Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/Ta-jwZuVmBfbN54Mc87wJCcldqs.roa
File: Ta-jwZuVmBfbN54Mc87wJCcldqs.roa (raw, json)
Hash identifier: atOnMqdqU6L3frERpvrIl+0QC3L9/h7vBzk5CuDitGk=
Subject key identifier: 4D:AF:A3:C1:9B:95:98:17:DB:37:9E:0C:73:CE:F0:24:27:25:76:AB
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 019427B5869EE2B627FC35A7CFFC9BB3CAE1
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/Ta-jwZuVmBfbN54Mc87wJCcldqs.roa
Signing time: Thu 02 Jan 2025 15:49:55 +0000
ROA not before: Thu 02 Jan 2025 15:49:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 16276
IP address blocks: 91.199.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:86:9e:e2:b6:27:fc:35:a7:cf:fc:9b:b3:ca:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: Jan 2 15:49:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4dafa3c19b959817db379e0c73cef024272576ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ca:5f:00:9f:11:ee:ee:85:38:05:a5:dd:e0:
fa:98:c1:f5:8f:91:ea:6d:e7:eb:1b:94:a4:35:66:
5e:4e:a5:e6:8f:2c:c2:23:db:14:c4:8b:70:d4:30:
7d:86:4c:e7:02:00:67:ed:73:cb:9b:23:ce:05:72:
85:d7:04:f0:a8:d5:9b:6d:2f:63:c7:31:14:12:15:
9c:e5:c2:1b:98:6e:f5:e7:a5:e8:db:3f:7a:18:10:
39:0d:52:7f:f4:cf:0d:a1:63:66:2f:5a:33:72:a8:
56:3f:93:2f:4e:05:08:a3:6d:56:d5:ef:73:83:09:
05:6f:d4:71:a4:b1:15:75:36:cf:2d:30:4f:04:ca:
94:18:52:03:f3:7a:39:ae:90:62:a0:2f:9d:2f:69:
5f:f4:3a:ec:a9:d9:3f:21:19:fa:39:39:2e:6c:42:
f8:30:e6:9c:28:98:a3:0a:50:7c:07:eb:be:42:75:
61:e9:f3:b9:e0:0d:a0:a5:02:0c:6c:68:2c:18:6a:
e8:db:75:26:af:54:89:dc:4a:af:a9:f9:ab:00:9b:
b2:70:a9:c4:bb:3e:94:a6:cc:93:cf:c6:0b:72:59:
3a:e7:f9:db:3d:7c:75:a7:43:53:71:9c:ad:2d:f9:
ae:57:e6:6d:e8:29:17:d8:f1:4f:5c:54:ce:ce:0c:
1b:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AF:A3:C1:9B:95:98:17:DB:37:9E:0C:73:CE:F0:24:27:25:76:AB
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/Ta-jwZuVmBfbN54Mc87wJCcldqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.32.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:91:a9:ec:c5:b2:68:b6:f7:4f:fd:ca:55:2f:97:28:23:52:
fc:11:25:66:79:f2:5c:f8:a5:c5:97:08:19:63:58:3b:6e:21:
a1:f8:b0:b5:6f:81:8b:09:ef:5a:39:94:76:05:66:79:08:f5:
9b:68:f8:26:b0:52:98:1a:e0:66:c3:96:c4:98:15:b5:7b:80:
cb:14:b4:96:5e:25:b7:ab:51:02:66:ac:15:92:c7:1b:5a:3e:
3b:d8:8c:a4:96:b7:02:51:0b:55:67:be:10:d7:24:4f:73:fd:
63:08:c4:f5:00:14:3e:d4:59:bd:c5:e5:68:5a:42:8e:37:2f:
09:6c:98:5f:60:84:43:66:03:3f:58:a3:88:b8:29:83:97:07:
59:11:30:01:3f:f4:9f:74:67:14:f1:41:4d:d7:f9:d9:c4:6e:
9c:a0:fe:69:f7:8e:21:d4:a4:48:02:9c:7b:8b:da:eb:14:6a:
92:a7:e9:9b:5e:f4:4a:35:0e:a8:3a:df:9f:e3:eb:a3:72:98:
5d:84:91:f5:58:9e:17:c7:8c:c5:8f:8d:f4:ea:0d:4a:14:ec:
ba:c2:91:0c:1e:46:01:12:e5:0a:48:ae:e5:eb:c9:67:d1:2a:
e7:01:d4:c1:bc:33:12:54:cf:6f:fa:d0:5d:76:c6:da:a4:ed:
c6:ad:66:ca
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntYae4rYn/DWnz/ybs8rhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZjIzMTM2NTk4NTgyOGQ1YTk2NjNlZDFiNDQwNjI0YjI0
ZmVjMTMwHhcNMjUwMTAyMTU0OTU1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGFmYTNjMTliOTU5ODE3ZGIzNzllMGM3M2NlZjAyNDI3MjU3NmFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyspfAJ8R7u6FOAWl3eD6mMH1j5Hq
befrG5SkNWZeTqXmjyzCI9sUxItw1DB9hkznAgBn7XPLmyPOBXKF1wTwqNWbbS9j
xzEUEhWc5cIbmG7156Xo2z96GBA5DVJ/9M8NoWNmL1ozcqhWP5MvTgUIo21W1e9z
gwkFb9RxpLEVdTbPLTBPBMqUGFID83o5rpBioC+dL2lf9Drsqdk/IRn6OTkubEL4
MOacKJijClB8B+u+QnVh6fO54A2gpQIMbGgsGGro23Umr1SJ3EqvqfmrAJuycKnE
uz6UpsyTz8YLclk65/nbPXx1p0NTcZytLfmuV+Zt6CkX2PFPXFTOzgwbXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE2vo8GblZgX2zeeDHPO8CQnJXarMB8GA1UdIwQY
MBaAFAfyMTZZhYKNWpZj7RtEBiSyT+wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzct
MDg1ZmEwYTU2MDUyLzEvVGEtandadVZtQmZiTjU0TWM4N3dKQ2NsZHFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzctMDg1ZmEwYTU2MDUy
LzEvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8cgMA0G
CSqGSIb3DQEBCwUAA4IBAQA+kansxbJotvdP/cpVL5coI1L8ESVmefJc+KXFlwgZ
Y1g7biGh+LC1b4GLCe9aOZR2BWZ5CPWbaPgmsFKYGuBmw5bEmBW1e4DLFLSWXiW3
q1ECZqwVkscbWj472IyklrcCUQtVZ74Q1yRPc/1jCMT1ABQ+1Fm9xeVoWkKONy8J
bJhfYIRDZgM/WKOIuCmDlwdZETABP/SfdGcU8UFN1/nZxG6coP5p944h1KRIApx7
i9rrFGqSp+mbXvRKNQ6oOt+f4+ujcphdhJH1WJ4Xx4zFj4306g1KFOy6wpEMHkYB
EuUKSK7l68ln0SrnAdTBvDMSVM9v+tBddsbapO3GrWbK
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:06:28 2025 by rpki-client