Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/9cE1L_Fea_u8T8gkCYt6O0by81Q.roa
File: 9cE1L_Fea_u8T8gkCYt6O0by81Q.roa (raw, json)
Hash identifier: MXH+ujhZs6Jlx/pTcvK6tBIGpllrK3HCtN8oUCvg1Rk=
Subject key identifier: F5:C1:35:2F:F1:5E:6B:FB:BC:4F:C8:24:09:8B:7A:3B:46:F2:F3:54
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0188957328B8F0416379F5F37F4D09985511
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/9cE1L_Fea_u8T8gkCYt6O0by81Q.roa
Signing time: Wed 07 Jun 2023 10:42:12 +0000
ROA not before: Wed 07 Jun 2023 10:42:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 212.116.244.0/24 maxlen: 24
212.116.246.0/24 maxlen: 24
91.147.117.0/24 maxlen: 24
91.147.123.0/24 maxlen: 24
91.147.119.0/24 maxlen: 24
91.147.122.0/24 maxlen: 24
91.147.121.0/24 maxlen: 24
91.147.126.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:95:73:28:b8:f0:41:63:79:f5:f3:7f:4d:09:98:55:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jun 7 10:42:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f5c1352ff15e6bfbbc4fc824098b7a3b46f2f354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:04:fc:90:18:c6:9d:8d:58:51:27:06:63:5b:
21:90:9b:ec:ca:5c:e2:85:21:58:39:09:48:2d:9d:
ad:b7:7f:b4:19:2c:29:52:53:71:10:c7:25:8b:62:
5c:61:6f:ad:a9:cd:be:98:7e:19:d9:dc:e8:43:56:
ad:b7:a9:81:bb:b2:af:63:63:a7:69:41:b9:1e:c4:
93:eb:21:53:2c:1b:a4:93:4a:39:d4:7e:c0:fd:00:
96:33:31:b3:b5:47:b5:94:cf:d5:5d:d5:21:82:b1:
78:2c:7e:8a:5e:af:c9:bb:8e:21:b6:ff:33:92:89:
16:19:40:40:45:f7:0c:ad:38:47:24:89:8f:44:e8:
37:89:ad:7d:58:63:37:ed:9e:23:67:77:28:08:f2:
2d:ec:60:ee:fa:96:22:43:e9:b5:f5:39:93:72:68:
ef:61:ba:f7:1f:d4:ff:4c:0e:36:ca:ef:4a:a9:f2:
89:7c:d1:da:cd:1d:48:90:0a:c2:8d:05:f9:22:86:
d3:3c:d4:dc:aa:7e:de:95:43:16:2a:d9:f8:92:13:
93:70:67:48:4d:a3:15:ea:54:6f:96:2d:2c:ec:59:
c3:a7:e7:b5:f1:fa:35:df:f4:4f:12:07:e5:5d:da:
8f:0b:a0:cb:7d:46:9f:fc:80:be:f8:cd:b6:69:ed:
ab:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:C1:35:2F:F1:5E:6B:FB:BC:4F:C8:24:09:8B:7A:3B:46:F2:F3:54
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/9cE1L_Fea_u8T8gkCYt6O0by81Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.117.0/24
91.147.119.0/24
91.147.121.0-91.147.123.255
91.147.126.0/23
212.116.244.0/24
212.116.246.0/24
Signature Algorithm: sha256WithRSAEncryption
a2:80:7a:0f:5a:fd:f4:e0:26:40:70:e1:28:9d:75:91:fa:db:
24:0e:51:be:10:0b:32:5d:ff:52:ab:76:80:51:0b:60:4a:b8:
86:bf:70:b5:1a:91:dc:8d:22:75:88:1d:d2:e6:3b:81:b0:3a:
e9:b9:33:91:8e:94:d3:7a:ed:9e:94:a6:a9:6d:50:a0:a5:e1:
c5:dc:c1:0a:95:13:cf:67:2d:bb:b6:4c:46:21:d4:66:52:2c:
b6:f9:56:2d:77:3c:75:91:93:e1:2e:db:17:71:1d:90:61:be:
f4:38:19:c1:83:0c:f3:86:28:5c:64:1f:fe:5e:c1:02:df:45:
0c:ac:ed:6a:31:68:ca:b0:e0:7a:36:95:fc:b2:ed:05:8a:38:
c5:c5:59:67:a4:26:81:e2:12:03:2e:ba:d6:4a:95:90:fa:e3:
0f:67:64:8c:ab:a9:04:93:19:34:d6:7e:91:49:49:b7:be:ed:
33:f2:8c:df:75:73:3d:d1:b8:4f:0d:b4:54:2f:54:11:5d:ac:
91:09:47:21:84:c2:b8:eb:d6:99:f3:8f:c4:70:3e:ec:44:e8:
6b:c1:b6:48:6b:09:a2:99:72:c9:64:96:d1:e7:d8:17:bb:49:
f0:a3:c5:55:92:47:50:b0:a5:4f:58:62:3d:7c:f2:c2:8e:cc:
bc:78:93:02
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgISAYiVcyi48EFjefXzf00JmFURMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi
ZTAwNWQwHhcNMjMwNjA3MTA0MjEyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWMxMzUyZmYxNWU2YmZiYmM0ZmM4MjQwOThiN2EzYjQ2ZjJmMzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgT8kBjGnY1YUScGY1shkJvsylzi
hSFYOQlILZ2tt3+0GSwpUlNxEMcli2JcYW+tqc2+mH4Z2dzoQ1att6mBu7KvY2On
aUG5HsST6yFTLBukk0o51H7A/QCWMzGztUe1lM/VXdUhgrF4LH6KXq/Ju44htv8z
kokWGUBARfcMrThHJImPROg3ia19WGM37Z4jZ3coCPIt7GDu+pYiQ+m19TmTcmjv
Ybr3H9T/TA42yu9KqfKJfNHazR1IkArCjQX5IobTPNTcqn7elUMWKtn4khOTcGdI
TaMV6lRvli0s7FnDp+e18fo13/RPEgflXdqPC6DLfUaf/IC++M22ae2rUwIDAQAB
o4ICLzCCAiswHQYDVR0OBBYEFPXBNS/xXmv7vE/IJAmLejtG8vNUMB8GA1UdIwQY
MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt
ZTEyYjE2NDIxNWI5LzEvOWNFMUxfRmVhX3U4VDhna0NZdDZPMGJ5ODFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5
LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAW5N1AwQA
W5N3MAwDBABbk3kDBAJbk3gDBAFbk34DBADUdPQDBADUdPYwDQYJKoZIhvcNAQEL
BQADggEBAKKAeg9a/fTgJkBw4SiddZH62yQOUb4QCzJd/1KrdoBRC2BKuIa/cLUa
kdyNInWIHdLmO4GwOum5M5GOlNN67Z6UpqltUKCl4cXcwQqVE89nLbu2TEYh1GZS
LLb5Vi13PHWRk+Eu2xdxHZBhvvQ4GcGDDPOGKFxkH/5ewQLfRQys7WoxaMqw4Ho2
lfyy7QWKOMXFWWekJoHiEgMuutZKlZD64w9nZIyrqQSTGTTWfpFJSbe+7TPyjN91
cz3RuE8NtFQvVBFdrJEJRyGEwrjr1pnzj8RwPuxE6GvBtkhrCaKZcslkltHn2Be7
SfCjxVWSR1CwpU9YYj188sKOzLx4kwI=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:06:46 2025 by rpki-client