Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/c4de5e-3ad5-455d-ad28-7c48488af02c/1/vBIb_iwBd7qUCAnwSjAzTQAl4UY.roa
File: vBIb_iwBd7qUCAnwSjAzTQAl4UY.roa (raw, json)
Hash identifier: Sq2OOlNH3NlsKtOaLnrsXBiilD0EUYeFQnMjYyykM5k=
Subject key identifier: BC:12:1B:FE:2C:01:77:BA:94:08:09:F0:4A:30:33:4D:00:25:E1:46
Certificate issuer: /CN=9de09a41cd7bed771d77205487e7a1823a0c03a2
Certificate serial: 018570D548946A7B3F83BB38585B8A99B1F8
Authority key identifier: 9D:E0:9A:41:CD:7B:ED:77:1D:77:20:54:87:E7:A1:82:3A:0C:03:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neCaQc177XcddyBUh-ehgjoMA6I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/c4de5e-3ad5-455d-ad28-7c48488af02c/1/vBIb_iwBd7qUCAnwSjAzTQAl4UY.roa
Signing time: Mon 02 Jan 2023 04:55:03 +0000
ROA not before: Mon 02 Jan 2023 04:55:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 91.246.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:48:94:6a:7b:3f:83:bb:38:58:5b:8a:99:b1:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de09a41cd7bed771d77205487e7a1823a0c03a2
Validity
Not Before: Jan 2 04:55:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bc121bfe2c0177ba940809f04a30334d0025e146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c8:f7:23:89:db:c3:bb:c7:b0:8b:d4:4b:67:
90:6b:d3:9f:bf:05:fa:ab:83:f0:82:f6:4c:f8:76:
a5:bc:4e:62:78:14:62:59:b3:8e:d0:af:39:dc:dc:
d7:fa:9c:f4:92:ec:e6:5e:53:7b:0c:4a:3a:3b:90:
9d:ae:11:f7:4a:38:a9:b1:02:81:8b:71:a5:b5:8a:
29:15:74:e0:5e:b9:6b:02:3d:f6:f5:7f:7b:ec:47:
6c:eb:14:bc:a1:a7:be:0d:f3:e2:28:8d:a9:ac:e4:
16:6c:65:22:e6:9d:13:4d:f9:76:fb:dc:a2:84:d4:
36:43:d8:15:b6:8a:e3:70:be:fe:94:31:33:39:e1:
8f:60:df:73:91:66:b7:13:14:0c:50:19:28:f9:a6:
60:51:85:ae:1e:20:cc:5f:2e:74:73:4c:12:4c:cd:
69:0a:16:2e:de:f0:d7:c8:b3:bf:dd:61:d3:c8:1f:
3e:ab:bc:20:26:bf:ed:a0:77:e7:ce:3c:b5:54:8e:
46:34:56:eb:67:fe:ba:b1:17:ac:83:3c:71:25:fa:
1c:42:24:da:7b:da:84:1b:87:53:2e:e9:0c:92:2e:
9d:bc:f4:3b:37:4c:18:8b:7f:53:d3:20:27:74:92:
38:86:bb:eb:53:fe:1c:5a:79:ac:0f:6c:f4:2d:13:
f8:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:12:1B:FE:2C:01:77:BA:94:08:09:F0:4A:30:33:4D:00:25:E1:46
X509v3 Authority Key Identifier:
keyid:9D:E0:9A:41:CD:7B:ED:77:1D:77:20:54:87:E7:A1:82:3A:0C:03:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neCaQc177XcddyBUh-ehgjoMA6I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c4de5e-3ad5-455d-ad28-7c48488af02c/1/vBIb_iwBd7qUCAnwSjAzTQAl4UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/c4de5e-3ad5-455d-ad28-7c48488af02c/1/neCaQc177XcddyBUh-ehgjoMA6I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.51.0/24
Signature Algorithm: sha256WithRSAEncryption
18:6d:a8:b4:0b:14:2f:49:85:13:84:e8:45:03:94:fd:62:1e:
69:b9:eb:3a:e4:a3:3a:15:a1:22:5b:c6:6f:a6:a1:01:24:86:
b5:10:9e:1c:2e:14:50:99:4f:f3:71:fd:4d:68:76:9b:58:19:
b7:30:d6:50:f6:bb:57:15:f5:19:dc:41:c2:39:e3:4a:7d:d5:
d5:73:28:b8:a1:65:86:c3:7f:3e:34:91:ec:2d:17:3f:20:34:
bc:cc:9c:ef:9a:42:70:01:bc:4a:19:ac:f6:ab:a3:43:ea:46:
fc:1e:3d:ed:29:39:7d:c1:18:49:a4:ce:da:d1:28:a8:d9:36:
81:f4:fe:e1:63:f3:75:45:18:1a:77:0d:46:f4:e5:01:c0:bb:
ca:37:26:45:2b:a0:0b:d4:0b:d3:ee:07:6d:4b:f4:3b:c3:7f:
6f:99:e1:ac:1c:49:46:89:20:db:a6:29:cb:1a:fb:d1:45:5c:
5c:c3:a9:6f:8f:88:40:fb:1b:90:f4:51:97:51:20:3b:bd:b8:
0e:f6:aa:85:b7:53:52:35:49:25:be:3a:d1:37:eb:bc:5f:94:
a8:28:45:ef:b5:53:01:2b:ba:b2:34:65:5a:3e:5c:f7:28:80:
46:d9:68:9d:5b:d6:71:14:da:8c:79:8c:3c:d3:93:81:d1:71:
1a:11:2e:53
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVw1UiUans/g7s4WFuKmbH4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZTA5YTQxY2Q3YmVkNzcxZDc3MjA1NDg3ZTdhMTgyM2Ew
YzAzYTIwHhcNMjMwMTAyMDQ1NTAzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiYzEyMWJmZTJjMDE3N2JhOTQwODA5ZjA0YTMwMzM0ZDAwMjVlMTQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8j3I4nbw7vHsIvUS2eQa9OfvwX6
q4PwgvZM+HalvE5ieBRiWbOO0K853NzX+pz0kuzmXlN7DEo6O5CdrhH3SjipsQKB
i3GltYopFXTgXrlrAj329X977Eds6xS8oae+DfPiKI2prOQWbGUi5p0TTfl2+9yi
hNQ2Q9gVtorjcL7+lDEzOeGPYN9zkWa3ExQMUBko+aZgUYWuHiDMXy50c0wSTM1p
ChYu3vDXyLO/3WHTyB8+q7wgJr/toHfnzjy1VI5GNFbrZ/66sResgzxxJfocQiTa
e9qEG4dTLukMki6dvPQ7N0wYi39T0yAndJI4hrvrU/4cWnmsD2z0LRP49QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLwSG/4sAXe6lAgJ8EowM00AJeFGMB8GA1UdIwQY
MBaAFJ3gmkHNe+13HXcgVIfnoYI6DAOiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmVDYVFjMTc3WGNkZHlCVWgtZWhnam9NQTZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9jNGRlNWUtM2FkNS00NTVkLWFkMjgt
N2M0ODQ4OGFmMDJjLzEvdkJJYl9pd0JkN3FVQ0Fud1NqQXpUUUFsNFVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9jNGRlNWUtM2FkNS00NTVkLWFkMjgtN2M0ODQ4OGFmMDJj
LzEvbmVDYVFjMTc3WGNkZHlCVWgtZWhnam9NQTZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/YzMA0G
CSqGSIb3DQEBCwUAA4IBAQAYbai0CxQvSYUThOhFA5T9Yh5pues65KM6FaEiW8Zv
pqEBJIa1EJ4cLhRQmU/zcf1NaHabWBm3MNZQ9rtXFfUZ3EHCOeNKfdXVcyi4oWWG
w38+NJHsLRc/IDS8zJzvmkJwAbxKGaz2q6ND6kb8Hj3tKTl9wRhJpM7a0Sio2TaB
9P7hY/N1RRgadw1G9OUBwLvKNyZFK6AL1AvT7gdtS/Q7w39vmeGsHElGiSDbpinL
GvvRRVxcw6lvj4hA+xuQ9FGXUSA7vbgO9qqFt1NSNUklvjrRN+u8X5SoKEXvtVMB
K7qyNGVaPlz3KIBG2WidW9ZxFNqMeYw805OB0XEaES5T
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:12:51 2025 by rpki-client