Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/SAkp88S54aJN6C-GCtNeqgpkjzs.roa
File: SAkp88S54aJN6C-GCtNeqgpkjzs.roa (raw, json)
Hash identifier: xdHHAbJE3WiWjdXV3cBquprUR130i7lr4362iYiFT8M=
Subject key identifier: 48:09:29:F3:C4:B9:E1:A2:4D:E8:2F:86:0A:D3:5E:AA:0A:64:8F:3B
Certificate issuer: /CN=f25c653c6054866042a706f717b24b21fdf981a8
Certificate serial: 019428272E083BCDE3D7B7D439688E83B4D9
Authority key identifier: F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/SAkp88S54aJN6C-GCtNeqgpkjzs.roa
Signing time: Thu 02 Jan 2025 17:54:03 +0000
ROA not before: Thu 02 Jan 2025 17:54:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56597
IP address blocks: 91.225.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:27:2e:08:3b:cd:e3:d7:b7:d4:39:68:8e:83:b4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25c653c6054866042a706f717b24b21fdf981a8
Validity
Not Before: Jan 2 17:54:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=480929f3c4b9e1a24de82f860ad35eaa0a648f3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:14:a5:82:a5:e2:f9:c8:93:bb:b1:02:1c:0d:
15:b7:25:20:7d:56:c3:32:9c:bc:eb:75:aa:97:ed:
e5:50:73:42:81:46:e0:36:9b:4e:bc:b4:30:1a:a4:
2c:fc:f9:75:3f:8d:b0:ef:34:4e:fd:eb:08:5e:28:
dd:69:5f:34:72:4a:fa:de:ad:79:77:ef:cf:07:ac:
e0:53:76:b7:11:0c:82:41:67:2c:c0:2a:b1:58:7f:
78:0d:f7:ed:01:92:21:5f:f0:fa:b0:b4:d3:b4:19:
2d:b2:26:3e:ff:83:53:a6:45:dd:84:4e:f7:d7:5c:
e3:87:46:7c:23:0e:b3:9e:73:4a:3e:24:b4:b4:08:
c0:af:f6:ac:2a:a9:22:57:83:12:16:65:8b:12:6d:
fa:24:dc:ff:96:0c:6c:00:ce:07:ba:6d:4e:5f:2e:
af:14:9a:e7:1b:6b:30:e1:a9:e1:62:54:c0:b0:f7:
b3:b2:2b:8b:c9:5a:c5:21:52:67:c5:a0:1f:1d:28:
b0:4d:e7:e6:60:f6:ff:64:e5:9e:10:01:f7:ec:b5:
b4:63:f4:d8:45:53:0b:fc:25:9a:c1:92:fa:e9:0c:
48:37:83:fb:f2:e6:23:1d:d4:cb:b4:9a:ab:6d:e7:
4c:08:11:7e:0c:b5:20:01:c6:3c:93:ae:3e:c8:55:
ae:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:09:29:F3:C4:B9:E1:A2:4D:E8:2F:86:0A:D3:5E:AA:0A:64:8F:3B
X509v3 Authority Key Identifier:
keyid:F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/SAkp88S54aJN6C-GCtNeqgpkjzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.240.0/22
Signature Algorithm: sha256WithRSAEncryption
84:a5:f5:2c:b6:6e:96:49:78:b3:c4:65:4d:42:3a:fc:80:0e:
bb:1a:3f:97:13:39:3a:22:34:27:44:b2:52:d9:9d:39:9c:b2:
c3:f0:42:37:a0:0e:04:05:ff:fd:f5:8b:9f:15:64:0c:72:2f:
be:7f:db:6d:54:3d:34:7d:6b:de:18:3a:8a:51:9d:58:11:f7:
44:f6:b3:fb:89:34:88:8f:6f:01:cd:14:32:66:ea:af:6b:c1:
01:b4:f5:75:80:ba:14:c4:9b:05:81:44:fd:f2:6f:a3:06:88:
1e:4b:aa:1a:a0:5d:72:c7:eb:2b:d7:40:63:56:d0:8e:db:3a:
f4:bf:8b:9e:ec:13:59:57:34:4d:bc:d4:d5:8d:c7:63:f9:c0:
32:f6:99:cd:57:5e:6a:b5:28:ef:30:fa:cd:66:0e:a8:cd:e8:
e4:62:06:c8:e7:80:d6:4d:f1:76:bc:48:6e:2b:08:f7:dd:a0:
80:a9:24:31:92:a1:b8:8f:70:47:97:9b:11:d4:37:a0:5c:76:
44:8a:9d:cd:4c:f8:07:d9:41:ec:c7:df:23:59:f9:9e:a3:c8:
5c:8f:1a:1b:bf:27:f2:b1:88:96:a5:b9:35:85:05:7b:84:35:
a3:5f:42:bb:7c:da:22:ba:f6:4f:08:d5:06:67:f1:b9:92:6c:
aa:74:1d:77
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJy4IO83j17fUOWiOg7TZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNWM2NTNjNjA1NDg2NjA0MmE3MDZmNzE3YjI0YjIxZmRm
OTgxYTgwHhcNMjUwMTAyMTc1NDAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ODA5MjlmM2M0YjllMWEyNGRlODJmODYwYWQzNWVhYTBhNjQ4ZjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtRSlgqXi+ciTu7ECHA0VtyUgfVbD
Mpy863Wql+3lUHNCgUbgNptOvLQwGqQs/Pl1P42w7zRO/esIXijdaV80ckr63q15
d+/PB6zgU3a3EQyCQWcswCqxWH94DfftAZIhX/D6sLTTtBktsiY+/4NTpkXdhE73
11zjh0Z8Iw6znnNKPiS0tAjAr/asKqkiV4MSFmWLEm36JNz/lgxsAM4Hum1OXy6v
FJrnG2sw4anhYlTAsPezsiuLyVrFIVJnxaAfHSiwTefmYPb/ZOWeEAH37LW0Y/TY
RVML/CWawZL66QxIN4P78uYjHdTLtJqrbedMCBF+DLUgAcY8k64+yFWupQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEgJKfPEueGiTegvhgrTXqoKZI87MB8GA1UdIwQY
MBaAFPJcZTxgVIZgQqcG9xeySyH9+YGoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGx4bFBHQlVobUJDcHdiM0Y3SkxJZjM1Z2FnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9mYjI5OTgtNTFmOS00YWRiLWEzMjMt
ZjA3YTIxOGUxY2M3LzEvU0FrcDg4UzU0YUpONkMtR0N0TmVxZ3BranpzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9mYjI5OTgtNTFmOS00YWRiLWEzMjMtZjA3YTIxOGUxY2M3
LzEvOGx4bFBHQlVobUJDcHdiM0Y3SkxJZjM1Z2FnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+HwMA0G
CSqGSIb3DQEBCwUAA4IBAQCEpfUstm6WSXizxGVNQjr8gA67Gj+XEzk6IjQnRLJS
2Z05nLLD8EI3oA4EBf/99YufFWQMci++f9ttVD00fWveGDqKUZ1YEfdE9rP7iTSI
j28BzRQyZuqva8EBtPV1gLoUxJsFgUT98m+jBogeS6oaoF1yx+sr10BjVtCO2zr0
v4ue7BNZVzRNvNTVjcdj+cAy9pnNV15qtSjvMPrNZg6ozejkYgbI54DWTfF2vEhu
Kwj33aCAqSQxkqG4j3BHl5sR1DegXHZEip3NTPgH2UHsx98jWfmeo8hcjxobvyfy
sYiWpbk1hQV7hDWjX0K7fNoiuvZPCNUGZ/G5kmyqdB13
-----END CERTIFICATE-----
Generated at Tue Apr 8 09:30:57 2025 by rpki-client