Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/918257-5feb-4205-9174-f7d74f321ea4/1/AVwOyq-3qZ4hcj5C4yzKtAmyIqU.roa
File: AVwOyq-3qZ4hcj5C4yzKtAmyIqU.roa (raw, json)
Hash identifier: ZiOEwpAZi5hp/6+25nvEOJ2DOOvFAsQw3pMkxVnQRgs=
Subject key identifier: 01:5C:0E:CA:AF:B7:A9:9E:21:72:3E:42:E3:2C:CA:B4:09:B2:22:A5
Certificate issuer: /CN=a63b17080cf7f2a991e9294c1ddb70edb54174ef
Certificate serial: 0185737A99816714EEC64A04278705F67248
Authority key identifier: A6:3B:17:08:0C:F7:F2:A9:91:E9:29:4C:1D:DB:70:ED:B5:41:74:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pjsXCAz38qmR6SlMHdtw7bVBdO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/918257-5feb-4205-9174-f7d74f321ea4/1/AVwOyq-3qZ4hcj5C4yzKtAmyIqU.roa
Signing time: Mon 02 Jan 2023 17:14:52 +0000
ROA not before: Mon 02 Jan 2023 17:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 91.242.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:99:81:67:14:ee:c6:4a:04:27:87:05:f6:72:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a63b17080cf7f2a991e9294c1ddb70edb54174ef
Validity
Not Before: Jan 2 17:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=015c0ecaafb7a99e21723e42e32ccab409b222a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:05:cd:90:4c:17:a2:fa:6d:1d:b2:8b:69:d6:
b0:27:38:e1:d0:02:14:8f:75:f1:97:cb:a6:2c:2f:
84:65:f3:d8:ba:3a:37:43:fb:a8:34:81:b7:71:3f:
b9:a3:cb:e4:83:f5:65:af:67:39:7f:ab:93:19:a0:
62:6a:e7:22:2f:3d:09:18:f8:db:94:cd:a4:26:4e:
a6:1e:d3:94:19:56:41:f0:46:27:75:b9:ff:13:94:
40:ae:90:b0:af:84:23:9e:a8:02:9e:2a:bb:52:6a:
49:4a:ea:64:8c:0d:a1:ff:d7:a1:f9:8b:e6:a3:80:
0b:98:be:3c:aa:dd:f8:84:ad:59:84:32:ee:fe:ab:
18:b0:29:25:9e:01:56:92:29:9e:b8:c8:87:70:d0:
55:6b:15:c9:ce:40:79:92:8f:9e:13:90:e0:62:5d:
02:a6:ba:51:4b:0d:f4:b1:32:85:01:67:ef:27:bc:
10:09:52:68:e9:19:1d:36:ca:fa:2f:d3:86:65:24:
eb:b6:ff:87:fc:37:75:a1:00:98:b9:e7:15:8b:82:
45:91:45:d4:0c:39:34:ff:80:90:6e:f9:7e:15:c8:
5f:30:d4:b9:8b:66:f4:be:e8:6e:3d:71:fc:46:b1:
6c:fa:47:c7:73:24:df:48:53:eb:e4:cf:bd:75:67:
5c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5C:0E:CA:AF:B7:A9:9E:21:72:3E:42:E3:2C:CA:B4:09:B2:22:A5
X509v3 Authority Key Identifier:
keyid:A6:3B:17:08:0C:F7:F2:A9:91:E9:29:4C:1D:DB:70:ED:B5:41:74:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pjsXCAz38qmR6SlMHdtw7bVBdO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/918257-5feb-4205-9174-f7d74f321ea4/1/AVwOyq-3qZ4hcj5C4yzKtAmyIqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/918257-5feb-4205-9174-f7d74f321ea4/1/pjsXCAz38qmR6SlMHdtw7bVBdO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.233.0/24
Signature Algorithm: sha256WithRSAEncryption
75:b2:85:32:27:23:41:fc:c6:24:7b:6b:9f:eb:42:8f:8d:5a:
5c:f8:c6:37:b6:6b:1c:79:b8:45:fb:09:0f:be:75:98:05:3d:
fb:cd:ee:0f:01:d0:fd:74:68:2b:2a:7d:29:2b:77:2e:d9:6c:
9a:77:82:34:18:0f:03:8a:41:65:f3:66:01:f6:f2:58:bd:72:
d5:e2:fe:c1:f2:e5:d3:3c:12:00:22:8d:8d:a6:84:e4:e2:1e:
00:00:f2:8b:bd:08:e3:5c:89:4d:de:bd:fa:09:65:7c:3c:95:
1b:69:ac:a7:a6:23:24:f5:d4:92:a4:fd:78:7d:b7:20:5e:b0:
2f:d0:a7:00:35:40:65:94:67:4a:27:2c:e5:3d:2f:6a:63:05:
92:93:7b:f3:03:55:29:b3:56:e7:8d:fa:76:5d:35:c3:c2:61:
20:63:7a:7d:ca:a2:35:70:e9:cf:ed:e9:6e:5d:8f:5c:8c:23:
d1:31:29:0d:e8:5a:db:27:1c:a4:e7:9e:4b:35:52:e3:80:22:
53:48:b4:c5:6e:c8:83:15:b2:dd:e0:61:a6:5f:30:42:55:05:
16:e9:c7:15:a1:21:38:96:da:36:ae:e6:92:45:db:f6:76:8f:
2f:ca:8f:13:82:21:ef:91:85:19:c8:10:1c:31:a7:c0:1b:87:
ae:db:7b:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVzepmBZxTuxkoEJ4cF9nJIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2M2IxNzA4MGNmN2YyYTk5MWU5Mjk0YzFkZGI3MGVkYjU0
MTc0ZWYwHhcNMjMwMTAyMTcxNDUyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMTVjMGVjYWFmYjdhOTllMjE3MjNlNDJlMzJjY2FiNDA5YjIyMmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwXNkEwXovptHbKLadawJzjh0AIU
j3Xxl8umLC+EZfPYujo3Q/uoNIG3cT+5o8vkg/Vlr2c5f6uTGaBiauciLz0JGPjb
lM2kJk6mHtOUGVZB8EYndbn/E5RArpCwr4QjnqgCniq7UmpJSupkjA2h/9eh+Yvm
o4ALmL48qt34hK1ZhDLu/qsYsCklngFWkimeuMiHcNBVaxXJzkB5ko+eE5DgYl0C
prpRSw30sTKFAWfvJ7wQCVJo6RkdNsr6L9OGZSTrtv+H/Dd1oQCYuecVi4JFkUXU
DDk0/4CQbvl+FchfMNS5i2b0vuhuPXH8RrFs+kfHcyTfSFPr5M+9dWdcxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAFcDsqvt6meIXI+QuMsyrQJsiKlMB8GA1UdIwQY
MBaAFKY7FwgM9/KpkekpTB3bcO21QXTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGpzWENBejM4cW1SNlNsTUhkdHc3YlZCZE84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC85MTgyNTctNWZlYi00MjA1LTkxNzQt
ZjdkNzRmMzIxZWE0LzEvQVZ3T3lxLTNxWjRoY2o1QzR5ekt0QW15SXFVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC85MTgyNTctNWZlYi00MjA1LTkxNzQtZjdkNzRmMzIxZWE0
LzEvcGpzWENBejM4cW1SNlNsTUhkdHc3YlZCZE84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/LpMA0G
CSqGSIb3DQEBCwUAA4IBAQB1soUyJyNB/MYke2uf60KPjVpc+MY3tmscebhF+wkP
vnWYBT37ze4PAdD9dGgrKn0pK3cu2Wyad4I0GA8DikFl82YB9vJYvXLV4v7B8uXT
PBIAIo2NpoTk4h4AAPKLvQjjXIlN3r36CWV8PJUbaaynpiMk9dSSpP14fbcgXrAv
0KcANUBllGdKJyzlPS9qYwWSk3vzA1Ups1bnjfp2XTXDwmEgY3p9yqI1cOnP7elu
XY9cjCPRMSkN6FrbJxyk555LNVLjgCJTSLTFbsiDFbLd4GGmXzBCVQUW6ccVoSE4
lto2ruaSRdv2do8vyo8TgiHvkYUZyBAcMafAG4eu23vr
-----END CERTIFICATE-----
Generated at Sat Apr 19 05:36:23 2025 by rpki-client