Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f9e8e0-57d4-45c1-96db-28e1cca65e89/1/cUWIx2LuvSZRz9B8a9HTGu-i2Ns.roa
File: cUWIx2LuvSZRz9B8a9HTGu-i2Ns.roa (raw, json)
Hash identifier: TvgC9nq3jip6N+oAH9s1CVf0nWWxMquxqywka/HJtu0=
Subject key identifier: 71:45:88:C7:62:EE:BD:26:51:CF:D0:7C:6B:D1:D3:1A:EF:A2:D8:DB
Certificate issuer: /CN=3e13eb62fc7dff07ef0053317b4f67ebb14c7dba
Certificate serial: 01856D417912845A2C1091A98A6880656E88
Authority key identifier: 3E:13:EB:62:FC:7D:FF:07:EF:00:53:31:7B:4F:67:EB:B1:4C:7D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhPrYvx9_wfvAFMxe09n67FMfbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f9e8e0-57d4-45c1-96db-28e1cca65e89/1/cUWIx2LuvSZRz9B8a9HTGu-i2Ns.roa
Signing time: Sun 01 Jan 2023 12:14:45 +0000
ROA not before: Sun 01 Jan 2023 12:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205444
IP address blocks: 91.228.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:79:12:84:5a:2c:10:91:a9:8a:68:80:65:6e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e13eb62fc7dff07ef0053317b4f67ebb14c7dba
Validity
Not Before: Jan 1 12:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=714588c762eebd2651cfd07c6bd1d31aefa2d8db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:3c:ce:ee:d4:bf:f9:ad:9e:5a:51:8f:e7:db:
48:23:cb:db:45:0f:5f:84:c4:f5:92:bf:5e:6c:47:
92:c8:f2:de:a3:75:4c:a9:bb:88:9c:1d:31:c3:b4:
bc:88:6e:64:b5:77:cd:a2:8e:f8:9f:12:a5:c6:8a:
fd:a4:eb:82:26:e0:9b:bf:8f:15:42:4f:07:34:1a:
4b:f7:f4:e0:63:a0:2a:09:2f:dd:7e:6a:d9:f8:fa:
17:45:a7:cf:cf:a6:13:3c:c2:79:17:6d:c1:ce:4f:
bd:e1:8e:73:3a:6f:d2:26:26:af:6b:d8:5a:fc:c7:
fa:71:31:26:a8:f5:2b:67:fc:a4:e5:52:4b:71:d7:
53:90:a3:15:f8:0d:03:e6:fe:0e:47:e8:e6:6d:ce:
f8:ef:2b:8d:bf:45:2a:3e:b7:fe:3f:76:b9:d2:af:
6c:01:82:26:99:00:c3:0e:f8:57:b6:57:8b:ac:21:
72:25:18:fc:94:32:7a:7b:1a:b6:80:d3:26:5e:aa:
88:c5:9a:0c:95:04:e6:06:4e:1f:ff:46:fe:4d:09:
36:88:0f:5b:89:1b:83:2c:24:6f:9a:47:07:59:c4:
05:6f:8f:f9:74:31:a8:69:51:b3:5b:24:ed:05:9e:
ca:1e:f7:f7:7c:5d:5b:0e:25:0e:0c:79:3f:94:98:
32:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:45:88:C7:62:EE:BD:26:51:CF:D0:7C:6B:D1:D3:1A:EF:A2:D8:DB
X509v3 Authority Key Identifier:
keyid:3E:13:EB:62:FC:7D:FF:07:EF:00:53:31:7B:4F:67:EB:B1:4C:7D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhPrYvx9_wfvAFMxe09n67FMfbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f9e8e0-57d4-45c1-96db-28e1cca65e89/1/cUWIx2LuvSZRz9B8a9HTGu-i2Ns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f9e8e0-57d4-45c1-96db-28e1cca65e89/1/PhPrYvx9_wfvAFMxe09n67FMfbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.227.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:1e:0f:ef:34:62:7b:56:1e:ce:e7:2c:38:62:7e:c7:91:01:
60:e8:03:57:4a:f3:87:bd:c2:d3:6a:9c:33:55:9b:1b:a4:b7:
fa:64:87:e1:49:fd:c8:e7:3d:17:f9:52:d8:36:1f:3c:1b:d5:
d9:0e:27:0a:6e:ae:9d:67:f9:de:95:af:c1:0e:81:42:cf:b1:
1f:cf:cd:05:51:c7:98:a1:99:78:5d:1d:95:4a:dc:ea:8c:7c:
66:d9:30:f7:1c:ba:b3:af:68:01:65:d6:f3:9d:a1:db:1e:5d:
2e:13:fb:80:11:24:39:36:34:1c:98:8e:24:10:a7:40:dc:80:
42:f5:2c:85:7a:22:a5:a2:56:46:3d:d6:da:96:ba:c9:ca:30:
6b:1e:8d:a7:90:3b:64:78:2d:84:2d:69:ef:53:0d:4d:da:ca:
d8:a3:41:d4:c4:b7:ad:96:7e:e2:0d:0e:71:4f:70:20:e5:3a:
31:92:cd:06:35:3c:f8:b7:bf:f6:79:c1:2b:81:9e:63:c1:f8:
bb:66:b0:b1:49:80:21:c8:46:62:61:3b:f4:ef:16:7e:ce:d3:
8c:4e:bf:1a:05:5a:11:a3:99:d9:cb:9f:7b:70:98:4c:ba:91:
88:24:87:00:33:9a:6f:8d:50:f2:97:c7:d2:8d:b0:85:c8:04:
fa:8a:36:15
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtQXkShFosEJGpimiAZW6IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNlMTNlYjYyZmM3ZGZmMDdlZjAwNTMzMTdiNGY2N2ViYjE0
YzdkYmEwHhcNMjMwMTAxMTIxNDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTQ1ODhjNzYyZWViZDI2NTFjZmQwN2M2YmQxZDMxYWVmYTJkOGRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjzO7tS/+a2eWlGP59tII8vbRQ9f
hMT1kr9ebEeSyPLeo3VMqbuInB0xw7S8iG5ktXfNoo74nxKlxor9pOuCJuCbv48V
Qk8HNBpL9/TgY6AqCS/dfmrZ+PoXRafPz6YTPMJ5F23Bzk+94Y5zOm/SJiava9ha
/Mf6cTEmqPUrZ/yk5VJLcddTkKMV+A0D5v4OR+jmbc747yuNv0UqPrf+P3a50q9s
AYImmQDDDvhXtleLrCFyJRj8lDJ6exq2gNMmXqqIxZoMlQTmBk4f/0b+TQk2iA9b
iRuDLCRvmkcHWcQFb4/5dDGoaVGzWyTtBZ7KHvf3fF1bDiUODHk/lJgyGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHFFiMdi7r0mUc/QfGvR0xrvotjbMB8GA1UdIwQY
MBaAFD4T62L8ff8H7wBTMXtPZ+uxTH26MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGhQcll2eDlfd2Z2QUZNeGUwOW42N0ZNZmJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi9mOWU4ZTAtNTdkNC00NWMxLTk2ZGIt
MjhlMWNjYTY1ZTg5LzEvY1VXSXgyTHV2U1pSejlCOGE5SFRHdS1pMk5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi9mOWU4ZTAtNTdkNC00NWMxLTk2ZGItMjhlMWNjYTY1ZTg5
LzEvUGhQcll2eDlfd2Z2QUZNeGUwOW42N0ZNZmJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+TjMA0G
CSqGSIb3DQEBCwUAA4IBAQAdHg/vNGJ7Vh7O5yw4Yn7HkQFg6ANXSvOHvcLTapwz
VZsbpLf6ZIfhSf3I5z0X+VLYNh88G9XZDicKbq6dZ/nela/BDoFCz7Efz80FUceY
oZl4XR2VStzqjHxm2TD3HLqzr2gBZdbznaHbHl0uE/uAESQ5NjQcmI4kEKdA3IBC
9SyFeiKlolZGPdbalrrJyjBrHo2nkDtkeC2ELWnvUw1N2srYo0HUxLetln7iDQ5x
T3Ag5Toxks0GNTz4t7/2ecErgZ5jwfi7ZrCxSYAhyEZiYTv07xZ+ztOMTr8aBVoR
o5nZy597cJhMupGIJIcAM5pvjVDyl8fSjbCFyAT6ijYV
-----END CERTIFICATE-----
Generated at Fri Mar 14 12:09:46 2025 by rpki-client