Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/C82fBmTW8-iwXu5pgvR1VTX1CPI.roa
File: C82fBmTW8-iwXu5pgvR1VTX1CPI.roa (raw, json)
Hash identifier: VxKUMucn3gu4aXap48afqVYi1a/XU7LxwPuTbOudfsE=
Subject key identifier: 0B:CD:9F:06:64:D6:F3:E8:B0:5E:EE:69:82:F4:75:55:35:F5:08:F2
Certificate issuer: /CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Certificate serial: 0194258FA7B79703FD990F039DC8EA9A55BD
Authority key identifier: C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/C82fBmTW8-iwXu5pgvR1VTX1CPI.roa
Signing time: Thu 02 Jan 2025 05:49:19 +0000
ROA not before: Thu 02 Jan 2025 05:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43067
IP address blocks: 91.196.80.0/22 maxlen: 32
91.196.80.0/24 maxlen: 32
91.196.81.0/24 maxlen: 32
91.196.82.0/24 maxlen: 32
91.196.83.0/24 maxlen: 32
91.234.72.0/22 maxlen: 32
91.234.72.0/24 maxlen: 32
91.234.73.0/24 maxlen: 32
91.234.74.0/24 maxlen: 32
91.234.75.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:a7:b7:97:03:fd:99:0f:03:9d:c8:ea:9a:55:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1eee2cab86b5ee40fc2770ca8cb5c50c62b755b
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0bcd9f0664d6f3e8b05eee6982f4755535f508f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ff:f2:b2:7b:93:90:e2:0f:ed:6d:9f:89:00:
6b:26:78:c2:71:ac:48:a2:95:f6:d8:f1:7c:a8:ac:
33:46:05:ef:c0:cf:b7:14:00:1d:83:47:26:17:51:
64:04:ff:1f:1a:f4:c1:dd:96:46:c3:fd:c2:19:48:
8f:f3:69:d7:69:40:79:63:11:e7:87:24:cd:8f:d6:
29:ac:3d:2d:61:66:51:d4:41:08:ad:71:d6:95:81:
bf:51:06:2e:1b:c6:fc:55:92:09:33:45:c2:cd:2b:
66:e4:85:9f:7e:1a:6f:a7:fc:a4:d9:02:93:65:d8:
de:cd:5a:cf:9d:f5:03:1d:36:36:c8:42:92:ac:2d:
cd:b2:b9:69:8a:dd:32:68:97:99:b7:39:d2:0a:3a:
96:b3:60:8b:64:9a:61:bd:46:bb:0a:d1:38:c3:9b:
a7:95:37:1d:9b:03:f0:14:62:f4:8a:14:d0:2c:d8:
09:7a:af:e2:db:ff:90:06:90:54:4a:64:16:c9:de:
ca:6c:60:1b:aa:da:38:a5:8d:88:43:8a:ee:c3:66:
6d:1d:77:89:a1:f7:7f:e3:1e:80:25:db:b9:c1:eb:
78:77:10:42:4d:06:a4:6f:e8:2a:40:05:27:c2:c0:
c0:e1:14:7e:bc:c0:66:5c:0a:66:34:48:4f:fb:68:
e6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:CD:9F:06:64:D6:F3:E8:B0:5E:EE:69:82:F4:75:55:35:F5:08:F2
X509v3 Authority Key Identifier:
keyid:C1:EE:E2:CA:B8:6B:5E:E4:0F:C2:77:0C:A8:CB:5C:50:C6:2B:75:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/we7iyrhrXuQPwncMqMtcUMYrdVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/C82fBmTW8-iwXu5pgvR1VTX1CPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/61f3d8-1a24-446f-a2b2-0d07652e4cab/1/we7iyrhrXuQPwncMqMtcUMYrdVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.80.0/22
91.234.72.0/22
Signature Algorithm: sha256WithRSAEncryption
44:a4:5c:0d:b8:9f:4d:fa:17:4f:c9:a1:44:76:2f:da:3c:22:
ca:dc:0d:e7:fa:d9:46:be:70:27:96:48:0f:27:82:a0:ad:e0:
b5:6b:9b:eb:76:6e:5c:17:9e:c2:4d:ed:55:6c:13:f3:5a:3b:
aa:8a:b5:11:b4:8c:d0:d7:24:d5:a1:4d:c6:0e:6f:72:c7:66:
ed:89:37:01:c6:24:6e:bd:83:42:46:3d:bf:ff:90:25:ff:bf:
4a:df:d9:be:19:df:8d:ef:1a:db:56:43:ee:8c:3f:8c:62:f2:
9b:09:0e:78:93:f7:3e:04:ee:0e:48:b1:aa:44:86:81:27:d0:
3c:f8:7d:5e:f4:9a:50:76:bc:17:fc:e5:fe:4d:cf:1f:02:15:
ba:75:17:34:c5:79:ee:e1:27:47:49:92:32:ce:7f:47:fa:1f:
06:49:f2:53:09:21:f2:6f:28:38:2d:7c:2c:93:c4:bf:6b:6b:
71:50:00:25:cb:51:8c:1f:14:61:42:ed:29:fd:e3:07:1b:d0:
eb:73:3f:bf:cf:fd:7a:16:54:27:02:05:fb:3a:fa:2f:d4:a5:
bc:e3:ee:05:00:9d:5b:6f:67:d1:a4:20:e4:91:51:d2:72:75:
51:1b:ee:ee:3c:02:f1:b7:4a:c9:2f:53:f0:0c:aa:b2:89:ed:
0e:ad:af:84
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlj6e3lwP9mQ8DncjqmlW9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxZWVlMmNhYjg2YjVlZTQwZmMyNzcwY2E4Y2I1YzUwYzYy
Yjc1NWIwHhcNMjUwMTAyMDU0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYmNkOWYwNjY0ZDZmM2U4YjA1ZWVlNjk4MmY0NzU1NTM1ZjUwOGYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv/ysnuTkOIP7W2fiQBrJnjCcaxI
opX22PF8qKwzRgXvwM+3FAAdg0cmF1FkBP8fGvTB3ZZGw/3CGUiP82nXaUB5YxHn
hyTNj9YprD0tYWZR1EEIrXHWlYG/UQYuG8b8VZIJM0XCzStm5IWffhpvp/yk2QKT
ZdjezVrPnfUDHTY2yEKSrC3Nsrlpit0yaJeZtznSCjqWs2CLZJphvUa7CtE4w5un
lTcdmwPwFGL0ihTQLNgJeq/i2/+QBpBUSmQWyd7KbGAbqto4pY2IQ4ruw2ZtHXeJ
ofd/4x6AJdu5wet4dxBCTQakb+gqQAUnwsDA4RR+vMBmXApmNEhP+2jmcQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAvNnwZk1vPosF7uaYL0dVU19QjyMB8GA1UdIwQY
MBaAFMHu4sq4a17kD8J3DKjLXFDGK3VbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd2U3aXlyaHJYdVFQd25jTXFNdGNVTVlyZFZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny82MWYzZDgtMWEyNC00NDZmLWEyYjIt
MGQwNzY1MmU0Y2FiLzEvQzgyZkJtVFc4LWl3WHU1cGd2UjFWVFgxQ1BJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny82MWYzZDgtMWEyNC00NDZmLWEyYjItMGQwNzY1MmU0Y2Fi
LzEvd2U3aXlyaHJYdVFQd25jTXFNdGNVTVlyZFZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8RQAwQC
W+pIMA0GCSqGSIb3DQEBCwUAA4IBAQBEpFwNuJ9N+hdPyaFEdi/aPCLK3A3n+tlG
vnAnlkgPJ4KgreC1a5vrdm5cF57CTe1VbBPzWjuqirURtIzQ1yTVoU3GDm9yx2bt
iTcBxiRuvYNCRj2//5Al/79K39m+Gd+N7xrbVkPujD+MYvKbCQ54k/c+BO4OSLGq
RIaBJ9A8+H1e9JpQdrwX/OX+Tc8fAhW6dRc0xXnu4SdHSZIyzn9H+h8GSfJTCSHy
byg4LXwsk8S/a2txUAAly1GMHxRhQu0p/eMHG9Drcz+/z/16FlQnAgX7Ovov1KW8
4+4FAJ1bb2fRpCDkkVHScnVRG+7uPALxt0rJL1PwDKqyie0Ora+E
-----END CERTIFICATE-----
Generated at Mon Apr 7 23:55:53 2025 by rpki-client