Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/2iLiWe0BMpbPlHeRUZgf_7ggDIw.roa
File: 2iLiWe0BMpbPlHeRUZgf_7ggDIw.roa (raw, json)
Hash identifier: 5a6Nlx4knEH8VTjhj8RCsqY6ZT98S2ewOdcJJkdDglM=
Subject key identifier: DA:22:E2:59:ED:01:32:96:CF:94:77:91:51:98:1F:FF:B8:20:0C:8C
Certificate issuer: /CN=2fc20be6167890247303214197658ca7c9676150
Certificate serial: 019427B3E6A73051E737F35AF59C76C63D30
Authority key identifier: 2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/2iLiWe0BMpbPlHeRUZgf_7ggDIw.roa
Signing time: Thu 02 Jan 2025 15:48:08 +0000
ROA not before: Thu 02 Jan 2025 15:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31898
IP address blocks: 91.223.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:e6:a7:30:51:e7:37:f3:5a:f5:9c:76:c6:3d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fc20be6167890247303214197658ca7c9676150
Validity
Not Before: Jan 2 15:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da22e259ed013296cf94779151981fffb8200c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:25:1f:7e:44:6a:8f:37:a0:09:a1:46:32:3f:
a4:16:e0:17:b8:43:97:88:fd:4e:74:3a:84:9d:cc:
bd:7d:ca:48:4a:b3:66:bf:74:27:e1:a2:2e:27:2c:
17:6e:da:6c:b4:48:66:f5:89:f8:1b:43:ee:fb:81:
a6:bc:37:4f:8e:5d:48:c0:fb:85:92:19:c4:0f:7e:
bc:77:60:0b:80:a9:78:50:cf:f5:ca:69:dd:21:d1:
63:7e:18:22:0a:df:63:3a:7f:20:cc:0b:be:6b:ce:
ce:09:31:43:c3:58:a6:9b:64:22:6b:01:c9:c4:4f:
35:1b:b7:19:25:6b:19:e6:f7:d1:b1:30:3f:96:1b:
9a:0b:89:96:14:bb:a9:22:36:78:21:e4:22:86:5c:
88:0d:15:88:21:4e:39:c9:66:42:f0:14:da:04:19:
93:1e:40:ec:7e:f5:f7:37:80:0f:8b:26:2f:0a:b9:
a2:75:54:78:36:75:24:9c:4a:5f:b9:70:7d:96:81:
c3:8d:39:7f:62:d8:52:98:84:3b:c9:ea:df:5a:a4:
1b:7a:06:a9:23:0b:71:c2:57:05:fe:d2:ae:a9:a5:
fc:71:72:ff:71:cd:7f:47:0f:0f:45:76:22:c4:7c:
d0:21:c8:f1:6a:66:59:0c:09:35:d2:f4:79:fb:ca:
ff:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:22:E2:59:ED:01:32:96:CF:94:77:91:51:98:1F:FF:B8:20:0C:8C
X509v3 Authority Key Identifier:
keyid:2F:C2:0B:E6:16:78:90:24:73:03:21:41:97:65:8C:A7:C9:67:61:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/2iLiWe0BMpbPlHeRUZgf_7ggDIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/f5fafc-668d-4ada-8ec6-2449a3ec923e/1/L8IL5hZ4kCRzAyFBl2WMp8lnYVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.237.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:2f:ae:f2:6a:f5:2c:81:6a:72:e4:89:69:cf:78:6f:a1:16:
5c:cd:ad:57:f5:5b:08:5f:e3:7f:fd:df:dd:4f:c6:e4:ab:12:
5c:f0:74:25:f4:f5:fa:89:e6:3b:3e:0e:63:26:b5:25:57:dd:
93:e6:97:89:d8:ee:22:1e:49:63:85:46:ed:1f:6d:0c:f9:9b:
0d:e4:2d:64:64:42:29:b2:ce:c6:44:b7:a8:be:0e:ad:65:09:
a3:cd:42:91:69:b1:23:19:a5:a7:fc:fb:2e:4a:c1:1a:da:69:
d2:54:ea:e1:4b:a8:5e:f4:77:31:56:f4:d4:b0:2b:63:7b:fa:
eb:f7:55:11:a5:d4:bd:62:59:41:7c:cc:02:6e:78:62:8d:90:
9f:d0:6e:f5:2f:b7:a8:b6:d0:31:59:e6:47:1c:8c:d8:ab:ee:
b4:42:81:ed:2f:6e:9e:a1:c7:1f:1c:83:22:45:4a:d3:c4:b5:
fa:d1:92:44:1a:c4:44:07:4f:f7:1f:98:60:f4:eb:ff:7a:8d:
fa:95:5b:9f:c0:25:29:2e:02:05:f8:1c:b9:7b:65:df:e0:73:
79:de:db:3d:2e:75:20:db:68:f1:b3:3c:d8:1a:44:f4:92:ca:
87:5e:cd:80:7d:dc:22:0f:af:fb:c3:df:9e:5e:83:e4:93:aa:
19:4b:7b:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQns+anMFHnN/Na9Zx2xj0wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYzIwYmU2MTY3ODkwMjQ3MzAzMjE0MTk3NjU4Y2E3Yzk2
NzYxNTAwHhcNMjUwMTAyMTU0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTIyZTI1OWVkMDEzMjk2Y2Y5NDc3OTE1MTk4MWZmZmI4MjAwYzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCUffkRqjzegCaFGMj+kFuAXuEOX
iP1OdDqEncy9fcpISrNmv3Qn4aIuJywXbtpstEhm9Yn4G0Pu+4GmvDdPjl1IwPuF
khnED368d2ALgKl4UM/1ymndIdFjfhgiCt9jOn8gzAu+a87OCTFDw1imm2QiawHJ
xE81G7cZJWsZ5vfRsTA/lhuaC4mWFLupIjZ4IeQihlyIDRWIIU45yWZC8BTaBBmT
HkDsfvX3N4APiyYvCrmidVR4NnUknEpfuXB9loHDjTl/YthSmIQ7yerfWqQbegap
IwtxwlcF/tKuqaX8cXL/cc1/Rw8PRXYixHzQIcjxamZZDAk10vR5+8r/JQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNoi4lntATKWz5R3kVGYH/+4IAyMMB8GA1UdIwQY
MBaAFC/CC+YWeJAkcwMhQZdljKfJZ2FQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYt
MjQ0OWEzZWM5MjNlLzEvMmlMaVdlMEJNcGJQbEhlUlVaZ2ZfN2dnREl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS9mNWZhZmMtNjY4ZC00YWRhLThlYzYtMjQ0OWEzZWM5MjNl
LzEvTDhJTDVoWjRrQ1J6QXlGQmwyV01wOGxuWVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9/tMA0G
CSqGSIb3DQEBCwUAA4IBAQBfL67yavUsgWpy5Ilpz3hvoRZcza1X9VsIX+N//d/d
T8bkqxJc8HQl9PX6ieY7Pg5jJrUlV92T5peJ2O4iHkljhUbtH20M+ZsN5C1kZEIp
ss7GRLeovg6tZQmjzUKRabEjGaWn/PsuSsEa2mnSVOrhS6he9HcxVvTUsCtje/rr
91URpdS9YllBfMwCbnhijZCf0G71L7eottAxWeZHHIzYq+60QoHtL26eoccfHIMi
RUrTxLX60ZJEGsREB0/3H5hg9Ov/eo36lVufwCUpLgIF+By5e2Xf4HN53ts9LnUg
22jxszzYGkT0ksqHXs2AfdwiD6/7w9+eXoPkk6oZS3to
-----END CERTIFICATE-----
Generated at Sat Apr 5 18:53:29 2025 by rpki-client