Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/IXBtd6x6sSaOQrYFFnh1dePLy4w.roa
File: IXBtd6x6sSaOQrYFFnh1dePLy4w.roa (raw, json)
Hash identifier: 2orrvHF03Esnt2QecncN7Pg0R9cj2QT30MXqmd412qE=
Subject key identifier: 21:70:6D:77:AC:7A:B1:26:8E:42:B6:05:16:78:75:75:E3:CB:CB:8C
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 01943862FE461D830111BAD62A4600477AC5
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/IXBtd6x6sSaOQrYFFnh1dePLy4w.roa
Signing time: Sun 05 Jan 2025 21:33:19 +0000
ROA not before: Sun 05 Jan 2025 21:33:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212238
IP address blocks: 91.147.119.0/24 maxlen: 24
91.147.123.0/24 maxlen: 24
91.147.126.0/23 maxlen: 24
212.116.244.0/24 maxlen: 24
212.116.246.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:38:62:fe:46:1d:83:01:11:ba:d6:2a:46:00:47:7a:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jan 5 21:33:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21706d77ac7ab1268e42b60516787575e3cbcb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f3:bb:9d:53:08:32:80:c7:a0:4c:a2:80:e2:
0d:ca:a0:9c:9b:38:49:5d:10:72:24:11:26:74:60:
74:90:97:4f:67:5d:56:8b:b5:b7:92:eb:4e:3a:be:
a9:de:a1:14:cd:f2:ec:34:67:e5:76:22:94:31:fe:
9b:02:6a:58:f5:ce:45:8e:80:24:00:ec:13:4e:47:
df:e5:5d:c0:dc:50:c9:33:0f:53:ab:99:ed:d0:79:
a5:eb:b6:d3:98:82:b8:ba:b6:70:7e:96:81:37:97:
d8:00:74:ea:e3:7f:6e:b3:66:ab:f5:ae:64:3a:90:
b5:eb:a1:51:f2:5f:c8:16:fa:b4:04:4e:19:96:d4:
a2:06:15:d2:d6:e7:d3:e1:64:6a:9b:69:df:dc:24:
6f:94:6b:35:14:6f:e0:d1:37:4f:eb:01:05:bf:25:
63:a6:cd:20:83:f1:f7:be:c6:2b:fa:ac:d2:62:c4:
d6:a3:46:c4:e7:d7:28:91:26:b9:47:05:d4:2c:d5:
1c:47:a5:47:2c:81:8b:dc:9b:71:7c:e3:da:6b:88:
a7:a9:22:0c:81:84:dc:93:cc:d7:eb:b3:19:55:8e:
74:33:2e:ed:57:4c:96:58:f7:b0:a5:52:1d:fd:15:
4a:4c:3a:42:e2:f6:f4:5f:1b:b7:04:59:2f:64:bb:
87:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:70:6D:77:AC:7A:B1:26:8E:42:B6:05:16:78:75:75:E3:CB:CB:8C
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/IXBtd6x6sSaOQrYFFnh1dePLy4w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.119.0/24
91.147.123.0/24
91.147.126.0/23
212.116.244.0/24
212.116.246.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:df:e0:76:3d:20:fd:76:5d:92:5d:0c:89:c4:0a:33:e3:3d:
c9:8a:b1:97:97:3e:11:74:07:43:60:52:be:92:b6:99:16:af:
06:f0:07:3c:d1:b5:0b:de:8d:44:ef:0b:1d:df:8c:2d:0b:d1:
af:69:fb:a6:fe:17:f8:27:ab:46:6c:b0:58:75:5f:c7:2a:15:
f1:ea:9f:a7:94:f7:3b:ee:21:2c:ad:d1:8e:20:6d:7b:e2:60:
ea:74:53:2e:aa:c4:d7:46:b2:b4:8a:b3:2b:4a:23:5c:98:ed:
5c:d5:4d:d2:f2:57:ad:68:6d:ae:b6:8e:36:bf:f4:7b:bd:b8:
91:d4:9e:2d:20:b1:67:e3:91:6e:37:70:c7:e2:d6:d8:4f:d7:
64:45:c5:50:46:c1:2c:32:28:bd:73:37:61:f6:7b:95:f6:6e:
e2:57:43:25:45:15:53:53:a3:90:54:cc:17:3e:6d:96:3a:51:
51:23:76:b1:18:1b:5c:22:4e:5d:fb:89:88:8c:48:88:33:bd:
0b:0d:a5:0e:98:1d:6c:49:b4:d5:f0:b3:43:de:77:dc:4d:e6:
bd:e2:a8:09:e4:d7:37:6e:a2:57:1c:3c:2f:78:c5:e0:60:88:
09:53:ec:92:20:cd:49:34:52:91:b4:87:79:53:de:20:2a:34:
24:06:8e:c8
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZQ4Yv5GHYMBEbrWKkYAR3rFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi
ZTAwNWQwHhcNMjUwMTA1MjEzMzE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTcwNmQ3N2FjN2FiMTI2OGU0MmI2MDUxNjc4NzU3NWUzY2JjYjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vO7nVMIMoDHoEyigOINyqCcmzhJ
XRByJBEmdGB0kJdPZ11Wi7W3kutOOr6p3qEUzfLsNGfldiKUMf6bAmpY9c5FjoAk
AOwTTkff5V3A3FDJMw9Tq5nt0Hml67bTmIK4urZwfpaBN5fYAHTq439us2ar9a5k
OpC166FR8l/IFvq0BE4ZltSiBhXS1ufT4WRqm2nf3CRvlGs1FG/g0TdP6wEFvyVj
ps0gg/H3vsYr+qzSYsTWo0bE59cokSa5RwXULNUcR6VHLIGL3JtxfOPaa4inqSIM
gYTck8zX67MZVY50My7tV0yWWPewpVId/RVKTDpC4vb0Xxu3BFkvZLuHWQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFCFwbXeserEmjkK2BRZ4dXXjy8uMMB8GA1UdIwQY
MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt
ZTEyYjE2NDIxNWI5LzEvSVhCdGQ2eDZzU2FPUXJZRkZuaDFkZVBMeTR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5
LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAW5N3AwQA
W5N7AwQBW5N+AwQA1HT0AwQA1HT2MA0GCSqGSIb3DQEBCwUAA4IBAQCf3+B2PSD9
dl2SXQyJxAoz4z3JirGXlz4RdAdDYFK+kraZFq8G8Ac80bUL3o1E7wsd34wtC9Gv
afum/hf4J6tGbLBYdV/HKhXx6p+nlPc77iEsrdGOIG174mDqdFMuqsTXRrK0irMr
SiNcmO1c1U3S8letaG2uto42v/R7vbiR1J4tILFn45FuN3DH4tbYT9dkRcVQRsEs
Mii9czdh9nuV9m7iV0MlRRVTU6OQVMwXPm2WOlFRI3axGBtcIk5d+4mIjEiIM70L
DaUOmB1sSbTV8LND3nfcTea94qgJ5Nc3bqJXHDwveMXgYIgJU+ySIM1JNFKRtId5
U94gKjQkBo7I
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:07:59 2025 by rpki-client