Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/RNEGyKfylX6Y800rWZPCCJc50_A.roa
File: RNEGyKfylX6Y800rWZPCCJc50_A.roa (raw, json)
Hash identifier: VU3yf9iAHvzAzzlVwWU4OukRHg8QQbxfRarucNtL/BU=
Subject key identifier: 44:D1:06:C8:A7:F2:95:7E:98:F3:4D:2B:59:93:C2:08:97:39:D3:F0
Certificate issuer: /CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Certificate serial: 01942521BBEBED0E2EE8CD2F2CB50C4E635F
Authority key identifier: 1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/RNEGyKfylX6Y800rWZPCCJc50_A.roa
Signing time: Thu 02 Jan 2025 03:49:15 +0000
ROA not before: Thu 02 Jan 2025 03:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 133861
IP address blocks: 91.208.236.0/24 maxlen: 24
91.208.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:bb:eb:ed:0e:2e:e8:cd:2f:2c:b5:0c:4e:63:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f4738389cb3b998ec4fa6d4272f8dd799fbc4a9
Validity
Not Before: Jan 2 03:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44d106c8a7f2957e98f34d2b5993c2089739d3f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:44:78:7d:7b:72:6a:75:c5:99:a8:e6:71:
bc:10:03:44:a4:c4:37:69:69:b5:bc:6d:d7:26:d4:
02:db:7c:b5:fe:1e:d6:2f:3f:1d:ad:2c:34:11:d3:
0c:bf:95:9b:52:ae:1a:74:ee:5d:60:e9:1f:af:dd:
b7:63:e2:34:f2:3d:2e:d4:4a:45:0d:24:fc:ef:0d:
ab:9c:e3:24:50:cf:35:6d:f1:42:9a:c0:d5:65:73:
f4:a4:9a:22:61:b0:28:ad:76:f9:be:06:a8:ea:7b:
dd:88:f8:e6:5c:1e:8f:60:6e:3d:e1:14:a1:7b:e5:
dd:25:95:44:92:67:73:70:9d:ff:3d:c3:2b:b8:1f:
88:37:af:95:e1:7d:15:bf:9b:4d:44:1e:83:66:52:
12:74:83:d0:5e:8d:33:28:9c:9a:d6:ce:99:f8:bd:
3c:d6:a8:e9:12:e1:84:21:6d:11:04:da:16:49:d5:
48:d4:f9:ec:03:8b:22:65:28:bf:99:2b:c8:2c:dc:
00:c4:bc:11:6e:96:1b:ef:2d:aa:9e:12:12:f8:07:
bd:5b:77:3c:b9:15:8e:e2:71:e7:1a:e6:7c:f8:55:
3f:26:47:c0:5a:07:4a:c7:58:85:df:c4:4b:0f:20:
dd:b7:eb:a1:ac:d8:6c:d3:c6:70:bc:6b:61:7d:ee:
e7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:D1:06:C8:A7:F2:95:7E:98:F3:4D:2B:59:93:C2:08:97:39:D3:F0
X509v3 Authority Key Identifier:
keyid:1F:47:38:38:9C:B3:B9:98:EC:4F:A6:D4:27:2F:8D:D7:99:FB:C4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H0c4OJyzuZjsT6bUJy-N15n7xKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/RNEGyKfylX6Y800rWZPCCJc50_A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/517694-c8a1-458b-9cf2-6c7e5685890c/1/H0c4OJyzuZjsT6bUJy-N15n7xKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.236.0/24
91.208.240.0/24
Signature Algorithm: sha256WithRSAEncryption
6e:92:ea:64:ff:61:ca:93:79:81:a5:f1:45:50:02:33:2e:ca:
62:c5:fa:a5:97:89:2b:3f:df:20:bd:64:5e:16:fb:db:84:92:
b5:56:b5:52:cf:9d:bb:8c:a8:fc:83:c4:11:e4:ab:14:cf:31:
85:42:23:b3:59:48:89:0f:a9:03:e3:91:a0:ff:fe:50:04:ce:
af:9b:de:6d:dc:82:6a:db:e8:27:19:fa:3a:ce:9b:b3:6c:e6:
0d:3a:1d:79:a9:39:4b:d7:16:be:f4:9f:db:15:76:57:35:3a:
72:59:40:57:8f:a0:9d:85:85:b7:76:96:50:27:50:8e:12:8e:
35:26:c1:88:d5:87:5c:43:0c:c6:cb:79:28:f6:72:30:9d:c1:
0d:51:cb:e9:c1:9a:18:fa:48:db:34:b0:48:7b:5c:fc:27:f8:
c2:df:4c:42:0f:c0:6f:7d:4e:e6:06:1f:b3:46:bc:59:21:4b:
f3:7d:76:23:8c:2f:9d:c1:21:3a:27:2e:29:0f:9a:a5:29:67:
08:0c:ae:55:43:a8:8b:85:22:b4:e1:b4:d3:90:d2:7e:70:09:
cd:9e:0c:35:5d:0a:a0:33:c1:3a:87:52:f2:06:0f:09:c7:10:
64:56:b0:25:3a:e2:17:5d:40:32:d7:68:67:7c:b1:5c:7b:48:
0e:55:2e:63
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlIbvr7Q4u6M0vLLUMTmNfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmNDczODM4OWNiM2I5OThlYzRmYTZkNDI3MmY4ZGQ3OTlm
YmM0YTkwHhcNMjUwMTAyMDM0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NGQxMDZjOGE3ZjI5NTdlOThmMzRkMmI1OTkzYzIwODk3MzlkM2YwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuq5EeH17cmp1xZmo5nG8EANEpMQ3
aWm1vG3XJtQC23y1/h7WLz8drSw0EdMMv5WbUq4adO5dYOkfr923Y+I08j0u1EpF
DST87w2rnOMkUM81bfFCmsDVZXP0pJoiYbAorXb5vgao6nvdiPjmXB6PYG494RSh
e+XdJZVEkmdzcJ3/PcMruB+IN6+V4X0Vv5tNRB6DZlISdIPQXo0zKJya1s6Z+L08
1qjpEuGEIW0RBNoWSdVI1PnsA4siZSi/mSvILNwAxLwRbpYb7y2qnhIS+Ae9W3c8
uRWO4nHnGuZ8+FU/JkfAWgdKx1iF38RLDyDdt+uhrNhs08ZwvGthfe7npwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFETRBsin8pV+mPNNK1mTwgiXOdPwMB8GA1UdIwQY
MBaAFB9HODics7mY7E+m1CcvjdeZ+8SpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjIt
NmM3ZTU2ODU4OTBjLzEvUk5FR3lLZnlsWDZZODAwcldaUENDSmM1MF9BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81MTc2OTQtYzhhMS00NThiLTljZjItNmM3ZTU2ODU4OTBj
LzEvSDBjNE9KeXp1WmpzVDZiVUp5LU4xNW43eEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW9DsAwQA
W9DwMA0GCSqGSIb3DQEBCwUAA4IBAQBukupk/2HKk3mBpfFFUAIzLspixfqll4kr
P98gvWReFvvbhJK1VrVSz527jKj8g8QR5KsUzzGFQiOzWUiJD6kD45Gg//5QBM6v
m95t3IJq2+gnGfo6zpuzbOYNOh15qTlL1xa+9J/bFXZXNTpyWUBXj6CdhYW3dpZQ
J1COEo41JsGI1YdcQwzGy3ko9nIwncENUcvpwZoY+kjbNLBIe1z8J/jC30xCD8Bv
fU7mBh+zRrxZIUvzfXYjjC+dwSE6Jy4pD5qlKWcIDK5VQ6iLhSK04bTTkNJ+cAnN
ngw1XQqgM8E6h1LyBg8JxxBkVrAlOuIXXUAy12hnfLFce0gOVS5j
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:56:10 2025 by rpki-client