:3e:a9:18:2f:65:
40:ad:1d:eb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQl/D1+CSyMxapAdtW/scxOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlOTQ2MWMyMTFiZjM1NTFjNTUwN2M5MzBiNDIwNGM2ZWM0
M2IzMjIwHhcNMjUwMTAyMDc0NzU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyYmVkZGM0NmJjMjkxNzU0YWVkMjI4ZmIyZmQzODNhMjQ3YjAyMDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeJjmidPYAnZzq1VRO4xwMJ9L9Nu
nqwkofhtro4Q7bWEhSLqFRiH5epWAVrp19TGIbF6Bp5w0dlLoONch+05uZS9lcNs
+PO+/IkQQxI/67r70qt6g0KNVZHqxp6XabscqmB53QCidMRSccCvtUjVRcPrEZ+9
vapvVJs7R0e6t4JUzieORdWRnOJxMciAb9Rv1Bz3zcvO9YRDIjRqqtHSfqgnzsjl
xk8XHnitm9f0SVz+7IzNjMOMUtDN+2ItuG9o4B4A+BaXNSSRa/qmdvSI7AJBWNGw
DqzkLCHEtbV+HO0x2kNUoUM8gpQMJq4CoJ++DRuSayFyP1hvJg6SCYiGuwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCvt3Ea8KRdUrtIo+y/Tg6JHsCBGMB8GA1UdIwQY
MBaAFN6UYcIRvzVRxVB8kwtCBMbsQ7MiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2Zjct
ODIwMmE0NjdkNzUzLzEvSy0zY1Jyd3BGMVN1MGlqN0w5T0Rva2V3SUVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy85MTgzZDQtMDc3OS00OWM0LTk2ZjctODIwMmE0NjdkNzUz
LzEvM3BSaHdoR19OVkhGVUh5VEMwSUV4dXhEc3lJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8BrAwQA
W8E7MA0GCSqGSIb3DQEBCwUAA4IBAQAd7ybqvi6vnWwZG6AWdXnzgq0E6fJWTHi1
PsolXSwaVdIXhXC1uaMh73g9xIRS1rfGO1N/9TIpg5PSPzG8rU1h4XcvAGKnSbmI
9F34uJiKq0RzVkDsYfYBi481VDhazzoRfHMJ0UBEbTo4UOQ+PtdMOmhM2WJKyjTx
QGZflVY8YN/oT9/rsCZij5lo1478CK0KWfZSNGx8AYWs75l4C/VA07kNAVT7qi/G
uAKUneDTBhEx8r6pcjJcHZkzIV5T7iBw+3/xBQVOPvDZfmkpxfDZYOkPR8hSt1pR
LveIKL4kyCjopk2/SSB2rgG9qm16X0CcQP6fjLSkPqkYL2VArR3r
-----END CERTIFICATE-----
Generated at Mon Apr 7 13:20:07 2025 by rpki-client