Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/Mz3zdOLpdrQGVZtJncItYpvPliE.roa
File: Mz3zdOLpdrQGVZtJncItYpvPliE.roa (raw, json)
Hash identifier: 6F2PNmZ9ECufEFXZhtjXXLlbHL0vIzCdtjQEK5a/NJ4=
Subject key identifier: 33:3D:F3:74:E2:E9:76:B4:06:55:9B:49:9D:C2:2D:62:9B:CF:96:21
Certificate issuer: /CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Certificate serial: 019424B3DA980CCCD07903FEFA0CDFE4B73F
Authority key identifier: E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/Mz3zdOLpdrQGVZtJncItYpvPliE.roa
Signing time: Thu 02 Jan 2025 01:49:14 +0000
ROA not before: Thu 02 Jan 2025 01:49:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 28917
IP address blocks: 91.247.185.0/24 maxlen: 24
2a11:ca40::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:da:98:0c:cc:d0:79:03:fe:fa:0c:df:e4:b7:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f8b9e47856cbba082b7af4297a1b723dafc402
Validity
Not Before: Jan 2 01:49:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=333df374e2e976b406559b499dc22d629bcf9621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:27:8a:3d:0a:7d:87:98:7c:18:08:4d:69:3d:
c1:d1:93:73:d5:b7:ea:7f:ac:58:f3:47:5f:81:df:
40:f5:cb:3d:8d:a0:13:c5:cd:61:dd:14:18:19:5d:
39:2a:77:18:d7:50:f8:ec:a6:75:78:1d:ba:3e:70:
42:52:67:1e:59:b3:30:5a:a3:a0:f5:14:75:36:60:
0b:4b:2b:2f:e3:1c:38:83:62:98:d3:80:5f:8d:67:
b4:5d:67:55:ad:11:d4:53:77:34:e7:b9:d4:54:1d:
65:7f:2b:24:6a:f5:95:4a:b3:8e:a7:c6:5a:11:46:
2e:dd:9d:17:7a:49:23:99:3f:6b:38:3b:da:ea:c1:
52:d6:db:1d:1d:7d:75:1a:94:96:dc:8a:d0:bc:81:
7e:8d:44:05:9d:6b:12:a9:51:38:e0:8a:14:ff:10:
55:d3:ee:f1:98:2a:17:8a:f0:77:bc:ff:fc:e1:68:
fd:2d:1b:bb:22:eb:07:0b:6e:2a:46:58:69:5f:51:
c7:6c:58:48:00:c9:41:71:f9:06:ea:0f:7b:97:10:
e3:3f:65:a4:7c:f4:80:e0:34:4f:05:01:2f:1d:07:
13:61:ac:38:a1:16:d7:3d:32:e5:3e:90:c7:c7:2e:
f6:79:53:e7:74:e1:50:e5:4e:18:1d:9e:87:35:f8:
0d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:3D:F3:74:E2:E9:76:B4:06:55:9B:49:9D:C2:2D:62:9B:CF:96:21
X509v3 Authority Key Identifier:
keyid:E0:F8:B9:E4:78:56:CB:BA:08:2B:7A:F4:29:7A:1B:72:3D:AF:C4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Pi55HhWy7oIK3r0KXobcj2vxAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/Mz3zdOLpdrQGVZtJncItYpvPliE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/12ebcc-a9ff-402f-a51e-a579662f0950/1/4Pi55HhWy7oIK3r0KXobcj2vxAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.185.0/24
IPv6:
2a11:ca40::/29
Signature Algorithm: sha256WithRSAEncryption
67:2f:16:15:46:3d:b5:90:cb:d5:8a:d3:e9:bc:24:fb:09:7c:
d4:25:e2:ae:96:e6:30:70:e5:99:fc:6f:6f:b1:51:e6:69:0a:
d3:5c:80:f2:50:0b:7f:27:38:06:9f:b1:da:8f:b4:5e:b0:22:
d5:ec:3b:e3:ed:e0:7d:c5:41:9d:cb:64:ae:0d:99:41:6d:f4:
72:03:da:63:ed:96:5e:d6:99:f6:72:b3:14:cc:63:de:fb:48:
69:bf:45:b1:41:e0:1f:6a:2d:47:98:38:cd:8c:e5:d2:ee:a0:
c3:5d:f2:55:33:89:73:b5:d2:77:99:64:c8:c9:ea:9d:68:58:
d2:51:12:90:c2:39:0d:ad:17:b7:07:c8:5e:7a:9e:28:7f:a9:
d1:07:44:ad:f0:1e:cf:73:5e:24:1a:dd:f0:40:67:c2:03:00:
42:d0:33:b9:33:1b:ce:f3:d1:44:6d:d0:22:e3:12:5e:d7:b9:
0c:c9:35:00:b1:eb:39:43:18:78:1c:3b:38:df:f0:b1:12:e5:
42:b0:c4:81:b7:f5:5e:22:00:b6:94:bb:cd:0f:8c:e5:45:2d:
91:09:da:64:59:d6:cd:3c:ff:0a:55:5c:64:59:85:4d:b3:87:
e6:50:76:9a:04:2e:fd:fa:a7:e1:5d:53:c2:9e:db:38:2f:1e:
65:44:a4:b8
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQks9qYDMzQeQP++gzf5Lc/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZjhiOWU0Nzg1NmNiYmEwODJiN2FmNDI5N2ExYjcyM2Rh
ZmM0MDIwHhcNMjUwMTAyMDE0OTE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMzNkZjM3NGUyZTk3NmI0MDY1NTliNDk5ZGMyMmQ2MjliY2Y5NjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSeKPQp9h5h8GAhNaT3B0ZNz1bfq
f6xY80dfgd9A9cs9jaATxc1h3RQYGV05KncY11D47KZ1eB26PnBCUmceWbMwWqOg
9RR1NmALSysv4xw4g2KY04BfjWe0XWdVrRHUU3c057nUVB1lfyskavWVSrOOp8Za
EUYu3Z0XekkjmT9rODva6sFS1tsdHX11GpSW3IrQvIF+jUQFnWsSqVE44IoU/xBV
0+7xmCoXivB3vP/84Wj9LRu7IusHC24qRlhpX1HHbFhIAMlBcfkG6g97lxDjP2Wk
fPSA4DRPBQEvHQcTYaw4oRbXPTLlPpDHxy72eVPndOFQ5U4YHZ6HNfgNuQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFDM983Ti6Xa0BlWbSZ3CLWKbz5YhMB8GA1UdIwQY
MBaAFOD4ueR4Vsu6CCt69Cl6G3I9r8QCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFBpNTVIaFd5N29JSzNyMEtYb2JjajJ2eEFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xMmViY2MtYTlmZi00MDJmLWE1MWUt
YTU3OTY2MmYwOTUwLzEvTXozemRPTHBkclFHVlp0Sm5jSXRZcHZQbGlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8xMmViY2MtYTlmZi00MDJmLWE1MWUtYTU3OTY2MmYwOTUw
LzEvNFBpNTVIaFd5N29JSzNyMEtYb2JjajJ2eEFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW/e5MA0E
AgACMAcDBQMqEcpAMA0GCSqGSIb3DQEBCwUAA4IBAQBnLxYVRj21kMvVitPpvCT7
CXzUJeKuluYwcOWZ/G9vsVHmaQrTXIDyUAt/JzgGn7Haj7ResCLV7Dvj7eB9xUGd
y2SuDZlBbfRyA9pj7ZZe1pn2crMUzGPe+0hpv0WxQeAfai1HmDjNjOXS7qDDXfJV
M4lztdJ3mWTIyeqdaFjSURKQwjkNrRe3B8heep4of6nRB0St8B7Pc14kGt3wQGfC
AwBC0DO5MxvO89FEbdAi4xJe17kMyTUAses5Qxh4HDs43/CxEuVCsMSBt/VeIgC2
lLvND4zlRS2RCdpkWdbNPP8KVVxkWYVNs4fmUHaaBC79+qfhXVPCnts4Lx5lRKS4
-----END CERTIFICATE-----
Generated at Wed Feb 19 20:53:17 2025 by rpki-client