Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/gENnBMD7CFnpDe73cGovXB6cewg.roa
File: gENnBMD7CFnpDe73cGovXB6cewg.roa (raw, json)
Hash identifier: rDcPDp/N1UMZLBWpv8SmAqXs5rg//NGw82tfNx9i/r0=
Subject key identifier: 80:43:67:04:C0:FB:08:59:E9:0D:EE:F7:70:6A:2F:5C:1E:9C:7B:08
Certificate issuer: /CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
Certificate serial: 019421B2420218196A45A7BFC3A132BA196F
Authority key identifier: 8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/gENnBMD7CFnpDe73cGovXB6cewg.roa
Signing time: Wed 01 Jan 2025 11:48:37 +0000
ROA not before: Wed 01 Jan 2025 11:48:37 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51200
IP address blocks: 91.230.136.0/22 maxlen: 22
91.230.136.0/24 maxlen: 24
91.230.137.0/24 maxlen: 24
91.230.138.0/24 maxlen: 24
91.230.139.0/24 maxlen: 24
2001:67c:2b88::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:42:02:18:19:6a:45:a7:bf:c3:a1:32:ba:19:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f156e69f9444c2b06687256085b6a7a4e9887f6
Validity
Not Before: Jan 1 11:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=80436704c0fb0859e90deef7706a2f5c1e9c7b08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:5b:72:0d:cc:e4:20:44:fb:04:7c:dd:fa:f2:
82:03:66:c3:e8:5f:5f:14:f4:45:e4:df:a4:de:95:
1c:b6:dd:1a:ce:8d:35:f7:c2:7c:cd:d0:22:42:c4:
82:6e:33:27:fe:39:f9:c6:82:0b:49:9b:bd:93:b0:
55:6d:00:4a:a1:50:2b:fd:63:de:a3:f8:f6:76:2a:
55:31:9a:22:73:2d:c0:51:c4:a6:bb:5e:0e:31:ce:
4e:b1:3d:33:a2:55:b8:87:18:9f:2e:ae:49:05:84:
64:85:e7:25:e9:df:a8:73:57:12:7d:42:b3:eb:a4:
b9:45:d5:62:33:34:a2:2c:6c:81:e0:c0:14:b1:8a:
a0:40:7c:62:4f:6c:ee:bc:ff:7a:66:7a:91:d0:d3:
b5:e3:34:e7:e8:3f:04:82:55:c8:35:96:e7:3c:a5:
cc:8d:cd:a5:01:c4:a8:2a:68:b5:0e:e4:8a:14:1d:
0f:9e:20:78:53:22:d0:93:75:3e:b4:bd:1c:7a:85:
ad:9e:ce:18:45:19:42:df:d7:7e:67:6f:eb:4b:a4:
6f:16:9a:20:51:06:27:e2:ad:82:ba:64:53:f8:bb:
0f:23:d5:01:a1:5b:3a:61:b1:28:dd:25:46:9f:48:
57:65:21:47:70:5c:e2:1d:40:c3:7d:20:3e:43:25:
71:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:43:67:04:C0:FB:08:59:E9:0D:EE:F7:70:6A:2F:5C:1E:9C:7B:08
X509v3 Authority Key Identifier:
keyid:8F:15:6E:69:F9:44:4C:2B:06:68:72:56:08:5B:6A:7A:4E:98:87:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jxVuaflETCsGaHJWCFtqek6Yh_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/gENnBMD7CFnpDe73cGovXB6cewg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9b81fe-67d2-4948-b4b1-2b785b72b4f4/1/jxVuaflETCsGaHJWCFtqek6Yh_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.136.0/22
IPv6:
2001:67c:2b88::/48
Signature Algorithm: sha256WithRSAEncryption
1a:2b:fb:0c:e7:9d:e3:6f:d8:46:36:5d:78:c3:a0:8b:07:ca:
01:72:b7:d9:66:cb:6b:2f:46:bc:de:a7:c4:c9:8d:bd:24:3f:
dd:56:de:51:7e:0e:eb:d2:26:3a:6f:18:74:b6:20:f1:27:74:
df:a8:58:8d:00:23:6c:2b:39:42:44:c8:4c:e9:94:1e:50:2e:
fa:a2:eb:19:b8:04:4c:04:94:44:d5:44:23:a4:91:0c:53:ef:
41:c1:ba:76:c7:a0:39:ca:c0:82:c4:55:40:9b:e1:a6:92:45:
e3:b6:3b:f0:b7:47:c5:f4:07:28:8a:33:ee:dd:60:f6:ae:cb:
df:68:f1:56:28:bb:f7:1a:55:ac:13:77:91:64:c8:5c:c5:be:
e2:b4:58:1c:c8:87:1e:58:04:60:5a:80:a5:7f:51:86:87:e5:
7e:ca:7e:67:63:35:1c:34:44:99:dc:57:83:ca:08:e4:31:18:
8e:56:c8:d5:d1:b8:20:b9:ee:e1:03:70:16:58:14:a9:f6:48:
8f:c6:57:20:54:8c:44:53:53:83:a4:7e:a0:bc:1e:9a:be:3c:
7f:74:0e:f3:5f:c3:99:9a:bd:a3:d8:a8:bc:08:35:8f:ea:a8:
86:2a:8c:e9:4f:b4:f6:71:f4:08:d2:45:2a:6d:e7:ac:8f:c5:
eb:76:bc:dc
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQhskICGBlqRae/w6EyuhlvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmMTU2ZTY5Zjk0NDRjMmIwNjY4NzI1NjA4NWI2YTdhNGU5
ODg3ZjYwHhcNMjUwMTAxMTE0ODM3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MDQzNjcwNGMwZmIwODU5ZTkwZGVlZjc3MDZhMmY1YzFlOWM3YjA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFtyDczkIET7BHzd+vKCA2bD6F9f
FPRF5N+k3pUctt0azo0198J8zdAiQsSCbjMn/jn5xoILSZu9k7BVbQBKoVAr/WPe
o/j2dipVMZoicy3AUcSmu14OMc5OsT0zolW4hxifLq5JBYRkhecl6d+oc1cSfUKz
66S5RdViMzSiLGyB4MAUsYqgQHxiT2zuvP96ZnqR0NO14zTn6D8EglXINZbnPKXM
jc2lAcSoKmi1DuSKFB0PniB4UyLQk3U+tL0ceoWtns4YRRlC39d+Z2/rS6RvFpog
UQYn4q2CumRT+LsPI9UBoVs6YbEo3SVGn0hXZSFHcFziHUDDfSA+QyVxEQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFIBDZwTA+whZ6Q3u93BqL1wenHsIMB8GA1UdIwQY
MBaAFI8Vbmn5REwrBmhyVghbanpOmIf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanhWdWFmbEVUQ3NHYUhKV0NGdHFlazZZaF9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85YjgxZmUtNjdkMi00OTQ4LWI0YjEt
MmI3ODViNzJiNGY0LzEvZ0VObkJNRDdDRm5wRGU3M2NHb3ZYQjZjZXdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS85YjgxZmUtNjdkMi00OTQ4LWI0YjEtMmI3ODViNzJiNGY0
LzEvanhWdWFmbEVUQ3NHYUhKV0NGdHFlazZZaF9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCW+aIMA8E
AgACMAkDBwAgAQZ8K4gwDQYJKoZIhvcNAQELBQADggEBABor+wznneNv2EY2XXjD
oIsHygFyt9lmy2svRrzep8TJjb0kP91W3lF+DuvSJjpvGHS2IPEndN+oWI0AI2wr
OUJEyEzplB5QLvqi6xm4BEwElETVRCOkkQxT70HBunbHoDnKwILEVUCb4aaSReO2
O/C3R8X0ByiKM+7dYPauy99o8VYou/caVawTd5FkyFzFvuK0WBzIhx5YBGBagKV/
UYaH5X7KfmdjNRw0RJncV4PKCOQxGI5WyNXRuCC57uEDcBZYFKn2SI/GVyBUjERT
U4OkfqC8Hpq+PH90DvNfw5mavaPYqLwINY/qqIYqjOlPtPZx9AjSRSpt56yPxet2
vNw=
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:18:01 2025 by rpki-client