Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/1-d6DUI7mmJKHILGE-ACGJbIFV40.roa
File: 1-d6DUI7mmJKHILGE-ACGJbIFV40.roa (raw, json)
Hash identifier: WM+ispXO9qKwdYzXWtwDmpPip6PK1PIBVYZaFFY6Sl4=
Subject key identifier: F9:DE:83:50:8E:E6:98:92:87:20:B1:84:F8:00:86:25:B2:05:57:8D
Certificate issuer: /CN=b40aa5163496e053a76b6d69cdc45f75006cd8df
Certificate serial: 01942826E0113C07D78D76BE58A792D03105
Authority key identifier: B4:0A:A5:16:34:96:E0:53:A7:6B:6D:69:CD:C4:5F:75:00:6C:D8:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tAqlFjSW4FOna21pzcRfdQBs2N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/1-d6DUI7mmJKHILGE-ACGJbIFV40.roa
Signing time: Thu 02 Jan 2025 17:53:43 +0000
ROA not before: Thu 02 Jan 2025 17:53:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51509
IP address blocks: 91.217.92.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:e0:11:3c:07:d7:8d:76:be:58:a7:92:d0:31:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b40aa5163496e053a76b6d69cdc45f75006cd8df
Validity
Not Before: Jan 2 17:53:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f9de83508ee698928720b184f8008625b205578d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ba:97:06:f2:60:d6:53:22:fb:36:ea:8a:46:
25:52:e0:3b:8b:87:6d:53:0b:dd:0c:53:26:1a:b8:
1f:33:c0:b0:a2:51:e3:92:20:c3:ce:41:65:24:be:
1a:da:5a:c7:93:31:49:5b:c0:4c:51:d3:45:ca:41:
28:00:18:41:af:e7:47:e7:ff:b3:f3:02:ff:35:66:
17:6e:48:f7:1d:ce:78:84:31:95:6a:c4:ae:36:5d:
5e:34:ce:ef:5f:2d:02:bb:51:23:66:7d:7d:7b:4b:
ce:c1:61:11:c4:31:e4:28:64:74:ac:1a:86:75:7f:
bd:3f:27:54:d6:ae:62:2c:c5:a3:73:cd:a1:a1:7a:
2f:03:6a:8b:b5:f1:48:c0:93:0b:af:6f:c2:ad:15:
01:b0:e3:16:1b:58:03:9d:52:a3:6b:35:44:25:12:
16:fd:c7:9c:f4:8c:90:fb:f9:25:3b:f7:e3:c9:dc:
4d:d4:ee:7d:00:68:f4:e0:ae:0e:a9:7e:22:79:93:
40:b2:68:2b:2e:c4:25:0e:57:b8:f9:4f:23:98:1f:
fd:62:21:e9:c2:d4:b0:45:41:27:c2:a7:af:ea:bc:
e4:b2:bc:37:00:a3:dc:b2:8f:76:70:eb:e9:ee:22:
7f:11:9c:eb:e9:6e:e8:79:69:93:c9:db:91:94:a4:
c3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DE:83:50:8E:E6:98:92:87:20:B1:84:F8:00:86:25:B2:05:57:8D
X509v3 Authority Key Identifier:
keyid:B4:0A:A5:16:34:96:E0:53:A7:6B:6D:69:CD:C4:5F:75:00:6C:D8:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tAqlFjSW4FOna21pzcRfdQBs2N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/1-d6DUI7mmJKHILGE-ACGJbIFV40.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/a20fb0-5b8d-4517-b46e-c72cbac285f8/1/tAqlFjSW4FOna21pzcRfdQBs2N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.92.0/23
Signature Algorithm: sha256WithRSAEncryption
09:e7:e9:ee:9a:c1:f5:5b:5f:fd:0f:50:9a:9d:82:47:79:0f:
16:a8:d8:00:44:b5:f5:d2:b9:be:2f:91:b8:3c:9b:a1:f3:5c:
2e:67:4b:f0:b0:67:6b:5c:21:73:06:6f:65:6d:d9:c3:b3:95:
27:a1:9a:8e:53:2c:0e:e6:2c:f9:a0:89:34:cf:ed:ed:8b:98:
72:ea:94:94:7b:5a:5a:c6:f4:05:71:56:46:46:1b:c9:d5:50:
ca:05:28:71:07:14:74:c2:fa:53:70:d9:6f:e6:b9:82:a7:cb:
47:49:43:11:a3:70:7c:ce:07:72:27:4d:56:4f:56:da:1a:2c:
71:26:ec:f0:6d:8c:73:93:2b:45:7f:eb:65:c1:78:2e:87:83:
95:ee:5b:e3:3c:dc:28:55:1b:b1:44:5f:a6:48:20:da:bf:b5:
e5:b1:63:e0:c7:bf:3f:df:7c:cd:37:8f:4a:60:28:90:bc:1f:
bd:bc:bc:58:94:84:bf:06:7c:15:e7:25:98:b6:e3:b5:55:74:
44:ef:74:9c:66:80:79:0e:dc:a6:00:62:ee:6f:38:7d:f9:eb:
59:d4:90:7f:fe:f4:c1:c4:9c:e1:e0:7a:4b:d2:26:77:32:d6:
72:82:c5:b3:c1:6d:de:d8:70:75:1f:30:cf:3c:6f:b3:04:34:
d0:5e:3a:40
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQoJuARPAfXjXa+WKeS0DEFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0MGFhNTE2MzQ5NmUwNTNhNzZiNmQ2OWNkYzQ1Zjc1MDA2
Y2Q4ZGYwHhcNMjUwMTAyMTc1MzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmOWRlODM1MDhlZTY5ODkyODcyMGIxODRmODAwODYyNWIyMDU1NzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LqXBvJg1lMi+zbqikYlUuA7i4dt
UwvdDFMmGrgfM8CwolHjkiDDzkFlJL4a2lrHkzFJW8BMUdNFykEoABhBr+dH5/+z
8wL/NWYXbkj3Hc54hDGVasSuNl1eNM7vXy0Cu1EjZn19e0vOwWERxDHkKGR0rBqG
dX+9PydU1q5iLMWjc82hoXovA2qLtfFIwJMLr2/CrRUBsOMWG1gDnVKjazVEJRIW
/cec9IyQ+/klO/fjydxN1O59AGj04K4OqX4ieZNAsmgrLsQlDle4+U8jmB/9YiHp
wtSwRUEnwqev6rzksrw3AKPcso92cOvp7iJ/EZzr6W7oeWmTyduRlKTDvwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPneg1CO5piShyCxhPgAhiWyBVeNMB8GA1UdIwQY
MBaAFLQKpRY0luBTp2ttac3EX3UAbNjfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdEFxbEZqU1c0Rk9uYTIxcHpjUmZkUUJzMk44LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9hMjBmYjAtNWI4ZC00NTE3LWI0NmUt
YzcyY2JhYzI4NWY4LzEvMS1kNkRVSTdtbUpLSElMR0UtQUNHSmJJRlY0MC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNzAvYTIwZmIwLTViOGQtNDUxNy1iNDZlLWM3MmNiYWMyODVm
OC8xL3RBcWxGalNXNEZPbmEyMXB6Y1JmZFFCczJOOC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAVvZXDAN
BgkqhkiG9w0BAQsFAAOCAQEACefp7prB9Vtf/Q9Qmp2CR3kPFqjYAES19dK5vi+R
uDybofNcLmdL8LBna1whcwZvZW3Zw7OVJ6GajlMsDuYs+aCJNM/t7YuYcuqUlHta
Wsb0BXFWRkYbydVQygUocQcUdML6U3DZb+a5gqfLR0lDEaNwfM4HcidNVk9W2hos
cSbs8G2Mc5MrRX/rZcF4LoeDle5b4zzcKFUbsURfpkgg2r+15bFj4Me/P998zTeP
SmAokLwfvby8WJSEvwZ8FeclmLbjtVV0RO90nGaAeQ7cpgBi7m84ffnrWdSQf/70
wcSc4eB6S9ImdzLWcoLFs8Ft3thwdR8wzzxvswQ00F46QA==
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:52:58 2025 by rpki-client