Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/OoBGTJUsN0YQ8-kRUhL79IvaFTU.roa
File: OoBGTJUsN0YQ8-kRUhL79IvaFTU.roa (raw, json)
Hash identifier: KQ8kfmaZw2mJmdCZhrX6qjUaRt+eTM3yBnvc8ppjAws=
Subject key identifier: 3A:80:46:4C:95:2C:37:46:10:F3:E9:11:52:12:FB:F4:8B:DA:15:35
Certificate issuer: /CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Certificate serial: 0194214456E2402AB405F477343876AEACC7
Authority key identifier: 5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/OoBGTJUsN0YQ8-kRUhL79IvaFTU.roa
Signing time: Wed 01 Jan 2025 09:48:34 +0000
ROA not before: Wed 01 Jan 2025 09:48:34 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198949
IP address blocks: 91.231.192.0/22 maxlen: 22
91.231.192.0/24 maxlen: 24
91.231.193.0/24 maxlen: 24
91.231.194.0/24 maxlen: 24
91.231.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:56:e2:40:2a:b4:05:f4:77:34:38:76:ae:ac:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d82ca6f8eb685a573e5d1d91f8f06121ab02a37
Validity
Not Before: Jan 1 09:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a80464c952c374610f3e9115212fbf48bda1535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2b:33:94:c4:ec:44:d7:84:38:c7:d2:57:a8:
e3:e2:ba:1b:35:64:e0:d3:29:c9:6c:fc:bd:81:e3:
09:de:a8:9b:b0:49:73:1f:85:e5:21:2a:e8:23:1f:
35:f9:6a:f0:b7:12:68:ba:8f:30:cc:f3:e6:7a:c6:
87:ab:a9:4c:78:ee:d5:a3:25:c2:0d:aa:43:bb:b3:
bf:01:0f:97:c5:b4:cb:0a:ff:3c:ab:9f:39:01:5d:
cb:8f:e2:e2:c8:9b:eb:3d:50:55:0a:a3:d9:8f:bd:
a8:d4:a2:4b:72:19:71:a5:23:a2:62:fc:11:04:fb:
0a:3f:2a:8d:b4:b1:6f:6c:d9:15:42:a0:b8:ca:31:
df:57:c6:b9:9d:a7:2b:5e:8c:14:c7:a2:42:68:13:
a2:a0:81:42:2f:13:4c:96:a3:8f:32:9f:d1:9c:23:
a2:3a:da:aa:00:41:04:45:75:8a:2a:10:6e:4f:3a:
9a:58:13:ce:e7:57:c6:a7:44:8e:c9:40:40:27:02:
9e:d9:94:15:a5:5b:8a:bc:c1:f4:0b:a0:cc:9f:2e:
fc:f4:fd:41:39:ab:d3:a7:b4:e0:b2:39:71:6e:8c:
2f:4b:89:9b:85:58:10:b4:db:ec:07:61:5b:be:cc:
f1:0c:20:7d:a1:37:8f:c2:fc:de:52:19:9d:3d:c8:
a2:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:80:46:4C:95:2C:37:46:10:F3:E9:11:52:12:FB:F4:8B:DA:15:35
X509v3 Authority Key Identifier:
keyid:5D:82:CA:6F:8E:B6:85:A5:73:E5:D1:D9:1F:8F:06:12:1A:B0:2A:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XYLKb462haVz5dHZH48GEhqwKjc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/OoBGTJUsN0YQ8-kRUhL79IvaFTU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d54bc0-f781-48b0-9f6d-b5f0d21053f8/1/XYLKb462haVz5dHZH48GEhqwKjc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.192.0/22
Signature Algorithm: sha256WithRSAEncryption
24:7b:99:ee:99:5d:78:d5:32:a7:3f:7a:46:51:11:45:c1:4d:
82:18:9b:13:ed:a3:7e:b6:3d:a3:d9:38:40:5f:6a:1f:f1:57:
92:79:72:09:24:ba:ab:e2:68:86:e8:fd:25:54:76:ff:98:42:
e3:03:7f:5f:70:d9:d4:3b:29:3a:e2:5a:03:3b:75:7a:93:e7:
65:81:94:3d:d3:60:e5:7d:3c:c3:e2:de:33:7c:db:69:30:41:
00:0c:c1:82:6c:06:85:d6:da:96:ba:d6:90:61:f9:46:59:18:
0c:22:95:bf:f2:b0:1c:40:43:f1:91:7e:ed:b3:87:09:87:db:
49:db:8f:54:e8:dc:38:ec:1f:e0:31:00:7d:13:ba:c1:b0:57:
6c:ce:c5:9d:3e:3d:68:77:53:f4:6a:4a:fe:35:bb:2e:27:47:
56:fd:6d:ca:84:a5:99:c5:65:98:a1:67:20:45:60:01:99:b1:
39:b1:76:10:d8:8c:9d:ad:69:45:11:a5:90:98:8e:36:6d:8c:
d0:58:f3:16:1f:4a:7c:98:40:6e:ef:31:77:0c:ed:ff:ae:7b:
e2:86:a5:78:b9:4b:ed:a8:35:79:90:8b:40:8b:8b:66:af:8b:
e9:04:75:ec:eb:3c:b8:8a:29:77:cc:e3:de:1a:ee:23:18:83:
50:ee:31:43
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRFbiQCq0BfR3NDh2rqzHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkODJjYTZmOGViNjg1YTU3M2U1ZDFkOTFmOGYwNjEyMWFi
MDJhMzcwHhcNMjUwMTAxMDk0ODM0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTgwNDY0Yzk1MmMzNzQ2MTBmM2U5MTE1MjEyZmJmNDhiZGExNTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyszlMTsRNeEOMfSV6jj4robNWTg
0ynJbPy9geMJ3qibsElzH4XlISroIx81+WrwtxJouo8wzPPmesaHq6lMeO7VoyXC
DapDu7O/AQ+XxbTLCv88q585AV3Lj+LiyJvrPVBVCqPZj72o1KJLchlxpSOiYvwR
BPsKPyqNtLFvbNkVQqC4yjHfV8a5nacrXowUx6JCaBOioIFCLxNMlqOPMp/RnCOi
OtqqAEEERXWKKhBuTzqaWBPO51fGp0SOyUBAJwKe2ZQVpVuKvMH0C6DMny789P1B
OavTp7TgsjlxbowvS4mbhVgQtNvsB2FbvszxDCB9oTePwvzeUhmdPciilwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDqARkyVLDdGEPPpEVIS+/SL2hU1MB8GA1UdIwQY
MBaAFF2Cym+OtoWlc+XR2R+PBhIasCo3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWFlMS2I0NjJoYVZ6NWRIWkg0OEdFaHF3S2pjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My9kNTRiYzAtZjc4MS00OGIwLTlmNmQt
YjVmMGQyMTA1M2Y4LzEvT29CR1RKVXNOMFlROC1rUlVoTDc5SXZhRlRVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My9kNTRiYzAtZjc4MS00OGIwLTlmNmQtYjVmMGQyMTA1M2Y4
LzEvWFlMS2I0NjJoYVZ6NWRIWkg0OEdFaHF3S2pjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+fAMA0G
CSqGSIb3DQEBCwUAA4IBAQAke5numV141TKnP3pGURFFwU2CGJsT7aN+tj2j2ThA
X2of8VeSeXIJJLqr4miG6P0lVHb/mELjA39fcNnUOyk64loDO3V6k+dlgZQ902Dl
fTzD4t4zfNtpMEEADMGCbAaF1tqWutaQYflGWRgMIpW/8rAcQEPxkX7ts4cJh9tJ
249U6Nw47B/gMQB9E7rBsFdszsWdPj1od1P0akr+NbsuJ0dW/W3KhKWZxWWYoWcg
RWABmbE5sXYQ2IydrWlFEaWQmI42bYzQWPMWH0p8mEBu7zF3DO3/rnvihqV4uUvt
qDV5kItAi4tmr4vpBHXs6zy4iil3zOPeGu4jGINQ7jFD
-----END CERTIFICATE-----
Generated at Sat Apr 12 08:12:34 2025 by rpki-client