Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/0qUl-oXaPESSU51mYBa55CSkDy4.roa
File: 0qUl-oXaPESSU51mYBa55CSkDy4.roa (raw, json)
Hash identifier: nZtCIEWOEMnpEfjHbVlSi/Mi14eUBJ4v/XB6Ejyf6N4=
Subject key identifier: D2:A5:25:FA:85:DA:3C:44:92:53:9D:66:60:16:B9:E4:24:A4:0F:2E
Certificate issuer: /CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Certificate serial: 018D13D7F0D33F22AA389D0BFC0806C2BA9F
Authority key identifier: 2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/0qUl-oXaPESSU51mYBa55CSkDy4.roa
Signing time: Tue 16 Jan 2024 19:55:35 +0000
ROA not before: Tue 16 Jan 2024 19:55:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 212667
IP address blocks: 91.188.220.0/24 maxlen: 24
146.19.98.0/24 maxlen: 24
195.225.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:f0:d3:3f:22:aa:38:9d:0b:fc:08:06:c2:ba:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f5cab8a09a9fde23c9635f8e164aef09e17948c
Validity
Not Before: Jan 16 19:55:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d2a525fa85da3c4492539d666016b9e424a40f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:be:bb:23:f1:62:eb:db:9d:e6:37:68:a8:c5:
76:e8:5d:a3:99:d7:47:10:55:3a:e9:5b:5d:f4:12:
7a:8d:a4:fb:97:40:65:5e:d6:23:a4:eb:5e:00:09:
10:d9:69:74:99:fc:90:6f:69:93:39:97:97:3a:ce:
d9:83:18:79:78:34:1b:b9:45:18:59:24:42:d6:a9:
37:b0:f9:b2:65:06:47:61:ba:f8:d1:90:e1:a5:84:
b9:fb:5d:67:19:f8:e2:c5:76:b3:25:fc:24:06:c4:
47:9e:55:66:73:7e:d2:97:fe:38:84:5b:47:09:90:
89:96:12:11:4d:0e:7e:f1:ac:47:50:35:a7:b7:4a:
7c:f8:8c:56:82:36:ad:45:19:f7:a6:9a:ca:01:25:
fa:1b:68:41:0f:d8:e5:11:87:38:d5:9f:4e:56:f5:
8e:77:e2:e2:fd:51:21:84:63:aa:28:2b:18:ec:0b:
5e:db:54:ca:bf:72:a6:15:35:65:89:bb:e2:3a:38:
7b:7b:d8:b9:79:7b:ce:94:e9:4f:cb:8c:05:f7:5f:
38:64:d4:7d:24:aa:8f:ab:77:34:d0:f9:f0:cb:44:
66:66:3c:b8:32:38:04:8e:1a:13:ba:af:b7:97:28:
b7:c3:b5:58:7e:cb:92:b2:ed:2d:42:a7:b1:e2:46:
ac:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A5:25:FA:85:DA:3C:44:92:53:9D:66:60:16:B9:E4:24:A4:0F:2E
X509v3 Authority Key Identifier:
keyid:2F:5C:AB:8A:09:A9:FD:E2:3C:96:35:F8:E1:64:AE:F0:9E:17:94:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L1yrigmp_eI8ljX44WSu8J4XlIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/0qUl-oXaPESSU51mYBa55CSkDy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/c2e16e-ab68-4429-96ee-002f26e3b898/1/L1yrigmp_eI8ljX44WSu8J4XlIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.220.0/24
146.19.98.0/24
195.225.96.0/24
Signature Algorithm: sha256WithRSAEncryption
72:33:4d:fe:00:ee:d7:4f:f3:e4:c1:2f:e8:86:71:c5:9c:33:
b0:ef:40:0f:df:d7:5d:a2:13:40:6f:36:71:b0:89:8f:0e:50:
a9:cb:9f:17:06:03:90:e9:e2:92:19:db:8b:c4:94:7a:9d:c0:
07:70:c8:3d:ce:46:ef:ee:18:cf:a6:8d:c1:a6:5b:bf:6e:68:
6d:df:ac:ed:c0:e5:7b:f6:6f:b1:19:2d:01:4c:d3:53:f1:39:
51:94:42:e5:c3:90:40:9d:56:3c:e3:dd:a9:23:26:3c:b0:d0:
4e:ce:10:e8:45:3e:cd:c0:3b:42:4f:2e:d0:88:e0:de:75:a0:
a3:52:d0:9d:6d:ab:ce:0d:15:11:8f:7a:cb:aa:7c:0a:f1:15:
aa:68:fd:55:aa:1d:a8:4a:f3:92:da:6f:b4:d2:76:f9:87:b8:
a1:82:6e:e2:b9:57:38:78:3d:15:67:1a:7c:f1:f9:e2:13:1f:
20:66:44:2f:fc:20:20:e4:fa:bb:33:67:60:3a:1c:39:f6:42:
84:00:78:46:ee:12:d2:e0:78:ba:7b:19:0e:58:fa:3b:e2:89:
74:61:5d:c8:6b:15:4b:b9:c4:8e:22:41:9f:d8:9f:e3:72:20:
15:67:c9:0f:b9:6f:94:93:5a:eb:64:15:b5:c3:a4:5a:8a:d6:
d6:73:67:e6
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY0T1/DTPyKqOJ0L/AgGwrqfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNWNhYjhhMDlhOWZkZTIzYzk2MzVmOGUxNjRhZWYwOWUx
Nzk0OGMwHhcNMjQwMTE2MTk1NTM1WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMmE1MjVmYTg1ZGEzYzQ0OTI1MzlkNjY2MDE2YjllNDI0YTQwZjJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgL67I/Fi69ud5jdoqMV26F2jmddH
EFU66Vtd9BJ6jaT7l0BlXtYjpOteAAkQ2Wl0mfyQb2mTOZeXOs7Zgxh5eDQbuUUY
WSRC1qk3sPmyZQZHYbr40ZDhpYS5+11nGfjixXazJfwkBsRHnlVmc37Sl/44hFtH
CZCJlhIRTQ5+8axHUDWnt0p8+IxWgjatRRn3pprKASX6G2hBD9jlEYc41Z9OVvWO
d+Li/VEhhGOqKCsY7Ate21TKv3KmFTVlibviOjh7e9i5eXvOlOlPy4wF9184ZNR9
JKqPq3c00Pnwy0RmZjy4MjgEjhoTuq+3lyi3w7VYfsuSsu0tQqex4kas9wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNKlJfqF2jxEklOdZmAWueQkpA8uMB8GA1UdIwQY
MBaAFC9cq4oJqf3iPJY1+OFkrvCeF5SMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDF5cmlnbXBfZUk4bGpYNDRXU3U4SjRYbEl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9jMmUxNmUtYWI2OC00NDI5LTk2ZWUt
MDAyZjI2ZTNiODk4LzEvMHFVbC1vWGFQRVNTVTUxbVlCYTU1Q1NrRHk0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9jMmUxNmUtYWI2OC00NDI5LTk2ZWUtMDAyZjI2ZTNiODk4
LzEvTDF5cmlnbXBfZUk4bGpYNDRXU3U4SjRYbEl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW7zcAwQA
khNiAwQAw+FgMA0GCSqGSIb3DQEBCwUAA4IBAQByM03+AO7XT/PkwS/ohnHFnDOw
70AP39ddohNAbzZxsImPDlCpy58XBgOQ6eKSGduLxJR6ncAHcMg9zkbv7hjPpo3B
plu/bmht36ztwOV79m+xGS0BTNNT8TlRlELlw5BAnVY8492pIyY8sNBOzhDoRT7N
wDtCTy7QiODedaCjUtCdbavODRURj3rLqnwK8RWqaP1Vqh2oSvOS2m+00nb5h7ih
gm7iuVc4eD0VZxp88fniEx8gZkQv/CAg5Pq7M2dgOhw59kKEAHhG7hLS4Hi6exkO
WPo74ol0YV3IaxVLucSOIkGf2J/jciAVZ8kPuW+Uk1rrZBW1w6RaitbWc2fm
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:39:58 2025 by rpki-client