Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/MB4mJk4DQQ-TwR_zoUwWbMeoChc.roa
File: MB4mJk4DQQ-TwR_zoUwWbMeoChc.roa (raw, json)
Hash identifier: NNjLxmrpa1rq3GDE39kT0oR3jmzamYw0y/r2x6zTL4w=
Subject key identifier: 30:1E:26:26:4E:03:41:0F:93:C1:1F:F3:A1:4C:16:6C:C7:A8:0A:17
Certificate issuer: /CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Certificate serial: 0193D3D52AE93D99AB1C7AF2674FAA155279
Authority key identifier: F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/MB4mJk4DQQ-TwR_zoUwWbMeoChc.roa
Signing time: Tue 17 Dec 2024 08:56:22 +0000
ROA not before: Tue 17 Dec 2024 08:56:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49367
IP address blocks: 91.199.211.0/24 maxlen: 24
91.199.223.0/24 maxlen: 24
91.199.248.0/24 maxlen: 24
91.203.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:d3:d5:2a:e9:3d:99:ab:1c:7a:f2:67:4f:aa:15:52:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f17f6957fc23b8d46b9d3dc8bc7db122859876f0
Validity
Not Before: Dec 17 08:56:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=301e26264e03410f93c11ff3a14c166cc7a80a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6a:04:d8:fe:7b:ea:18:75:7a:d6:3f:78:50:
e8:e7:29:c1:87:8a:60:52:ca:d9:95:dd:2e:75:33:
39:ac:1e:cf:6d:ec:6c:75:42:f9:79:52:68:6b:36:
91:ee:22:f3:a1:e0:2c:9e:17:ab:2f:01:6f:d7:51:
17:83:84:d4:2b:ec:0c:f3:7b:1d:6b:0e:87:7c:1f:
93:57:2f:fc:bd:01:f4:85:54:1c:50:f5:41:57:f3:
e5:90:82:b5:61:5f:8e:38:ff:de:de:c3:4e:cb:34:
70:2e:a8:0a:21:e3:15:91:08:39:16:62:44:81:68:
e1:2a:6e:52:7e:3d:53:49:d3:44:3a:d5:f6:b0:5b:
1c:36:14:9e:6a:c4:fc:2c:73:21:97:ff:97:0b:f7:
93:0c:b0:d2:45:8a:a4:a0:20:53:f7:a6:64:4a:2b:
ae:f8:57:c8:17:81:9d:c0:8b:84:9e:0b:45:ba:8a:
c4:69:ac:dd:a5:bf:2f:de:7a:b7:eb:bc:d6:b6:65:
4d:da:19:8d:09:fd:0f:53:a2:3b:96:2c:37:fb:ef:
24:dc:5e:f0:8d:2a:42:c6:8d:63:1f:c7:c1:b6:47:
98:61:c1:b6:ca:4b:12:c3:95:b5:dd:53:84:e3:f6:
14:29:70:60:e8:94:3e:89:d2:68:a3:ab:0c:aa:49:
82:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1E:26:26:4E:03:41:0F:93:C1:1F:F3:A1:4C:16:6C:C7:A8:0A:17
X509v3 Authority Key Identifier:
keyid:F1:7F:69:57:FC:23:B8:D4:6B:9D:3D:C8:BC:7D:B1:22:85:98:76:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8X9pV_wjuNRrnT3IvH2xIoWYdvA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/MB4mJk4DQQ-TwR_zoUwWbMeoChc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2026d3-9f33-463e-8410-726da4e9386b/1/8X9pV_wjuNRrnT3IvH2xIoWYdvA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.211.0/24
91.199.223.0/24
91.199.248.0/24
91.203.220.0/24
Signature Algorithm: sha256WithRSAEncryption
67:57:36:4b:d8:de:52:53:5e:7e:ed:2f:72:c7:42:ea:96:99:
1c:f8:b1:73:0c:90:51:73:0a:9a:ac:58:06:4a:5a:2a:05:81:
6f:c3:0c:fc:4f:53:b1:06:77:87:30:97:cd:96:1e:08:1f:30:
65:41:a2:f3:f4:57:e0:d6:55:0c:20:1c:5a:cd:19:d9:37:fb:
83:14:4a:81:8f:26:b1:cf:71:e9:29:6f:32:bf:d4:c6:61:2d:
9d:d5:b0:e5:77:f7:37:87:4b:4b:42:65:bc:31:9c:78:31:49:
e6:9b:46:92:31:aa:bb:82:83:d0:77:83:f8:18:7b:38:41:ca:
6e:5a:0e:3d:2c:53:2c:25:89:51:b7:f1:fb:d3:d2:46:76:14:
31:47:69:82:4f:b0:a9:9a:c0:fa:7c:8d:22:cd:43:d6:16:c5:
13:d7:65:72:6c:1c:f7:95:f3:dc:f9:ee:e3:a4:85:ef:5d:72:
81:a1:52:a0:e1:ee:00:34:67:61:3b:81:30:bb:2b:d7:2a:36:
63:20:4b:ee:21:d8:23:d3:a9:a4:3c:77:60:1f:37:de:e9:34:
bb:bf:b3:6d:70:ee:33:57:83:8d:bc:41:69:27:e7:1a:ef:61:
d0:b0:d8:f8:ef:56:5c:02:0f:dc:94:6b:0b:f9:cc:9d:b4:cf:
96:2c:9a:6e
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZPT1SrpPZmrHHryZ0+qFVJ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxN2Y2OTU3ZmMyM2I4ZDQ2YjlkM2RjOGJjN2RiMTIyODU5
ODc2ZjAwHhcNMjQxMjE3MDg1NjIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMDFlMjYyNjRlMDM0MTBmOTNjMTFmZjNhMTRjMTY2Y2M3YTgwYTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2oE2P576hh1etY/eFDo5ynBh4pg
UsrZld0udTM5rB7PbexsdUL5eVJoazaR7iLzoeAsnherLwFv11EXg4TUK+wM83sd
aw6HfB+TVy/8vQH0hVQcUPVBV/PlkIK1YV+OOP/e3sNOyzRwLqgKIeMVkQg5FmJE
gWjhKm5Sfj1TSdNEOtX2sFscNhSeasT8LHMhl/+XC/eTDLDSRYqkoCBT96ZkSiuu
+FfIF4GdwIuEngtFuorEaazdpb8v3nq367zWtmVN2hmNCf0PU6I7liw3++8k3F7w
jSpCxo1jH8fBtkeYYcG2yksSw5W13VOE4/YUKXBg6JQ+idJoo6sMqkmCnwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFDAeJiZOA0EPk8Ef86FMFmzHqAoXMB8GA1UdIwQY
MBaAFPF/aVf8I7jUa509yLx9sSKFmHbwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFg5cFZfd2p1TlJyblQzSXZIMnhJb1dZZHZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny8yMDI2ZDMtOWYzMy00NjNlLTg0MTAt
NzI2ZGE0ZTkzODZiLzEvTUI0bUprNERRUS1Ud1Jfem9Vd1diTWVvQ2hjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny8yMDI2ZDMtOWYzMy00NjNlLTg0MTAtNzI2ZGE0ZTkzODZi
LzEvOFg5cFZfd2p1TlJyblQzSXZIMnhJb1dZZHZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAW8fTAwQA
W8ffAwQAW8f4AwQAW8vcMA0GCSqGSIb3DQEBCwUAA4IBAQBnVzZL2N5SU15+7S9y
x0Lqlpkc+LFzDJBRcwqarFgGSloqBYFvwwz8T1OxBneHMJfNlh4IHzBlQaLz9Ffg
1lUMIBxazRnZN/uDFEqBjyaxz3HpKW8yv9TGYS2d1bDld/c3h0tLQmW8MZx4MUnm
m0aSMaq7goPQd4P4GHs4QcpuWg49LFMsJYlRt/H709JGdhQxR2mCT7CpmsD6fI0i
zUPWFsUT12VybBz3lfPc+e7jpIXvXXKBoVKg4e4ANGdhO4EwuyvXKjZjIEvuIdgj
06mkPHdgHzfe6TS7v7NtcO4zV4ONvEFpJ+ca72HQsNj471ZcAg/clGsL+cydtM+W
LJpu
-----END CERTIFICATE-----
Generated at Tue Apr 8 05:37:33 2025 by rpki-client