Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/uXQZBDj9ZtkXG_83Mo1I8Z6Fydw.roa
File: uXQZBDj9ZtkXG_83Mo1I8Z6Fydw.roa (raw, json)
Hash identifier: SGdXI5i5fIsWQdG6sYWkGmfc2P0KTqH/WAPHrOQF1V8=
Subject key identifier: B9:74:19:04:38:FD:66:D9:17:1B:FF:37:32:8D:48:F1:9E:85:C9:DC
Certificate issuer: /CN=57b6c9ef13d4acd12abe6d9bb5b3592edf820f29
Certificate serial: 019427B4109936A9B40843E1F4ED816B1BF6
Authority key identifier: 57:B6:C9:EF:13:D4:AC:D1:2A:BE:6D:9B:B5:B3:59:2E:DF:82:0F:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/uXQZBDj9ZtkXG_83Mo1I8Z6Fydw.roa
Signing time: Thu 02 Jan 2025 15:48:19 +0000
ROA not before: Thu 02 Jan 2025 15:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31463
IP address blocks: 91.220.24.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:10:99:36:a9:b4:08:43:e1:f4:ed:81:6b:1b:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b6c9ef13d4acd12abe6d9bb5b3592edf820f29
Validity
Not Before: Jan 2 15:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b974190438fd66d9171bff37328d48f19e85c9dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:91:a2:2d:54:57:2d:f8:81:f2:43:29:fa:f6:
05:04:89:ac:40:b3:bb:0c:b3:4d:b1:4c:a1:b7:3e:
96:97:db:ef:47:9b:6b:24:fc:05:84:68:94:9c:5a:
de:0d:8d:2e:df:2b:2f:2a:30:f5:ed:4f:58:ba:95:
32:70:b7:39:1c:2b:6a:3d:e2:13:92:1f:7d:e5:91:
88:c3:93:d1:ca:66:5c:cd:ab:85:bf:28:f7:e9:72:
f1:ba:7f:cf:f2:28:4c:32:01:a0:a9:09:bc:12:46:
fb:9c:2e:67:f0:f1:d5:c7:f9:5d:55:32:e0:75:a2:
b2:e1:d5:7f:ad:d1:7b:03:a2:fd:e2:62:a5:81:36:
85:f0:42:88:c4:e7:8f:29:85:7b:d2:35:2a:7f:33:
30:53:48:99:3b:6a:04:e4:de:ee:02:5b:db:a0:bb:
4e:5c:ae:d7:38:36:53:6a:19:96:9e:af:f6:b9:20:
56:44:fb:f4:58:b5:7d:c1:3a:5a:8c:26:a4:5b:82:
65:5c:98:6a:c4:e4:ce:39:d7:73:b2:ad:27:fd:b3:
d8:3e:33:77:2a:17:9c:02:2d:0c:01:32:74:ce:89:
66:23:88:72:87:74:b0:a8:a3:66:52:76:9e:be:3d:
5f:24:f9:49:0b:cc:9d:2e:d5:ad:a0:bc:72:56:f8:
fc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:74:19:04:38:FD:66:D9:17:1B:FF:37:32:8D:48:F1:9E:85:C9:DC
X509v3 Authority Key Identifier:
keyid:57:B6:C9:EF:13:D4:AC:D1:2A:BE:6D:9B:B5:B3:59:2E:DF:82:0F:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7bJ7xPUrNEqvm2btbNZLt-CDyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/uXQZBDj9ZtkXG_83Mo1I8Z6Fydw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/190cc0-2637-400b-ac93-42e7e15c82f2/1/V7bJ7xPUrNEqvm2btbNZLt-CDyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.24.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a7:eb:ac:28:d6:20:8f:74:5c:43:b1:00:4f:5a:f0:92:3a:
24:5d:5f:8d:ce:83:f1:4e:ea:3a:94:a6:83:09:aa:cc:df:d7:
35:9b:f2:da:60:a6:a9:59:2e:26:cb:b5:fc:5d:c6:18:88:5d:
87:74:6b:b9:d2:1c:64:2c:ef:32:37:5b:65:8d:14:c6:e0:2e:
b5:cf:dc:9c:fd:7d:74:4d:a8:c9:f7:38:24:e6:65:dc:14:fd:
e7:db:5f:48:af:78:58:93:10:b9:00:38:3e:2d:ee:f2:23:b5:
66:f6:14:0b:74:bc:bd:6b:36:e0:f7:1a:31:f6:1d:3a:b1:17:
db:8e:97:92:b3:fa:95:3c:f0:fc:ab:08:59:46:87:01:ae:93:
6e:a5:40:ad:36:0e:bc:d9:ca:20:d4:d6:23:e1:18:3b:17:10:
36:b5:c0:d9:c5:01:cc:22:f5:07:3f:b7:9d:75:fb:52:6d:22:
db:a2:8c:8e:e9:b5:23:59:3f:d9:1a:50:74:f5:c1:e4:fe:5d:
e0:93:ca:36:45:45:6c:a9:be:7c:f9:d1:a0:73:46:d9:05:ee:
22:8a:1a:a2:ae:4b:ae:c5:03:cb:08:82:3c:76:c7:d6:cf:78:
6f:52:27:f7:9b:a5:be:19:08:b9:6e:59:45:ed:ce:c0:7f:e9:
57:a9:cf:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntBCZNqm0CEPh9O2Baxv2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3YjZjOWVmMTNkNGFjZDEyYWJlNmQ5YmI1YjM1OTJlZGY4
MjBmMjkwHhcNMjUwMTAyMTU0ODE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOTc0MTkwNDM4ZmQ2NmQ5MTcxYmZmMzczMjhkNDhmMTllODVjOWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo5GiLVRXLfiB8kMp+vYFBImsQLO7
DLNNsUyhtz6Wl9vvR5trJPwFhGiUnFreDY0u3ysvKjD17U9YupUycLc5HCtqPeIT
kh995ZGIw5PRymZczauFvyj36XLxun/P8ihMMgGgqQm8Ekb7nC5n8PHVx/ldVTLg
daKy4dV/rdF7A6L94mKlgTaF8EKIxOePKYV70jUqfzMwU0iZO2oE5N7uAlvboLtO
XK7XODZTahmWnq/2uSBWRPv0WLV9wTpajCakW4JlXJhqxOTOOddzsq0n/bPYPjN3
KhecAi0MATJ0zolmI4hyh3SwqKNmUnaevj1fJPlJC8ydLtWtoLxyVvj8owIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLl0GQQ4/WbZFxv/NzKNSPGehcncMB8GA1UdIwQY
MBaAFFe2ye8T1KzRKr5tm7WzWS7fgg8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjdiSjd4UFVyTkVxdm0yYnRiTlpMdC1DRHlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xOTBjYzAtMjYzNy00MDBiLWFjOTMt
NDJlN2UxNWM4MmYyLzEvdVhRWkJEajladGtYR184M01vMUk4WjZGeWR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8xOTBjYzAtMjYzNy00MDBiLWFjOTMtNDJlN2UxNWM4MmYy
LzEvVjdiSjd4UFVyTkVxdm0yYnRiTlpMdC1DRHlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9wYMA0G
CSqGSIb3DQEBCwUAA4IBAQB1p+usKNYgj3RcQ7EAT1rwkjokXV+NzoPxTuo6lKaD
CarM39c1m/LaYKapWS4my7X8XcYYiF2HdGu50hxkLO8yN1tljRTG4C61z9yc/X10
TajJ9zgk5mXcFP3n219Ir3hYkxC5ADg+Le7yI7Vm9hQLdLy9azbg9xox9h06sRfb
jpeSs/qVPPD8qwhZRocBrpNupUCtNg682cog1NYj4Rg7FxA2tcDZxQHMIvUHP7ed
dftSbSLbooyO6bUjWT/ZGlB09cHk/l3gk8o2RUVsqb58+dGgc0bZBe4iihqirkuu
xQPLCII8dsfWz3hvUif3m6W+GQi5bllF7c7Af+lXqc8v
-----END CERTIFICATE-----
Generated at Tue Apr 8 00:22:38 2025 by rpki-client