Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/EMcvovEYE0weVYExSrcia69GSOA.roa
File: EMcvovEYE0weVYExSrcia69GSOA.roa (raw, json)
Hash identifier: OJBdQmyJiJbXqpTEN6hCoMQhIqdAMMZRqxqDd5UOvg4=
Subject key identifier: 10:C7:2F:A2:F1:18:13:4C:1E:55:81:31:4A:B7:22:6B:AF:46:48:E0
Certificate issuer: /CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9
Certificate serial: 01942143F2C185C5D4E61CBE8E13AF19E5AD
Authority key identifier: B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/EMcvovEYE0weVYExSrcia69GSOA.roa
Signing time: Wed 01 Jan 2025 09:48:08 +0000
ROA not before: Wed 01 Jan 2025 09:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 91.223.161.0/24 maxlen: 24
193.28.159.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:f2:c1:85:c5:d4:e6:1c:be:8e:13:af:19:e5:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5b0a86659ec314f13a04e3a03dbdb1244a0e0a9
Validity
Not Before: Jan 1 09:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=10c72fa2f118134c1e5581314ab7226baf4648e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b1:a8:4b:29:a1:cd:46:3d:57:76:82:89:2e:
6c:e3:85:be:a3:b7:24:98:ee:f8:68:f7:be:f7:6f:
ac:be:8e:63:47:37:50:b0:49:b2:e0:c4:19:c3:00:
eb:07:af:74:30:59:f1:82:98:2f:45:03:58:71:80:
41:b0:1c:1b:c3:2b:1b:6b:27:ff:eb:1e:bd:6c:ab:
d3:83:8b:ae:8b:35:bc:ed:cb:a8:e1:34:58:68:b1:
dd:38:10:a0:4a:9a:93:7f:f3:9c:4b:a1:8c:fd:0c:
8a:8d:36:9c:f1:25:8a:39:a1:f7:d2:d0:8f:b8:99:
d3:12:19:b9:d8:2f:62:65:82:6f:d2:96:85:d7:64:
b0:44:b3:a0:db:b5:d6:cc:51:f1:8a:04:1a:e3:4c:
34:29:10:3f:58:27:a2:c1:04:0b:3c:fd:f5:48:84:
0a:0d:46:90:7e:19:88:1d:39:a4:44:78:59:fd:70:
2f:ea:d5:cc:bb:a2:35:f8:73:57:65:54:f3:e8:77:
c6:ba:73:19:72:d0:d9:48:b8:f5:08:b3:c0:9d:c4:
be:10:f2:eb:42:ca:56:87:1e:d7:c6:4e:61:b9:7a:
31:ad:cb:c0:c1:5a:6d:e4:c0:4a:86:fd:9d:9f:7f:
c9:c5:34:03:73:5b:05:db:ac:92:1a:13:85:cf:c3:
f4:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C7:2F:A2:F1:18:13:4C:1E:55:81:31:4A:B7:22:6B:AF:46:48:E0
X509v3 Authority Key Identifier:
keyid:B5:B0:A8:66:59:EC:31:4F:13:A0:4E:3A:03:DB:DB:12:44:A0:E0:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tbCoZlnsMU8ToE46A9vbEkSg4Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/EMcvovEYE0weVYExSrcia69GSOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/044402-c4d4-4259-93e2-7fbf5ee290ac/1/tbCoZlnsMU8ToE46A9vbEkSg4Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.161.0/24
193.28.159.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:19:54:ad:34:92:42:d2:c2:fd:1d:19:17:c1:1a:18:d1:d9:
cd:a2:79:b2:cf:86:18:56:d1:86:c9:c2:30:99:cd:d4:87:a5:
c9:c1:e0:cc:43:5e:7b:a1:02:03:dc:01:78:2a:4c:2f:8e:38:
17:64:95:5c:5c:a1:be:f0:5d:4c:9c:09:ac:2f:26:1a:f2:8f:
06:73:2a:4d:96:54:03:0f:60:60:d0:4a:f5:c3:27:b1:ae:bd:
0f:63:de:58:a0:4a:89:c3:22:92:d2:fc:f7:d2:df:02:9b:fe:
72:ba:bd:49:d4:0c:2a:26:27:b8:a3:1b:85:05:e9:68:31:3d:
62:92:5b:c5:71:83:ff:60:a8:c2:75:64:14:0d:82:e2:b7:8d:
9b:c5:4e:df:fa:52:be:df:32:4d:fd:23:2d:3e:9f:1f:34:95:
72:43:d5:5d:80:b1:3c:56:b8:d3:2d:62:55:e7:1f:0e:5c:0d:
5f:40:82:fc:58:e5:6d:98:db:90:98:d9:d8:99:a1:69:d8:7b:
0a:71:18:14:fe:c3:2a:e7:90:79:19:a5:5a:0f:e7:b4:36:5f:
a6:a8:11:5c:09:b6:9e:31:49:6a:71:13:2b:93:53:d8:e4:46:
fe:45:e1:27:52:1d:94:53:bc:8a:ff:a1:07:e2:68:ae:8e:54:
ce:48:a0:10
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQhQ/LBhcXU5hy+jhOvGeWtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YjBhODY2NTllYzMxNGYxM2EwNGUzYTAzZGJkYjEyNDRh
MGUwYTkwHhcNMjUwMTAxMDk0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMGM3MmZhMmYxMTgxMzRjMWU1NTgxMzE0YWI3MjI2YmFmNDY0OGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bGoSymhzUY9V3aCiS5s44W+o7ck
mO74aPe+92+svo5jRzdQsEmy4MQZwwDrB690MFnxgpgvRQNYcYBBsBwbwysbayf/
6x69bKvTg4uuizW87cuo4TRYaLHdOBCgSpqTf/OcS6GM/QyKjTac8SWKOaH30tCP
uJnTEhm52C9iZYJv0paF12SwRLOg27XWzFHxigQa40w0KRA/WCeiwQQLPP31SIQK
DUaQfhmIHTmkRHhZ/XAv6tXMu6I1+HNXZVTz6HfGunMZctDZSLj1CLPAncS+EPLr
QspWhx7Xxk5huXoxrcvAwVpt5MBKhv2dn3/JxTQDc1sF26ySGhOFz8P0/QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBDHL6LxGBNMHlWBMUq3ImuvRkjgMB8GA1UdIwQY
MBaAFLWwqGZZ7DFPE6BOOgPb2xJEoOCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGJDb1psbnNNVThUb0U0NkE5dmJFa1NnNEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS8wNDQ0MDItYzRkNC00MjU5LTkzZTIt
N2ZiZjVlZTI5MGFjLzEvRU1jdm92RVlFMHdlVllFeFNyY2lhNjlHU09BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS8wNDQ0MDItYzRkNC00MjU5LTkzZTItN2ZiZjVlZTI5MGFj
LzEvdGJDb1psbnNNVThUb0U0NkE5dmJFa1NnNEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9+hAwQA
wRyfMA0GCSqGSIb3DQEBCwUAA4IBAQB8GVStNJJC0sL9HRkXwRoY0dnNonmyz4YY
VtGGycIwmc3Uh6XJweDMQ157oQID3AF4KkwvjjgXZJVcXKG+8F1MnAmsLyYa8o8G
cypNllQDD2Bg0Er1wyexrr0PY95YoEqJwyKS0vz30t8Cm/5yur1J1AwqJie4oxuF
BeloMT1iklvFcYP/YKjCdWQUDYLit42bxU7f+lK+3zJN/SMtPp8fNJVyQ9VdgLE8
VrjTLWJV5x8OXA1fQIL8WOVtmNuQmNnYmaFp2HsKcRgU/sMq55B5GaVaD+e0Nl+m
qBFcCbaeMUlqcRMrk1PY5Eb+ReEnUh2UU7yK/6EH4miujlTOSKAQ
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:40 2025 by rpki-client