Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/7oEl4F5MjyIBXDus0Ehi5qZMI4w.roa
File: 7oEl4F5MjyIBXDus0Ehi5qZMI4w.roa (raw, json)
Hash identifier: KxKOi6/Wz1W4CoMKtEyknhWDNBQA2p84VMOMgQxhjVg=
Subject key identifier: EE:81:25:E0:5E:4C:8F:22:01:5C:3B:AC:D0:48:62:E6:A6:4C:23:8C
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0192412C81EC26D834552EF6E117B12C119E
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/7oEl4F5MjyIBXDus0Ehi5qZMI4w.roa
Signing time: Mon 30 Sep 2024 04:24:48 +0000
ROA not before: Mon 30 Sep 2024 04:24:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 91.147.124.0/23 maxlen: 24
212.116.226.0/23 maxlen: 24
212.116.241.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:41:2c:81:ec:26:d8:34:55:2e:f6:e1:17:b1:2c:11:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Sep 30 04:24:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ee8125e05e4c8f22015c3bacd04862e6a64c238c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:ed:ca:3e:7c:e1:99:9f:6f:cb:29:e4:65:4f:
88:07:58:f0:e5:06:00:00:28:b1:a5:b3:91:4b:1a:
28:2e:8e:49:49:d0:83:cb:9e:80:92:f0:5e:d4:f2:
7c:84:65:5b:2c:e4:88:59:31:e0:32:d4:03:b5:23:
5c:7a:2a:e6:a6:f3:34:12:39:83:37:dd:36:f5:93:
47:bd:ae:a9:c9:9e:72:15:66:ac:d9:c7:bf:6f:27:
68:3f:ef:d7:4b:06:6b:0a:db:7b:7e:82:4e:39:36:
74:88:62:2e:b9:e7:9e:bf:4d:85:7c:43:f1:56:0c:
7a:6c:5d:3d:31:4c:63:1f:2e:07:8a:14:41:00:8c:
f4:11:58:e8:b7:92:70:45:d3:a1:93:74:79:67:77:
67:5a:23:ae:0b:75:e4:d4:c9:66:25:e9:ac:56:79:
7c:38:00:0c:0c:19:e4:a8:08:d7:3d:e1:27:5d:05:
8f:8f:98:0c:ee:a2:0b:f7:17:44:d3:1e:8a:fb:be:
09:ff:e7:a9:a9:a8:d1:67:b9:86:07:e4:b8:84:a8:
bb:9c:33:7b:69:81:a0:9d:4f:f9:19:9f:0a:ad:36:
5f:d1:1b:45:c6:ea:0d:b3:69:98:cc:00:c0:df:bf:
c9:3d:0b:e8:b0:c5:c0:dd:d9:b8:97:1e:11:c7:2c:
04:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:81:25:E0:5E:4C:8F:22:01:5C:3B:AC:D0:48:62:E6:A6:4C:23:8C
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/7oEl4F5MjyIBXDus0Ehi5qZMI4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.124.0/23
212.116.226.0/23
212.116.241.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:e8:0f:51:73:70:64:17:e4:89:60:a5:f5:46:1a:6f:b6:64:
ee:37:46:a8:fd:e1:f6:64:40:0e:c7:a6:11:84:5a:5c:7a:70:
24:38:69:f3:c5:ad:17:89:be:1b:3a:96:97:29:3d:bf:71:63:
79:dc:d3:4a:95:c5:5d:b7:a4:c9:87:34:0c:07:bc:7d:94:e8:
21:64:c4:f6:1c:6f:c7:66:f7:18:49:4e:e7:e6:9c:43:15:b6:
8c:e3:9f:f9:5d:44:a9:6e:0b:52:4b:65:c5:2b:7c:3e:28:39:
31:d7:b1:12:3e:dd:30:73:04:0c:32:f2:60:b1:88:ee:f1:c8:
c4:16:c4:58:61:23:c3:0c:a7:30:d7:35:b8:e0:08:a3:14:a3:
36:a6:db:46:85:ee:1a:85:0b:97:3e:11:83:a9:d4:3c:76:70:
b8:47:2c:0b:cf:07:59:aa:8b:5f:ce:0f:c4:d6:e6:87:b2:35:
66:d6:7f:f6:f5:a5:60:c6:75:ff:25:ae:e7:0b:4d:fb:aa:26:
6f:b9:1b:26:9f:e6:b8:69:e2:38:20:9e:9f:3d:86:f6:dc:c6:
2c:40:b3:a2:45:cf:f7:97:e2:cc:6f:89:92:c8:f5:92:df:eb:
36:9a:31:b2:00:fa:99:fe:af:5a:7c:6b:0c:1c:44:40:4d:6f:
4a:90:71:62
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZJBLIHsJtg0VS724RexLBGeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi
ZTAwNWQwHhcNMjQwOTMwMDQyNDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZTgxMjVlMDVlNGM4ZjIyMDE1YzNiYWNkMDQ4NjJlNmE2NGMyMzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9+3KPnzhmZ9vyynkZU+IB1jw5QYA
ACixpbORSxooLo5JSdCDy56AkvBe1PJ8hGVbLOSIWTHgMtQDtSNceirmpvM0EjmD
N9029ZNHva6pyZ5yFWas2ce/bydoP+/XSwZrCtt7foJOOTZ0iGIuueeev02FfEPx
Vgx6bF09MUxjHy4HihRBAIz0EVjot5JwRdOhk3R5Z3dnWiOuC3Xk1MlmJemsVnl8
OAAMDBnkqAjXPeEnXQWPj5gM7qIL9xdE0x6K+74J/+epqajRZ7mGB+S4hKi7nDN7
aYGgnU/5GZ8KrTZf0RtFxuoNs2mYzADA37/JPQvosMXA3dm4lx4RxywEbwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFO6BJeBeTI8iAVw7rNBIYuamTCOMMB8GA1UdIwQY
MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt
ZTEyYjE2NDIxNWI5LzEvN29FbDRGNU1qeUlCWER1czBFaGk1cVpNSTR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5
LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW5N8AwQB
1HTiAwQA1HTxMA0GCSqGSIb3DQEBCwUAA4IBAQCa6A9Rc3BkF+SJYKX1RhpvtmTu
N0ao/eH2ZEAOx6YRhFpcenAkOGnzxa0Xib4bOpaXKT2/cWN53NNKlcVdt6TJhzQM
B7x9lOghZMT2HG/HZvcYSU7n5pxDFbaM45/5XUSpbgtSS2XFK3w+KDkx17ESPt0w
cwQMMvJgsYju8cjEFsRYYSPDDKcw1zW44AijFKM2pttGhe4ahQuXPhGDqdQ8dnC4
RywLzwdZqotfzg/E1uaHsjVm1n/29aVgxnX/Ja7nC037qiZvuRsmn+a4aeI4IJ6f
PYb23MYsQLOiRc/3l+LMb4mSyPWS3+s2mjGyAPqZ/q9afGsMHERATW9KkHFi
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:05 2025 by rpki-client