Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/PAeVBFaniQrmr-F0V_vP4CLKmZ8.roa
File: PAeVBFaniQrmr-F0V_vP4CLKmZ8.roa (raw, json)
Hash identifier: 0Rt0LnJIOGA03D6NOu5YJUCraj7CYI+Syajq7Ra8BEg=
Subject key identifier: 3C:07:95:04:56:A7:89:0A:E6:AF:E1:74:57:FB:CF:E0:22:CA:99:9F
Certificate issuer: /CN=926cc6b46295cbbc1bdf986302d0271b8b7d7af0
Certificate serial: 018CC26D868E309E2C431F22D6D84343BF83
Authority key identifier: 92:6C:C6:B4:62:95:CB:BC:1B:DF:98:63:02:D0:27:1B:8B:7D:7A:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmzGtGKVy7wb35hjAtAnG4t9evA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/PAeVBFaniQrmr-F0V_vP4CLKmZ8.roa
Signing time: Mon 01 Jan 2024 00:30:06 +0000
ROA not before: Mon 01 Jan 2024 00:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 2542
IP address blocks: 91.140.64.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:86:8e:30:9e:2c:43:1f:22:d6:d8:43:43:bf:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926cc6b46295cbbc1bdf986302d0271b8b7d7af0
Validity
Not Before: Jan 1 00:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c07950456a7890ae6afe17457fbcfe022ca999f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:92:85:d6:08:a8:04:5d:8e:ba:7d:f2:7f:59:
85:36:7a:3c:ae:60:88:13:86:f3:19:c6:c8:08:74:
e4:f6:c3:7c:0f:8d:e3:2d:d1:85:23:8d:fc:a3:e3:
80:2c:1e:10:bf:f1:ca:ed:b4:cc:49:ae:84:e7:ea:
46:0f:24:a6:49:6b:4f:4d:10:46:7f:99:8a:d8:aa:
aa:b2:1b:c3:35:66:e1:9f:2f:63:7a:a7:12:43:fb:
32:a1:89:79:54:99:73:6d:a4:d3:85:1f:4b:44:fc:
ab:a6:af:b8:12:51:08:68:82:b1:0b:92:81:9d:80:
af:58:22:b4:b0:8d:08:77:91:aa:fb:07:f9:ae:43:
93:ac:61:3d:04:f1:7a:98:d8:b2:0f:bf:54:62:2e:
39:a2:7e:26:c4:78:92:9e:f2:3b:f3:8f:77:d8:b6:
b2:fe:7f:fb:5d:d1:42:2e:16:2b:4d:c8:db:35:43:
84:ca:7a:72:ae:f0:ef:32:f9:df:db:e4:42:5e:43:
b9:ed:c9:fe:a7:a9:6a:4d:33:ea:5d:51:69:40:59:
20:e5:c2:f7:67:19:dd:bf:6e:de:2d:6c:ab:7a:0b:
f7:93:fd:db:d0:5d:92:e3:3d:81:8b:c8:b6:c1:9e:
4d:a6:03:f3:7a:53:3a:49:bf:76:d7:53:dd:5c:11:
94:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:07:95:04:56:A7:89:0A:E6:AF:E1:74:57:FB:CF:E0:22:CA:99:9F
X509v3 Authority Key Identifier:
keyid:92:6C:C6:B4:62:95:CB:BC:1B:DF:98:63:02:D0:27:1B:8B:7D:7A:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmzGtGKVy7wb35hjAtAnG4t9evA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/PAeVBFaniQrmr-F0V_vP4CLKmZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/c0147a-fabf-40a4-9ef5-2214e96e382f/1/kmzGtGKVy7wb35hjAtAnG4t9evA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.140.64.0/18
Signature Algorithm: sha256WithRSAEncryption
4d:8e:e2:57:dd:8f:11:70:f2:17:7d:bb:46:99:96:2e:dc:e6:
f7:c3:21:f8:be:4a:5d:f8:b5:c8:47:eb:c1:ad:e2:96:ce:ea:
5b:32:d5:84:69:a3:11:c4:7e:a7:6b:a4:48:f0:49:76:59:d6:
d2:76:11:ff:64:2a:94:4a:6b:4b:7d:18:8c:7f:af:d3:9e:c8:
cb:96:d4:d8:4c:80:35:42:14:3d:1d:4d:44:c1:8d:46:80:6e:
b2:e3:e6:8d:69:94:14:0d:c0:b6:f3:eb:7c:40:06:3e:53:dd:
ef:90:c1:49:e3:8c:5f:69:04:0b:a3:12:f5:87:5c:c3:f5:38:
98:34:01:3e:f1:2b:44:8b:42:b6:1e:06:0c:a1:67:17:46:37:
a2:db:5f:5c:2b:06:af:ca:a3:39:75:70:c4:36:70:37:62:12:
1d:dd:90:9b:74:8b:a1:9c:4a:24:a1:1b:64:47:b5:0c:3d:c9:
87:a0:2a:6f:8e:b5:32:32:6e:c6:92:13:98:34:15:72:ab:97:
ff:3d:6a:17:4c:9f:55:20:04:2a:d9:ff:12:66:e5:5a:86:1a:
15:78:ed:9d:fc:bc:88:7b:1b:22:f8:a8:89:31:0d:e6:b3:79:
9e:87:3e:a4:6d:cb:bd:67:7f:4d:cd:42:0a:3b:0b:c7:7f:0d:
32:7a:f8:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzCbYaOMJ4sQx8i1thDQ7+DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNmNjNmI0NjI5NWNiYmMxYmRmOTg2MzAyZDAyNzFiOGI3
ZDdhZjAwHhcNMjQwMTAxMDAzMDA2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzA3OTUwNDU2YTc4OTBhZTZhZmUxNzQ1N2ZiY2ZlMDIyY2E5OTlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJKF1gioBF2Oun3yf1mFNno8rmCI
E4bzGcbICHTk9sN8D43jLdGFI438o+OALB4Qv/HK7bTMSa6E5+pGDySmSWtPTRBG
f5mK2KqqshvDNWbhny9jeqcSQ/syoYl5VJlzbaTThR9LRPyrpq+4ElEIaIKxC5KB
nYCvWCK0sI0Id5Gq+wf5rkOTrGE9BPF6mNiyD79UYi45on4mxHiSnvI784932Lay
/n/7XdFCLhYrTcjbNUOEynpyrvDvMvnf2+RCXkO57cn+p6lqTTPqXVFpQFkg5cL3
Zxndv27eLWyregv3k/3b0F2S4z2Bi8i2wZ5NpgPzelM6Sb9211PdXBGUlQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDwHlQRWp4kK5q/hdFf7z+AiypmfMB8GA1UdIwQY
MBaAFJJsxrRilcu8G9+YYwLQJxuLfXrwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva216R3RHS1Z5N3diMzVoakF0QW5HNHQ5ZXZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZC9jMDE0N2EtZmFiZi00MGE0LTllZjUt
MjIxNGU5NmUzODJmLzEvUEFlVkJGYW5pUXJtci1GMFZfdlA0Q0xLbVo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZC9jMDE0N2EtZmFiZi00MGE0LTllZjUtMjIxNGU5NmUzODJm
LzEva216R3RHS1Z5N3diMzVoakF0QW5HNHQ5ZXZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGW4xAMA0G
CSqGSIb3DQEBCwUAA4IBAQBNjuJX3Y8RcPIXfbtGmZYu3Ob3wyH4vkpd+LXIR+vB
reKWzupbMtWEaaMRxH6na6RI8El2WdbSdhH/ZCqUSmtLfRiMf6/TnsjLltTYTIA1
QhQ9HU1EwY1GgG6y4+aNaZQUDcC28+t8QAY+U93vkMFJ44xfaQQLoxL1h1zD9TiY
NAE+8StEi0K2HgYMoWcXRjei219cKwavyqM5dXDENnA3YhId3ZCbdIuhnEokoRtk
R7UMPcmHoCpvjrUyMm7GkhOYNBVyq5f/PWoXTJ9VIAQq2f8SZuVahhoVeO2d/LyI
exsi+KiJMQ3ms3mehz6kbcu9Z39NzUIKOwvHfw0yevhr
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:28:55 2025 by rpki-client