Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/9VNbjYPZNCWhcZlYCO8YbXFUdTs.roa
File: 9VNbjYPZNCWhcZlYCO8YbXFUdTs.roa (raw, json)
Hash identifier: DW1s4poaFcxeoMfxfTTf75NS52EQcgEZYuwjPKvajE0=
Subject key identifier: F5:53:5B:8D:83:D9:34:25:A1:71:99:58:08:EF:18:6D:71:54:75:3B
Certificate issuer: /CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Certificate serial: 0194258FB41E397DB3FBEF8C736CC13E5554
Authority key identifier: BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/9VNbjYPZNCWhcZlYCO8YbXFUdTs.roa
Signing time: Thu 02 Jan 2025 05:49:22 +0000
ROA not before: Thu 02 Jan 2025 05:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49040
IP address blocks: 91.192.236.0/24 maxlen: 24
193.93.26.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b4:1e:39:7d:b3:fb:ef:8c:73:6c:c1:3e:55:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Validity
Not Before: Jan 2 05:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5535b8d83d93425a171995808ef186d7154753b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:52:75:11:85:33:15:3c:27:c9:75:1b:89:22:
25:5b:bb:f0:5f:12:14:77:e2:01:de:eb:50:d6:bc:
7b:6d:69:be:d3:3f:96:eb:08:6b:c5:bd:78:08:27:
94:6f:3a:33:14:37:65:65:c5:d6:05:c6:8d:27:e8:
32:89:0b:8f:ae:e4:bd:88:1c:01:9a:59:93:fa:3c:
d2:e5:d9:e5:9b:c4:77:8b:b2:61:f8:d9:1e:a8:c2:
57:7d:e8:18:47:c3:81:d5:ec:a3:95:11:a1:27:a4:
5c:92:09:90:4e:01:58:f6:28:ec:15:f0:75:cc:ba:
bc:2f:a0:67:a5:73:4f:8e:fa:62:9a:f8:ce:c7:c0:
c0:ab:62:20:34:ed:26:90:8b:b1:21:4c:9a:2b:f1:
ea:4f:45:ac:fc:33:37:c2:fb:f5:39:61:a1:fc:61:
f7:b3:f0:18:49:50:94:6a:b8:88:ad:7b:34:04:69:
17:e6:86:50:ea:f7:d2:8a:ff:04:74:ca:17:fb:97:
e7:57:b5:e1:71:94:b5:a4:e3:7f:66:7d:b0:bf:48:
9f:fd:72:5f:c7:f7:7d:e1:b0:2d:92:e0:37:68:d3:
7c:3e:18:dd:cb:6c:58:d7:6a:c5:d3:f6:fe:ec:ff:
08:ab:c9:94:14:60:09:6e:47:b3:0c:ab:ed:e7:3f:
93:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:53:5B:8D:83:D9:34:25:A1:71:99:58:08:EF:18:6D:71:54:75:3B
X509v3 Authority Key Identifier:
keyid:BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/9VNbjYPZNCWhcZlYCO8YbXFUdTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.236.0/24
193.93.26.0/24
Signature Algorithm: sha256WithRSAEncryption
78:3f:78:87:15:84:69:c1:9d:9e:8e:9b:8a:53:1c:78:92:ec:
04:8e:cd:e7:3e:86:7a:e3:a9:de:62:51:16:9a:a2:16:a0:12:
81:32:e5:ec:21:d8:9e:b6:78:c6:b6:1c:4e:ad:44:8a:30:36:
9c:70:66:10:a2:71:e9:33:e1:2f:45:42:5e:84:85:72:1a:65:
d5:dc:69:0a:74:0f:8c:22:54:10:70:8d:a5:2a:05:83:ff:55:
23:b1:61:76:33:6d:5e:8a:35:4d:fb:ef:5a:18:4b:2a:3e:ee:
56:d6:7a:17:3f:46:07:22:06:aa:73:3b:45:7b:b8:ec:31:34:
25:b1:56:a7:89:d1:67:12:f6:f9:2e:73:bd:d6:20:68:f5:ea:
6c:33:f8:b7:83:8d:2b:5c:e9:c2:78:ce:b4:72:a3:31:3c:f9:
91:ef:90:1d:cd:31:c6:8d:ce:9e:2d:69:5c:4e:38:21:30:c4:
73:3b:5e:84:ca:e3:9a:a5:38:b6:46:fa:8e:9d:63:76:97:54:
2c:c7:9a:34:27:2e:eb:03:f8:c9:92:54:0b:46:44:c9:78:92:
d4:aa:2a:d2:74:2f:39:e7:ef:f3:b5:e8:29:80:11:5d:00:8e:
ca:a0:3c:0e:06:77:6e:b1:27:d6:9f:db:77:d2:ed:dc:c7:be:
a5:79:75:17
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlj7QeOX2z+++Mc2zBPlVUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjODdiOWNmYzNlZTBjNDQ5NjVlYTIwOWMwNGZkOGU4ZjQ4
ZmE0MmYwHhcNMjUwMTAyMDU0OTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNTUzNWI4ZDgzZDkzNDI1YTE3MTk5NTgwOGVmMTg2ZDcxNTQ3NTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVJ1EYUzFTwnyXUbiSIlW7vwXxIU
d+IB3utQ1rx7bWm+0z+W6whrxb14CCeUbzozFDdlZcXWBcaNJ+gyiQuPruS9iBwB
mlmT+jzS5dnlm8R3i7Jh+NkeqMJXfegYR8OB1eyjlRGhJ6RckgmQTgFY9ijsFfB1
zLq8L6BnpXNPjvpimvjOx8DAq2IgNO0mkIuxIUyaK/HqT0Ws/DM3wvv1OWGh/GH3
s/AYSVCUariIrXs0BGkX5oZQ6vfSiv8EdMoX+5fnV7XhcZS1pON/Zn2wv0if/XJf
x/d94bAtkuA3aNN8Phjdy2xY12rF0/b+7P8Iq8mUFGAJbkezDKvt5z+TyQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPVTW42D2TQloXGZWAjvGG1xVHU7MB8GA1UdIwQY
MBaAFLyHuc/D7gxEll6iCcBP2Oj0j6QvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkllNXo4UHVERVNXWHFJSndFX1k2UFNQcEM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81N2U4ZDctNDlhYi00ZDFlLWE4MDgt
NDVmYWJlM2Y5ZjMzLzEvOVZOYmpZUFpOQ1doY1psWUNPOFliWEZVZFRzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS81N2U4ZDctNDlhYi00ZDFlLWE4MDgtNDVmYWJlM2Y5ZjMz
LzEvdkllNXo4UHVERVNXWHFJSndFX1k2UFNQcEM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8DsAwQA
wV0aMA0GCSqGSIb3DQEBCwUAA4IBAQB4P3iHFYRpwZ2ejpuKUxx4kuwEjs3nPoZ6
46neYlEWmqIWoBKBMuXsIdietnjGthxOrUSKMDaccGYQonHpM+EvRUJehIVyGmXV
3GkKdA+MIlQQcI2lKgWD/1UjsWF2M21eijVN++9aGEsqPu5W1noXP0YHIgaqcztF
e7jsMTQlsVanidFnEvb5LnO91iBo9epsM/i3g40rXOnCeM60cqMxPPmR75AdzTHG
jc6eLWlcTjghMMRzO16EyuOapTi2RvqOnWN2l1Qsx5o0Jy7rA/jJklQLRkTJeJLU
qirSdC855+/ztegpgBFdAI7KoDwOBndusSfWn9t30u3cx76leXUX
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:52 2025 by rpki-client