Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/j5_CqMmkt1DG3j-liA9ojTF-2zk.roa
File: j5_CqMmkt1DG3j-liA9ojTF-2zk.roa (raw, json)
Hash identifier: 9/Skv7dfWWCpzLOyfdQVA/mAMx0mIp9bCVvdrEzkMLY=
Subject key identifier: 8F:9F:C2:A8:C9:A4:B7:50:C6:DE:3F:A5:88:0F:68:8D:31:7E:DB:39
Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Certificate serial: 019424458BAB5E48C41D2184A4F6AB6E387A
Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/j5_CqMmkt1DG3j-liA9ojTF-2zk.roa
Signing time: Wed 01 Jan 2025 23:48:44 +0000
ROA not before: Wed 01 Jan 2025 23:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61179
IP address blocks: 91.250.250.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:8b:ab:5e:48:c4:1d:21:84:a4:f6:ab:6e:38:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214
Validity
Not Before: Jan 1 23:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f9fc2a8c9a4b750c6de3fa5880f688d317edb39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c1:2e:13:8f:5d:77:d0:61:f0:3a:a2:dc:ac:
26:1b:aa:0e:32:46:fd:0e:18:97:b4:06:bd:aa:1f:
d8:0c:24:d4:10:08:0d:75:7e:cb:9e:4b:33:ef:42:
17:b0:24:b1:95:2e:d4:25:4b:a9:28:00:12:81:5c:
d1:c0:b6:5e:29:4d:92:50:4a:72:03:f8:bb:a1:ca:
eb:65:7b:b5:1a:3c:be:ff:ad:e4:7d:b8:d7:65:30:
d8:67:ab:5b:6c:6d:60:45:6b:ed:7b:e1:78:12:98:
ee:45:e8:f0:07:0c:49:90:33:35:7a:da:5c:94:f1:
7b:c7:91:1c:52:53:da:7f:99:de:be:21:c4:1b:9e:
38:de:90:ae:d9:f8:16:99:03:e2:ad:1b:cc:e9:91:
cc:4a:f8:4c:12:18:c7:ab:2e:83:83:f0:91:29:80:
0a:65:1f:71:27:82:b9:54:ad:55:ee:6e:a8:31:92:
42:37:19:a5:09:89:ee:83:99:d6:1e:64:ef:f0:8a:
0f:f1:49:98:21:e8:c1:d2:40:57:08:5d:39:1b:c9:
d0:8c:51:30:ea:65:d1:43:cd:4c:6c:13:90:07:7f:
c6:c4:5c:08:09:b4:2c:c8:62:aa:70:d8:23:2a:1a:
92:b0:ed:e7:1b:cd:ed:3d:46:7b:40:fc:39:3e:38:
59:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:9F:C2:A8:C9:A4:B7:50:C6:DE:3F:A5:88:0F:68:8D:31:7E:DB:39
X509v3 Authority Key Identifier:
keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/j5_CqMmkt1DG3j-liA9ojTF-2zk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.250.250.0/23
Signature Algorithm: sha256WithRSAEncryption
13:1a:45:66:27:18:1a:26:b7:d5:62:6e:0e:af:50:6c:6c:25:
54:55:9f:d0:b6:1c:36:5b:26:54:80:f4:7b:24:12:42:b0:b7:
67:47:43:63:bf:63:58:e8:8e:a9:a6:a6:b9:6c:b3:2d:0d:8d:
48:c7:60:73:9f:66:93:d1:96:c2:93:db:97:13:63:92:41:02:
e4:99:e9:16:b5:5c:74:06:5b:c3:54:11:63:35:50:14:00:31:
6e:8d:ca:ac:27:e0:08:48:f4:90:fb:70:a8:ba:47:ad:70:d8:
38:f2:9b:d6:cf:ab:23:d7:28:b4:34:d2:25:88:49:ca:64:c2:
e1:93:cb:69:8c:8f:d2:b7:59:e6:22:73:ae:c1:79:d2:90:49:
cd:16:f8:5d:bd:cf:e8:c0:65:d3:47:f3:8c:2e:07:2d:e4:c3:
62:05:e1:5b:69:7c:b9:ef:c1:a3:fc:db:81:08:fb:97:b1:02:
96:f1:05:95:9e:1c:95:f5:ff:4a:da:9f:2e:7a:48:6c:82:b7:
32:7c:bc:67:c4:0f:90:03:80:a2:0a:11:c6:ea:ae:37:a6:85:
0d:53:14:3a:bc:7b:48:a4:ee:3d:d0:29:47:8c:2c:e3:de:94:
56:97:2a:f8:c3:aa:e3:c7:bd:26:1b:d4:61:cb:68:24:ce:47:
cd:8d:b9:25
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRYurXkjEHSGEpParbjh6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm
MWUyMTQwHhcNMjUwMTAxMjM0ODQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZjlmYzJhOGM5YTRiNzUwYzZkZTNmYTU4ODBmNjg4ZDMxN2VkYjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8EuE49dd9Bh8Dqi3KwmG6oOMkb9
DhiXtAa9qh/YDCTUEAgNdX7Lnksz70IXsCSxlS7UJUupKAASgVzRwLZeKU2SUEpy
A/i7ocrrZXu1Gjy+/63kfbjXZTDYZ6tbbG1gRWvte+F4EpjuRejwBwxJkDM1etpc
lPF7x5EcUlPaf5neviHEG5443pCu2fgWmQPirRvM6ZHMSvhMEhjHqy6Dg/CRKYAK
ZR9xJ4K5VK1V7m6oMZJCNxmlCYnug5nWHmTv8IoP8UmYIejB0kBXCF05G8nQjFEw
6mXRQ81MbBOQB3/GxFwICbQsyGKqcNgjKhqSsO3nG83tPUZ7QPw5PjhZ3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI+fwqjJpLdQxt4/pYgPaI0xfts5MB8GA1UdIwQY
MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt
ODhhM2M0MWZhZWUyLzEvajVfQ3FNbWt0MURHM2otbGlBOW9qVEYtMnprLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy
LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW/r6MA0G
CSqGSIb3DQEBCwUAA4IBAQATGkVmJxgaJrfVYm4Or1BsbCVUVZ/Qthw2WyZUgPR7
JBJCsLdnR0Njv2NY6I6ppqa5bLMtDY1Ix2Bzn2aT0ZbCk9uXE2OSQQLkmekWtVx0
BlvDVBFjNVAUADFujcqsJ+AISPSQ+3CouketcNg48pvWz6sj1yi0NNIliEnKZMLh
k8tpjI/St1nmInOuwXnSkEnNFvhdvc/owGXTR/OMLgct5MNiBeFbaXy578Gj/NuB
CPuXsQKW8QWVnhyV9f9K2p8uekhsgrcyfLxnxA+QA4CiChHG6q43poUNUxQ6vHtI
pO490ClHjCzj3pRWlyr4w6rjx70mG9Rhy2gkzkfNjbkl
-----END CERTIFICATE-----
Generated at Tue Apr 8 10:58:39 2025 by rpki-client