Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b3c34d-ccd1-4bba-a06e-e5c76bba8460/1/tJgJXvlvWH3K9K4kh2PoQonUwtM.roa
File: tJgJXvlvWH3K9K4kh2PoQonUwtM.roa (raw, json)
Hash identifier: ZYe9w2cwdSilbKyfI6scS+lm8bk8ES6rmcguAISG3cY=
Subject key identifier: B4:98:09:5E:F9:6F:58:7D:CA:F4:AE:24:87:63:E8:42:89:D4:C2:D3
Certificate issuer: /CN=e087a0a7baf39038c2a3ce1b53efda8350d13b41
Certificate serial: 0185732833DBF5AFE65186F5A1BEFE690046
Authority key identifier: E0:87:A0:A7:BA:F3:90:38:C2:A3:CE:1B:53:EF:DA:83:50:D1:3B:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Iegp7rzkDjCo84bU-_ag1DRO0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b3c34d-ccd1-4bba-a06e-e5c76bba8460/1/tJgJXvlvWH3K9K4kh2PoQonUwtM.roa
Signing time: Mon 02 Jan 2023 15:44:52 +0000
ROA not before: Mon 02 Jan 2023 15:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206092
IP address blocks: 91.230.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:28:33:db:f5:af:e6:51:86:f5:a1:be:fe:69:00:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e087a0a7baf39038c2a3ce1b53efda8350d13b41
Validity
Not Before: Jan 2 15:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b498095ef96f587dcaf4ae248763e84289d4c2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:91:ce:40:32:55:ed:eb:ca:13:50:cf:85:49:
be:16:02:18:41:41:6c:c3:e5:16:15:07:5a:70:a0:
42:a9:fa:91:5f:89:70:eb:ef:db:11:c8:15:0d:20:
60:d2:bc:3f:8f:90:ef:e2:6f:24:62:f1:1b:31:88:
4f:03:55:fb:72:13:1b:3a:62:c2:36:b4:4b:2e:8d:
63:8f:69:46:e5:4b:16:db:0e:50:6f:8a:d6:5a:ca:
ef:44:63:d6:71:65:6a:a9:b2:68:b6:1c:17:b0:73:
c3:c4:e2:a8:64:bf:ad:45:a7:44:eb:45:d7:cc:81:
67:50:c0:81:19:38:9c:de:3b:c9:78:5a:82:80:e2:
d1:9d:96:a8:4e:5f:ac:41:dc:c8:5f:6c:2a:66:93:
33:7d:78:2b:33:71:6f:ec:41:49:cf:a2:c8:a2:5c:
f3:9d:33:47:0c:94:7f:64:b8:b9:23:20:fe:7e:2c:
bc:ad:c1:f8:a1:2a:0d:ba:ee:8b:ad:8a:11:3f:98:
3b:46:f6:70:bc:82:06:2b:d1:f5:1f:8b:35:3f:56:
4f:fd:8e:d0:cc:5f:30:00:36:67:58:b4:2f:2b:02:
be:c8:e0:21:9f:30:8d:79:8f:98:72:0a:ec:df:a5:
83:50:9b:2c:bb:06:1c:2b:d3:f7:db:45:7d:26:18:
e3:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:98:09:5E:F9:6F:58:7D:CA:F4:AE:24:87:63:E8:42:89:D4:C2:D3
X509v3 Authority Key Identifier:
keyid:E0:87:A0:A7:BA:F3:90:38:C2:A3:CE:1B:53:EF:DA:83:50:D1:3B:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Iegp7rzkDjCo84bU-_ag1DRO0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3c34d-ccd1-4bba-a06e-e5c76bba8460/1/tJgJXvlvWH3K9K4kh2PoQonUwtM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b3c34d-ccd1-4bba-a06e-e5c76bba8460/1/4Iegp7rzkDjCo84bU-_ag1DRO0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.225.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:4b:4b:18:ea:f8:4e:f1:b8:d1:9a:a9:af:0e:09:3d:c3:f2:
cd:83:79:8c:37:9a:88:56:25:91:0e:80:62:2e:1d:21:bd:63:
4c:c4:fd:63:ac:ec:e1:76:90:2e:d6:30:be:81:ba:98:d4:c8:
94:0a:b0:ba:c7:b9:39:50:8a:41:ee:39:77:69:ec:80:04:10:
51:a8:21:f3:e3:b7:33:90:a9:a2:d8:64:72:28:46:ee:89:7f:
c0:8f:46:5c:11:fd:3f:4d:f4:98:54:e6:37:ad:be:e3:ee:a1:
9d:4e:06:36:7e:47:57:35:da:50:70:11:00:a4:85:11:09:a9:
d7:83:ef:da:a9:de:81:1b:fc:c4:77:4a:e2:8d:40:99:e3:52:
26:4a:fa:91:a1:12:7c:d4:ed:9c:78:d3:f2:f6:96:2c:df:8c:
e4:c5:3a:29:5f:46:06:bd:66:3b:c4:6e:65:bb:8e:fe:d4:06:
23:f6:c7:68:55:be:9b:21:14:c2:2f:4e:2f:be:24:ca:4d:ee:
07:62:e3:03:91:53:31:34:d0:78:24:ff:c3:50:94:4e:a4:ea:
cc:02:07:b5:76:f4:2d:08:91:00:5c:73:82:60:50:71:cc:51:
df:e9:6a:0c:7b:40:7f:f0:68:b0:d4:d2:7a:a9:23:0e:4e:d5:
fb:c6:1c:d0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzKDPb9a/mUYb1ob7+aQBGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwODdhMGE3YmFmMzkwMzhjMmEzY2UxYjUzZWZkYTgzNTBk
MTNiNDEwHhcNMjMwMTAyMTU0NDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDk4MDk1ZWY5NmY1ODdkY2FmNGFlMjQ4NzYzZTg0Mjg5ZDRjMmQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5HOQDJV7evKE1DPhUm+FgIYQUFs
w+UWFQdacKBCqfqRX4lw6+/bEcgVDSBg0rw/j5Dv4m8kYvEbMYhPA1X7chMbOmLC
NrRLLo1jj2lG5UsW2w5Qb4rWWsrvRGPWcWVqqbJothwXsHPDxOKoZL+tRadE60XX
zIFnUMCBGTic3jvJeFqCgOLRnZaoTl+sQdzIX2wqZpMzfXgrM3Fv7EFJz6LIolzz
nTNHDJR/ZLi5IyD+fiy8rcH4oSoNuu6LrYoRP5g7RvZwvIIGK9H1H4s1P1ZP/Y7Q
zF8wADZnWLQvKwK+yOAhnzCNeY+Ycgrs36WDUJssuwYcK9P320V9JhjjdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLSYCV75b1h9yvSuJIdj6EKJ1MLTMB8GA1UdIwQY
MBaAFOCHoKe685A4wqPOG1Pv2oNQ0TtBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEllZ3A3cnprRGpDbzg0YlUtX2FnMURSTzBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iM2MzNGQtY2NkMS00YmJhLWEwNmUt
ZTVjNzZiYmE4NDYwLzEvdEpnSlh2bHZXSDNLOUs0a2gyUG9Rb25Vd3RNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iM2MzNGQtY2NkMS00YmJhLWEwNmUtZTVjNzZiYmE4NDYw
LzEvNEllZ3A3cnprRGpDbzg0YlUtX2FnMURSTzBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+bhMA0G
CSqGSIb3DQEBCwUAA4IBAQBdS0sY6vhO8bjRmqmvDgk9w/LNg3mMN5qIViWRDoBi
Lh0hvWNMxP1jrOzhdpAu1jC+gbqY1MiUCrC6x7k5UIpB7jl3aeyABBBRqCHz47cz
kKmi2GRyKEbuiX/Aj0ZcEf0/TfSYVOY3rb7j7qGdTgY2fkdXNdpQcBEApIURCanX
g+/aqd6BG/zEd0rijUCZ41ImSvqRoRJ81O2ceNPy9pYs34zkxTopX0YGvWY7xG5l
u47+1AYj9sdoVb6bIRTCL04vviTKTe4HYuMDkVMxNNB4JP/DUJROpOrMAge1dvQt
CJEAXHOCYFBxzFHf6WoMe0B/8Giw1NJ6qSMOTtX7xhzQ
-----END CERTIFICATE-----
Generated at Fri Apr 18 20:12:06 2025 by rpki-client