Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/arM4rSr3_zYWYsvqUqH9LMJxK1c.roa
File: arM4rSr3_zYWYsvqUqH9LMJxK1c.roa (raw, json)
Hash identifier: jH1XC6dsbVtzQ5KTBqEfgNDIc/WzLssGqH+BUquB6w8=
Subject key identifier: 6A:B3:38:AD:2A:F7:FF:36:16:62:CB:EA:52:A1:FD:2C:C2:71:2B:57
Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Certificate serial: 0194266B4B8C372843682E63DCDCDD7CE794
Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/arM4rSr3_zYWYsvqUqH9LMJxK1c.roa
Signing time: Thu 02 Jan 2025 09:49:13 +0000
ROA not before: Thu 02 Jan 2025 09:49:13 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60707
IP address blocks: 91.228.12.0/24 maxlen: 24
91.228.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:4b:8c:37:28:43:68:2e:63:dc:dc:dd:7c:e7:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88
Validity
Not Before: Jan 2 09:49:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6ab338ad2af7ff361662cbea52a1fd2cc2712b57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:95:a3:73:5c:ea:54:f4:75:41:39:70:ee:49:
a4:0c:2e:c8:0f:90:73:71:7e:55:6e:b6:ba:a5:e5:
08:ca:cb:a1:f4:7c:84:65:79:77:13:e8:62:41:7d:
d2:2e:87:1e:7c:27:26:8c:5d:ff:e2:13:4e:05:5d:
99:58:88:8b:7c:ec:78:d9:89:8c:ee:43:aa:5a:ec:
83:c8:07:bb:2d:31:52:21:d1:c9:3b:5b:f7:ff:ee:
2f:5e:fb:ed:b4:17:65:b4:6b:62:7f:5c:30:03:81:
75:68:ff:c0:df:b0:3c:4b:1f:00:f6:07:ff:3c:c2:
9a:58:74:c0:c4:5f:2b:e2:3e:83:e4:63:48:31:1c:
34:32:fa:8f:94:96:97:c5:2b:42:f0:25:b5:28:27:
62:91:1b:9e:68:ca:9d:7a:df:d4:05:52:e8:cb:0a:
56:62:d5:8c:95:3f:f6:c0:cb:14:06:33:6b:5d:d0:
18:c6:a6:ca:4a:22:5f:c7:2a:02:b1:a5:35:1c:08:
fb:f5:7e:e5:67:e2:d2:c8:c7:10:3b:6b:bf:6b:85:
ec:40:97:8a:cf:2a:07:7b:ba:4e:6e:42:d2:0f:3f:
df:b0:25:4c:20:d4:00:39:49:83:6c:25:e2:e1:99:
e1:24:ee:0e:bb:7a:b0:e8:0f:28:25:66:d7:af:16:
bc:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:B3:38:AD:2A:F7:FF:36:16:62:CB:EA:52:A1:FD:2C:C2:71:2B:57
X509v3 Authority Key Identifier:
keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/arM4rSr3_zYWYsvqUqH9LMJxK1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.12.0/24
91.228.14.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:56:60:15:13:c7:46:2b:5d:4e:ac:02:af:e2:de:e8:34:1c:
20:09:cd:08:54:e9:b5:36:3d:a7:6c:d6:24:2d:e9:a0:af:89:
9e:01:82:47:44:2a:38:e7:3e:6a:85:ff:76:c8:0f:f8:ff:67:
7f:cc:37:55:27:fc:90:df:b0:d9:18:d5:10:51:c5:6b:e1:3c:
27:16:02:ed:29:ca:e5:7f:e5:bb:9d:d8:fa:cc:fd:0d:c2:72:
93:75:a9:ac:9f:59:1d:c8:13:a2:f7:28:00:f8:08:33:74:d4:
c9:4b:01:ad:56:14:9a:16:9c:1d:de:86:c4:c4:8e:fe:52:84:
b2:b4:aa:42:47:3d:12:82:59:90:43:43:72:f4:bd:2c:0d:8a:
b6:a9:03:fa:7c:9e:df:74:11:6f:fd:0f:c7:28:e5:27:8a:48:
df:c5:df:2c:5c:fe:2e:45:b6:39:37:a9:0b:19:73:cb:ca:08:
2a:a4:f2:2c:fe:15:c1:6f:61:52:f2:c5:8b:ac:c5:e0:fb:a7:
82:89:d9:44:b7:03:56:b5:b1:c9:36:53:ec:ae:2f:f7:31:1e:
b5:fa:9e:00:b9:0b:8b:30:cc:41:af:3b:42:90:5c:06:ca:d3:
1e:3d:2c:50:48:c8:81:63:60:49:f3:44:0c:97:cd:ad:52:00:
87:ee:65:df
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQma0uMNyhDaC5j3NzdfOeUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5
MjFmODgwHhcNMjUwMTAyMDk0OTEzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YWIzMzhhZDJhZjdmZjM2MTY2MmNiZWE1MmExZmQyY2MyNzEyYjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2pWjc1zqVPR1QTlw7kmkDC7ID5Bz
cX5Vbra6peUIysuh9HyEZXl3E+hiQX3SLocefCcmjF3/4hNOBV2ZWIiLfOx42YmM
7kOqWuyDyAe7LTFSIdHJO1v3/+4vXvvttBdltGtif1wwA4F1aP/A37A8Sx8A9gf/
PMKaWHTAxF8r4j6D5GNIMRw0MvqPlJaXxStC8CW1KCdikRueaMqdet/UBVLoywpW
YtWMlT/2wMsUBjNrXdAYxqbKSiJfxyoCsaU1HAj79X7lZ+LSyMcQO2u/a4XsQJeK
zyoHe7pObkLSDz/fsCVMINQAOUmDbCXi4ZnhJO4Ou3qw6A8oJWbXrxa8gwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFGqzOK0q9/82FmLL6lKh/SzCcStXMB8GA1UdIwQY
MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt
YTE4NGYzNTU2ZTQzLzEvYXJNNHJTcjNfellXWXN2cVVxSDlMTUp4SzFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz
LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+QMAwQA
W+QOMA0GCSqGSIb3DQEBCwUAA4IBAQA6VmAVE8dGK11OrAKv4t7oNBwgCc0IVOm1
Nj2nbNYkLemgr4meAYJHRCo45z5qhf92yA/4/2d/zDdVJ/yQ37DZGNUQUcVr4Twn
FgLtKcrlf+W7ndj6zP0NwnKTdamsn1kdyBOi9ygA+AgzdNTJSwGtVhSaFpwd3obE
xI7+UoSytKpCRz0SglmQQ0Ny9L0sDYq2qQP6fJ7fdBFv/Q/HKOUnikjfxd8sXP4u
RbY5N6kLGXPLyggqpPIs/hXBb2FS8sWLrMXg+6eCidlEtwNWtbHJNlPsri/3MR61
+p4AuQuLMMxBrztCkFwGytMePSxQSMiBY2BJ80QMl82tUgCH7mXf
-----END CERTIFICATE-----
Generated at Mon Apr 7 20:07:44 2025 by rpki-client