Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/8ROo1-f7zOJ7IGVOmN_RufzzbRg.roa
File: 8ROo1-f7zOJ7IGVOmN_RufzzbRg.roa (raw, json)
Hash identifier: 0g/v1GDnSb/mpf5pKYYz9HEAiGcoNER98ihb6wrQqWo=
Subject key identifier: F1:13:A8:D7:E7:FB:CC:E2:7B:20:65:4E:98:DF:D1:B9:FC:F3:6D:18
Certificate issuer: /CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Certificate serial: 019420D65BC9E1D430FEE501FEC54C8F9906
Authority key identifier: 21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/8ROo1-f7zOJ7IGVOmN_RufzzbRg.roa
Signing time: Wed 01 Jan 2025 07:48:26 +0000
ROA not before: Wed 01 Jan 2025 07:48:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8075
IP address blocks: 91.225.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:5b:c9:e1:d4:30:fe:e5:01:fe:c5:4c:8f:99:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21e86ff9973c93abe6398f031966c29d75a3ba86
Validity
Not Before: Jan 1 07:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f113a8d7e7fbcce27b20654e98dfd1b9fcf36d18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:a9:72:33:89:04:c0:f7:8a:89:0e:f4:1b:
b9:b6:c4:01:be:4d:37:04:3d:97:9c:f6:37:ba:11:
a3:0a:ec:82:84:b7:21:61:3f:ba:49:4b:7e:be:d5:
cd:76:6b:ec:ec:fc:b4:08:cf:87:5c:58:69:10:03:
b7:e1:5b:a2:ec:b9:b5:72:a5:a4:85:60:7f:96:46:
ce:38:07:f1:98:e0:cf:b9:9d:a4:4c:39:7e:3c:34:
14:e4:a7:ae:7c:df:e9:96:b1:ef:2c:54:cc:9e:71:
62:6a:21:19:21:02:85:aa:dc:63:66:ea:6f:a7:79:
64:25:4d:63:e2:7d:14:41:76:6d:47:77:2c:94:eb:
67:d3:7c:be:c3:6e:25:fa:8f:ef:b1:62:c7:06:fe:
23:ed:bc:31:df:da:f2:bc:91:6e:49:23:63:2b:00:
5f:bd:98:08:e5:c8:94:8e:ee:2a:b0:fd:e8:c4:79:
fb:f4:10:b5:c3:68:17:1e:b7:3a:3e:2f:0a:fd:01:
86:27:6e:3c:28:a9:1e:03:c3:c1:ef:d2:ac:63:41:
3f:84:1c:0a:8a:39:52:05:c2:3d:0a:37:aa:16:b7:
4c:5a:1b:57:ad:6e:92:b3:ed:a0:24:5a:c8:f0:02:
d8:ba:4f:9b:78:44:22:9e:ff:54:bc:e4:a2:b3:26:
0d:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:13:A8:D7:E7:FB:CC:E2:7B:20:65:4E:98:DF:D1:B9:FC:F3:6D:18
X509v3 Authority Key Identifier:
keyid:21:E8:6F:F9:97:3C:93:AB:E6:39:8F:03:19:66:C2:9D:75:A3:BA:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/8ROo1-f7zOJ7IGVOmN_RufzzbRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/2f6dd0-b76f-47d5-a4ab-32feeb566ee6/1/Iehv-Zc8k6vmOY8DGWbCnXWjuoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.248.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:50:ce:d5:64:79:49:ef:55:46:0b:07:b0:ef:6f:00:67:9d:
8a:8b:a8:0f:04:b7:28:1c:c5:55:62:93:51:b7:0b:f7:6c:a9:
4e:38:81:9b:0b:25:51:25:6d:d8:c6:31:8e:fa:70:35:f5:8b:
58:1d:ce:84:6c:92:de:94:68:7e:34:81:85:45:15:cc:c7:06:
76:89:ce:97:10:22:59:50:36:57:03:bf:3c:ac:0f:29:a9:60:
9d:f0:9b:30:e1:a9:54:9f:43:5d:93:d5:7d:40:a9:61:6a:18:
43:cf:ed:29:a9:15:21:17:93:d4:61:f1:f1:46:32:f2:56:22:
4e:33:06:db:80:1c:a7:af:cf:46:69:86:eb:78:c6:52:1b:cf:
75:af:b1:d4:0d:cc:07:01:2e:db:d4:53:1d:e5:32:c9:ad:7c:
4a:9d:5a:07:ed:a4:0a:f1:2d:15:ea:20:df:9d:77:38:6f:87:
81:9c:1b:85:88:f3:d1:0a:b8:82:2e:f9:c8:bc:af:13:cd:11:
c4:bb:98:68:78:c8:ab:10:7a:76:b4:ec:16:a0:ee:82:7d:9f:
99:68:4f:da:36:23:e5:87:d2:a9:1b:8e:e3:6c:30:34:06:af:
48:0a:9a:55:3d:38:ca:e5:13:1e:23:63:fc:4d:b5:a2:13:df:
e1:30:6d:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1lvJ4dQw/uUB/sVMj5kGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZTg2ZmY5OTczYzkzYWJlNjM5OGYwMzE5NjZjMjlkNzVh
M2JhODYwHhcNMjUwMTAxMDc0ODI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMTEzYThkN2U3ZmJjY2UyN2IyMDY1NGU5OGRmZDFiOWZjZjM2ZDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjGpcjOJBMD3iokO9Bu5tsQBvk03
BD2XnPY3uhGjCuyChLchYT+6SUt+vtXNdmvs7Py0CM+HXFhpEAO34Vui7Lm1cqWk
hWB/lkbOOAfxmODPuZ2kTDl+PDQU5KeufN/plrHvLFTMnnFiaiEZIQKFqtxjZupv
p3lkJU1j4n0UQXZtR3cslOtn03y+w24l+o/vsWLHBv4j7bwx39ryvJFuSSNjKwBf
vZgI5ciUju4qsP3oxHn79BC1w2gXHrc6Pi8K/QGGJ248KKkeA8PB79KsY0E/hBwK
ijlSBcI9CjeqFrdMWhtXrW6Ss+2gJFrI8ALYuk+beEQinv9UvOSisyYNkwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPETqNfn+8zieyBlTpjf0bn8820YMB8GA1UdIwQY
MBaAFCHob/mXPJOr5jmPAxlmwp11o7qGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi8yZjZkZDAtYjc2Zi00N2Q1LWE0YWIt
MzJmZWViNTY2ZWU2LzEvOFJPbzEtZjd6T0o3SUdWT21OX1J1Znp6YlJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi8yZjZkZDAtYjc2Zi00N2Q1LWE0YWItMzJmZWViNTY2ZWU2
LzEvSWVodi1aYzhrNnZtT1k4REdXYkNuWFdqdW9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+H4MA0G
CSqGSIb3DQEBCwUAA4IBAQAsUM7VZHlJ71VGCwew728AZ52Ki6gPBLcoHMVVYpNR
twv3bKlOOIGbCyVRJW3YxjGO+nA19YtYHc6EbJLelGh+NIGFRRXMxwZ2ic6XECJZ
UDZXA788rA8pqWCd8Jsw4alUn0Ndk9V9QKlhahhDz+0pqRUhF5PUYfHxRjLyViJO
MwbbgBynr89GaYbreMZSG891r7HUDcwHAS7b1FMd5TLJrXxKnVoH7aQK8S0V6iDf
nXc4b4eBnBuFiPPRCriCLvnIvK8TzRHEu5hoeMirEHp2tOwWoO6CfZ+ZaE/aNiPl
h9KpG47jbDA0Bq9ICppVPTjK5RMeI2P8TbWiE9/hMG3M
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:41:00 2025 by rpki-client