Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/oZv7gBkqKHSk-77MXrW1ab6ETYI.roa
File: oZv7gBkqKHSk-77MXrW1ab6ETYI.roa (raw, json)
Hash identifier: +B5mLIxH7s3pabVcCwGAo38v71wCcUaCQewhunxJ/mg=
Subject key identifier: A1:9B:FB:80:19:2A:28:74:A4:FB:BE:CC:5E:B5:B5:69:BE:84:4D:82
Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Certificate serial: 01941F8C223F659534FFE6E36EAEFB38187B
Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/oZv7gBkqKHSk-77MXrW1ab6ETYI.roa
Signing time: Wed 01 Jan 2025 01:47:44 +0000
ROA not before: Wed 01 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 1241
IP address blocks: 91.230.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:22:3f:65:95:34:ff:e6:e3:6e:ae:fb:38:18:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2
Validity
Not Before: Jan 1 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a19bfb80192a2874a4fbbecc5eb5b569be844d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:50:b5:1f:d1:94:af:f1:9e:95:23:1f:5f:88:
4e:8e:03:2c:eb:70:e6:1e:da:b1:f5:fb:48:05:14:
c0:aa:a3:dc:e0:ab:23:f6:c4:70:e5:11:52:12:c0:
36:a1:31:5e:8e:29:44:d3:37:34:ae:bb:20:44:c7:
29:f8:dc:ae:23:f4:ad:1d:87:49:24:14:b8:57:6d:
b8:a0:21:19:78:35:c2:fb:ee:f9:92:7e:66:11:04:
fa:c1:e4:60:b3:1f:3d:84:22:00:82:1c:e9:c7:bf:
8b:4a:64:4e:34:a2:59:64:95:75:d3:48:23:bd:fb:
8a:52:d0:99:74:ad:35:48:9a:0f:fa:14:36:b4:0e:
14:84:55:41:98:9a:0a:99:e8:93:c2:1f:e0:96:a4:
12:21:c5:49:21:24:85:97:65:cf:18:e4:27:50:db:
9e:63:46:b9:2c:b5:fb:11:b7:54:d2:c9:ed:78:60:
b4:85:ae:eb:76:17:61:7c:ff:0f:df:f6:ec:0d:4a:
18:b6:f1:88:a8:2d:47:3e:6d:b7:34:e4:f4:21:a0:
0b:c0:9f:fd:b9:c7:ba:49:5e:db:46:3b:eb:55:53:
82:3e:82:58:09:40:3d:61:02:c4:83:84:f8:fe:5e:
98:ab:db:af:f5:45:23:43:c3:30:a2:38:f0:38:c1:
bd:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9B:FB:80:19:2A:28:74:A4:FB:BE:CC:5E:B5:B5:69:BE:84:4D:82
X509v3 Authority Key Identifier:
keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/oZv7gBkqKHSk-77MXrW1ab6ETYI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.247.0/24
Signature Algorithm: sha256WithRSAEncryption
46:f5:8d:1a:29:8e:fa:15:06:f4:7f:00:c5:48:ce:06:39:f4:
8d:6f:f5:22:e2:d5:ce:3d:59:c4:eb:37:e6:a0:a0:68:10:8b:
8c:d4:74:36:58:65:90:79:71:f8:3e:b2:1d:ae:57:ae:01:98:
5f:ab:81:e4:b9:00:3d:74:a3:a8:aa:b6:69:78:c5:56:c9:a4:
dc:5f:ed:ae:3f:0f:e5:38:d3:0c:84:36:a0:24:32:2e:10:44:
3d:bb:a8:35:3d:e7:4a:85:30:4f:5b:26:86:fe:4b:84:a7:30:
a2:a8:eb:b9:b5:b7:81:eb:78:b4:dc:b8:b5:f2:9a:b3:d8:69:
74:ce:1e:00:52:cb:e1:75:58:bf:e1:7f:05:56:ef:5e:17:90:
43:b4:95:2c:e6:17:9e:7d:f7:51:1e:41:dd:34:d7:21:6e:48:
bc:4e:c0:e2:4c:8c:91:14:ba:0c:c9:c9:8f:11:4f:fa:d7:d8:
52:79:5c:3d:13:81:db:44:e6:5d:1b:85:9b:3e:e3:9e:4a:d6:
53:e2:33:bc:bf:53:af:60:a2:f6:fb:c1:08:00:16:45:1f:0c:
28:b3:8e:90:18:33:9f:21:d9:a8:16:34:5d:aa:81:fd:87:a0:
e8:69:79:73:2a:d1:0f:06:e3:99:4b:25:90:cb:81:4d:be:95:
23:4e:d9:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjCI/ZZU0/+bjbq77OBh7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3
NmFlYjIwHhcNMjUwMTAxMDE0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMTliZmI4MDE5MmEyODc0YTRmYmJlY2M1ZWI1YjU2OWJlODQ0ZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4FC1H9GUr/GelSMfX4hOjgMs63Dm
Htqx9ftIBRTAqqPc4Ksj9sRw5RFSEsA2oTFejilE0zc0rrsgRMcp+NyuI/StHYdJ
JBS4V224oCEZeDXC++75kn5mEQT6weRgsx89hCIAghzpx7+LSmRONKJZZJV100gj
vfuKUtCZdK01SJoP+hQ2tA4UhFVBmJoKmeiTwh/glqQSIcVJISSFl2XPGOQnUNue
Y0a5LLX7EbdU0snteGC0ha7rdhdhfP8P3/bsDUoYtvGIqC1HPm23NOT0IaALwJ/9
uce6SV7bRjvrVVOCPoJYCUA9YQLEg4T4/l6Yq9uv9UUjQ8MwojjwOMG9TQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKGb+4AZKih0pPu+zF61tWm+hE2CMB8GA1UdIwQY
MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt
N2UwNWFkMDE5MGNlLzEvb1p2N2dCa3FLSFNrLTc3TVhyVzFhYjZFVFlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl
LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+b3MA0G
CSqGSIb3DQEBCwUAA4IBAQBG9Y0aKY76FQb0fwDFSM4GOfSNb/Ui4tXOPVnE6zfm
oKBoEIuM1HQ2WGWQeXH4PrIdrleuAZhfq4HkuQA9dKOoqrZpeMVWyaTcX+2uPw/l
ONMMhDagJDIuEEQ9u6g1PedKhTBPWyaG/kuEpzCiqOu5tbeB63i03Li18pqz2Gl0
zh4AUsvhdVi/4X8FVu9eF5BDtJUs5heeffdRHkHdNNchbki8TsDiTIyRFLoMycmP
EU/619hSeVw9E4HbROZdG4WbPuOeStZT4jO8v1OvYKL2+8EIABZFHwwos46QGDOf
IdmoFjRdqoH9h6DoaXlzKtEPBuOZSyWQy4FNvpUjTtmh
-----END CERTIFICATE-----
Generated at Tue Apr 8 03:00:33 2025 by rpki-client