Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/ebe6e8-1a23-47c5-ab1f-acb1bf6b3521/1/7Kgzx3SrerMgGv5Zody0CcX7d1w.roa
File: 7Kgzx3SrerMgGv5Zody0CcX7d1w.roa (raw, json)
Hash identifier: RpiFDGwPH96ubgDRr61RGv5cI7p98XCPbVAmQ+ts1E4=
Subject key identifier: EC:A8:33:C7:74:AB:7A:B3:20:1A:FE:59:A1:DC:B4:09:C5:FB:77:5C
Certificate issuer: /CN=d75834c990fed2b33f25a02c03591758eceb5411
Certificate serial: 01856D0A8BD3D1A74E817A39A3CED96A1BFB
Authority key identifier: D7:58:34:C9:90:FE:D2:B3:3F:25:A0:2C:03:59:17:58:EC:EB:54:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11g0yZD-0rM_JaAsA1kXWOzrVBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/ebe6e8-1a23-47c5-ab1f-acb1bf6b3521/1/7Kgzx3SrerMgGv5Zody0CcX7d1w.roa
Signing time: Sun 01 Jan 2023 11:14:45 +0000
ROA not before: Sun 01 Jan 2023 11:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58221
IP address blocks: 91.239.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:8b:d3:d1:a7:4e:81:7a:39:a3:ce:d9:6a:1b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d75834c990fed2b33f25a02c03591758eceb5411
Validity
Not Before: Jan 1 11:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eca833c774ab7ab3201afe59a1dcb409c5fb775c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:46:0a:ca:7e:a3:b7:6d:fe:6b:78:b4:2e:49:
2e:12:53:32:e6:e2:fd:7f:4c:e0:fb:3b:a6:bc:3c:
85:c9:88:9f:ec:ab:08:c4:c1:7c:ac:9a:52:cf:a9:
f4:83:09:b0:5c:ec:15:37:d4:2a:4f:c9:27:f5:20:
50:36:5a:ef:6d:7f:bf:77:d9:db:d5:14:ed:ea:30:
70:c0:66:a7:37:0b:db:52:19:32:78:96:cb:1c:ef:
e6:45:db:d6:41:c4:44:e3:d4:24:6c:6f:8a:3e:db:
5d:4e:06:8c:00:cb:b2:43:2b:fa:9b:f5:df:54:9f:
6b:71:e9:51:11:e0:3d:5e:6f:65:16:b7:65:a9:91:
9f:46:b3:61:f6:ec:91:45:cc:15:bb:98:cb:69:6c:
9e:f2:b6:89:55:9a:a1:37:5f:0e:52:62:b2:b9:2f:
e0:7f:19:bf:ac:32:fc:8d:4f:ef:86:f4:6d:d7:3e:
33:57:33:b8:67:3a:c6:e7:d8:4a:21:92:d0:40:6c:
08:cd:97:aa:54:b0:6f:17:cb:61:17:71:e7:01:f6:
11:73:d5:77:a8:89:83:ac:cd:a1:a7:16:eb:dd:de:
9a:b1:c0:d2:53:32:c0:fe:6d:14:8c:86:84:35:f5:
48:f8:58:dc:e9:d8:0b:64:bc:b0:39:50:f6:00:ab:
ce:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A8:33:C7:74:AB:7A:B3:20:1A:FE:59:A1:DC:B4:09:C5:FB:77:5C
X509v3 Authority Key Identifier:
keyid:D7:58:34:C9:90:FE:D2:B3:3F:25:A0:2C:03:59:17:58:EC:EB:54:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11g0yZD-0rM_JaAsA1kXWOzrVBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ebe6e8-1a23-47c5-ab1f-acb1bf6b3521/1/7Kgzx3SrerMgGv5Zody0CcX7d1w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/ebe6e8-1a23-47c5-ab1f-acb1bf6b3521/1/11g0yZD-0rM_JaAsA1kXWOzrVBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.80.0/22
Signature Algorithm: sha256WithRSAEncryption
87:31:fb:24:4d:52:4a:b2:fb:2c:91:aa:f6:e2:f0:6b:3f:78:
42:07:c0:27:86:19:e3:2b:ff:68:a7:44:4e:7d:a1:26:1e:26:
82:74:23:00:ec:75:c7:ea:24:64:07:14:b5:3d:f2:9c:54:bf:
e9:31:62:12:0e:9d:5b:b6:ea:21:80:f3:bc:db:d6:01:db:f5:
fd:ac:2d:8f:f4:60:b1:85:ff:5b:ee:9e:c8:cd:29:84:03:02:
48:20:82:c0:6c:2a:b7:34:19:78:80:59:e0:8d:e5:39:19:a5:
94:38:28:71:7d:6a:81:a2:dc:f5:15:51:ed:d5:37:91:70:0a:
ab:c4:50:24:a8:86:fe:e6:ee:be:9f:2a:d5:1d:50:0f:74:8a:
ae:7c:63:ff:39:86:b8:f6:6e:ad:84:2f:b3:de:84:bd:a4:81:
b4:6d:d4:68:9f:4c:23:d5:60:5b:ed:2d:7b:f9:d6:58:9a:5d:
1d:7e:44:9a:7e:d8:48:b2:35:0d:2d:96:55:67:55:16:7b:17:
04:5b:7c:a1:9d:d7:ed:61:12:2e:a7:18:08:37:78:27:57:86:
bc:cf:9a:ba:93:35:fc:a0:bb:e7:71:bc:0a:b9:68:8b:3f:73:
d7:7a:64:d4:d4:8e:f0:05:16:2f:df:f9:74:a6:c3:aa:e4:e8:
56:98:e1:46
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtCovT0adOgXo5o87Zahv7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NTgzNGM5OTBmZWQyYjMzZjI1YTAyYzAzNTkxNzU4ZWNl
YjU0MTEwHhcNMjMwMTAxMTExNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlY2E4MzNjNzc0YWI3YWIzMjAxYWZlNTlhMWRjYjQwOWM1ZmI3NzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUYKyn6jt23+a3i0LkkuElMy5uL9
f0zg+zumvDyFyYif7KsIxMF8rJpSz6n0gwmwXOwVN9QqT8kn9SBQNlrvbX+/d9nb
1RTt6jBwwGanNwvbUhkyeJbLHO/mRdvWQcRE49QkbG+KPttdTgaMAMuyQyv6m/Xf
VJ9rcelREeA9Xm9lFrdlqZGfRrNh9uyRRcwVu5jLaWye8raJVZqhN18OUmKyuS/g
fxm/rDL8jU/vhvRt1z4zVzO4ZzrG59hKIZLQQGwIzZeqVLBvF8thF3HnAfYRc9V3
qImDrM2hpxbr3d6ascDSUzLA/m0UjIaENfVI+Fjc6dgLZLywOVD2AKvOJwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOyoM8d0q3qzIBr+WaHctAnF+3dcMB8GA1UdIwQY
MBaAFNdYNMmQ/tKzPyWgLANZF1js61QRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTFnMHlaRC0wck1fSmFBc0Exa1hXT3pyVkJFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9lYmU2ZTgtMWEyMy00N2M1LWFiMWYt
YWNiMWJmNmIzNTIxLzEvN0tnengzU3Jlck1nR3Y1Wm9keTBDY1g3ZDF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9lYmU2ZTgtMWEyMy00N2M1LWFiMWYtYWNiMWJmNmIzNTIx
LzEvMTFnMHlaRC0wck1fSmFBc0Exa1hXT3pyVkJFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+9QMA0G
CSqGSIb3DQEBCwUAA4IBAQCHMfskTVJKsvsskar24vBrP3hCB8AnhhnjK/9op0RO
faEmHiaCdCMA7HXH6iRkBxS1PfKcVL/pMWISDp1btuohgPO829YB2/X9rC2P9GCx
hf9b7p7IzSmEAwJIIILAbCq3NBl4gFngjeU5GaWUOChxfWqBotz1FVHt1TeRcAqr
xFAkqIb+5u6+nyrVHVAPdIqufGP/OYa49m6thC+z3oS9pIG0bdRon0wj1WBb7S17
+dZYml0dfkSafthIsjUNLZZVZ1UWexcEW3yhndftYRIupxgIN3gnV4a8z5q6kzX8
oLvncbwKuWiLP3PXemTU1I7wBRYv3/l0psOq5OhWmOFG
-----END CERTIFICATE-----
Generated at Thu Mar 13 02:37:10 2025 by rpki-client