Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/aftCc1hQmlPl8ULB-sBLdZfsfcw.roa
File: aftCc1hQmlPl8ULB-sBLdZfsfcw.roa (raw, json)
Hash identifier: HPyHUwV21Rq4GQdTKek3wza3if6k5mxhjlJsTkOcf9k=
Subject key identifier: 69:FB:42:73:58:50:9A:53:E5:F1:42:C1:FA:C0:4B:75:97:EC:7D:CC
Certificate issuer: /CN=a32b618b508ec1365372c2aa675f3601293cc624
Certificate serial: 018D64D3C3CFFE2C73AEEA16B4E0B5BEA522
Authority key identifier: A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/aftCc1hQmlPl8ULB-sBLdZfsfcw.roa
Signing time: Thu 01 Feb 2024 13:20:16 +0000
ROA not before: Thu 01 Feb 2024 13:20:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28753
IP address blocks: 91.195.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:d3:c3:cf:fe:2c:73:ae:ea:16:b4:e0:b5:be:a5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a32b618b508ec1365372c2aa675f3601293cc624
Validity
Not Before: Feb 1 13:20:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=69fb427358509a53e5f142c1fac04b7597ec7dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:cc:01:7d:a4:08:04:8f:76:42:a8:be:04:b2:
8f:09:ec:e1:56:3d:2e:e4:bf:1d:a4:60:44:f3:e5:
0c:4d:90:ba:35:a1:f6:d9:23:ca:ee:92:d0:e5:c6:
c8:a1:d3:be:16:6f:53:fa:8a:55:a2:17:92:a2:54:
aa:ee:75:29:44:3d:9a:00:d6:6c:fa:37:eb:7f:a9:
32:bb:a5:ec:8e:3e:ff:31:aa:d6:82:a0:13:4e:10:
82:72:6d:e4:f6:fb:27:87:d8:54:b8:bc:dd:13:f8:
67:98:43:cd:51:a5:84:83:78:4d:1a:11:9a:ba:9a:
eb:5c:65:29:94:79:8b:40:af:8f:4b:d1:c8:98:ed:
6b:ba:8a:cf:18:27:23:dd:51:cc:bd:07:d6:d2:14:
9f:c2:67:c4:ca:a8:b4:03:6c:2a:1b:78:56:9f:5a:
bb:ab:12:0c:79:b1:63:9b:8a:62:f3:fe:27:f2:b4:
a9:95:ff:8a:cf:7d:8c:ef:5b:9e:ad:ec:18:70:4b:
89:a8:37:b6:97:5b:ef:7e:d2:1d:dd:60:3a:cd:77:
ae:a0:03:c5:0a:34:57:14:98:ca:96:08:d2:4e:e1:
dc:ca:aa:05:80:d2:94:f7:78:f5:b4:7b:b0:76:c4:
12:92:bb:d7:f9:02:cf:76:f2:53:d9:2f:d9:c3:0c:
e2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FB:42:73:58:50:9A:53:E5:F1:42:C1:FA:C0:4B:75:97:EC:7D:CC
X509v3 Authority Key Identifier:
keyid:A3:2B:61:8B:50:8E:C1:36:53:72:C2:AA:67:5F:36:01:29:3C:C6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oythi1COwTZTcsKqZ182ASk8xiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/aftCc1hQmlPl8ULB-sBLdZfsfcw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cfed0d-0fb0-4598-b365-65096dbcac30/1/oythi1COwTZTcsKqZ182ASk8xiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.37.0/24
Signature Algorithm: sha256WithRSAEncryption
61:63:bb:9f:84:2f:af:fb:f1:6c:3d:56:dd:f7:4b:49:ef:d6:
aa:eb:7b:e0:72:eb:ea:33:3a:ba:ae:e2:cb:4c:6c:f2:50:c1:
8e:12:4c:62:5e:f7:5e:49:f5:61:d0:10:9d:68:2f:ea:5c:70:
6a:4b:10:9e:68:1b:af:75:4a:a5:cf:b9:c9:4c:5e:db:6d:f0:
a7:9f:48:85:f9:d8:06:fc:4c:55:95:f7:1c:b4:b1:c0:b4:ca:
c1:12:c9:7b:3c:69:9a:86:a8:5f:f8:ad:b5:b7:06:21:34:b3:
3f:72:62:6f:c1:3e:53:d4:7a:4b:06:cf:8c:2b:36:91:3c:3c:
da:f9:bb:c6:3b:5e:4b:66:33:9f:72:3a:18:de:fd:ed:70:81:
87:f0:43:98:1f:37:42:d5:64:a6:bc:2a:f7:03:e7:f9:fe:2c:
aa:a7:da:90:7a:f8:75:91:cd:5b:4e:a4:03:e2:94:f2:d7:29:
7a:92:b0:4c:f2:5c:d7:fd:69:92:57:6e:46:6f:3a:59:5e:51:
f0:24:b0:dc:d8:cd:0f:7e:d8:f5:da:f8:2c:3a:5c:26:da:fe:
75:ff:8a:86:3b:3c:6b:c8:45:5d:fd:1a:7a:68:b8:1d:a8:4f:
bd:44:45:40:a0:df:72:51:d4:55:7e:d3:7f:b7:c3:84:3d:a0:
96:5f:0e:17
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAY1k08PP/ixzruoWtOC1vqUiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzMmI2MThiNTA4ZWMxMzY1MzcyYzJhYTY3NWYzNjAxMjkz
Y2M2MjQwHhcNMjQwMjAxMTMyMDE2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2OWZiNDI3MzU4NTA5YTUzZTVmMTQyYzFmYWMwNGI3NTk3ZWM3ZGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMwBfaQIBI92Qqi+BLKPCezhVj0u
5L8dpGBE8+UMTZC6NaH22SPK7pLQ5cbIodO+Fm9T+opVoheSolSq7nUpRD2aANZs
+jfrf6kyu6Xsjj7/MarWgqATThCCcm3k9vsnh9hUuLzdE/hnmEPNUaWEg3hNGhGa
uprrXGUplHmLQK+PS9HImO1ruorPGCcj3VHMvQfW0hSfwmfEyqi0A2wqG3hWn1q7
qxIMebFjm4pi8/4n8rSplf+Kz32M71uerewYcEuJqDe2l1vvftId3WA6zXeuoAPF
CjRXFJjKlgjSTuHcyqoFgNKU93j1tHuwdsQSkrvX+QLPdvJT2S/ZwwziSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGn7QnNYUJpT5fFCwfrAS3WX7H3MMB8GA1UdIwQY
MBaAFKMrYYtQjsE2U3LCqmdfNgEpPMYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb3l0aGkxQ093VFpUY3NLcVoxODJBU2s4eGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jZmVkMGQtMGZiMC00NTk4LWIzNjUt
NjUwOTZkYmNhYzMwLzEvYWZ0Q2MxaFFtbFBsOFVMQi1zQkxkWmZzZmN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jZmVkMGQtMGZiMC00NTk4LWIzNjUtNjUwOTZkYmNhYzMw
LzEvb3l0aGkxQ093VFpUY3NLcVoxODJBU2s4eGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8MlMA0G
CSqGSIb3DQEBCwUAA4IBAQBhY7ufhC+v+/FsPVbd90tJ79aq63vgcuvqMzq6ruLL
TGzyUMGOEkxiXvdeSfVh0BCdaC/qXHBqSxCeaBuvdUqlz7nJTF7bbfCnn0iF+dgG
/ExVlfcctLHAtMrBEsl7PGmahqhf+K21twYhNLM/cmJvwT5T1HpLBs+MKzaRPDza
+bvGO15LZjOfcjoY3v3tcIGH8EOYHzdC1WSmvCr3A+f5/iyqp9qQevh1kc1bTqQD
4pTy1yl6krBM8lzX/WmSV25GbzpZXlHwJLDc2M0Pftj12vgsOlwm2v51/4qGOzxr
yEVd/Rp6aLgdqE+9REVAoN9yUdRVftN/t8OEPaCWXw4X
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:11:19 2025 by rpki-client