Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/47NYg-phdSB9NeK2va9JIKsAb5A.roa
File: 47NYg-phdSB9NeK2va9JIKsAb5A.roa (raw, json)
Hash identifier: 86ZHiVMTfTtd+skHx8yHsEGyhHphyGuDVxjbPZ3RryU=
Subject key identifier: E3:B3:58:83:EA:61:75:20:7D:35:E2:B6:BD:AF:49:20:AB:00:6F:90
Certificate issuer: /CN=64f873adb6a1f3e81b3343c74998947526c43dcf
Certificate serial: 0194222021ADD2DCE8F835FEFCE555D7879D
Authority key identifier: 64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/47NYg-phdSB9NeK2va9JIKsAb5A.roa
Signing time: Wed 01 Jan 2025 13:48:38 +0000
ROA not before: Wed 01 Jan 2025 13:48:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61234
IP address blocks: 91.198.224.0/24 maxlen: 24
194.145.224.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:21:ad:d2:dc:e8:f8:35:fe:fc:e5:55:d7:87:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64f873adb6a1f3e81b3343c74998947526c43dcf
Validity
Not Before: Jan 1 13:48:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e3b35883ea6175207d35e2b6bdaf4920ab006f90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:49:21:e4:44:ff:ac:1d:d9:5a:de:6c:44:a0:
27:bc:6b:3c:f3:09:3b:6e:2b:7a:d6:97:c7:2d:08:
41:f5:d3:00:cd:8b:4d:15:c8:81:0c:0d:b7:ea:83:
88:d7:09:7f:15:6f:ad:c8:8c:6c:1a:1d:1e:a4:da:
ec:4e:fb:b7:18:2c:cf:36:0a:94:cb:8c:f6:15:8d:
fc:a6:83:dd:41:39:a4:37:d9:9f:d8:ad:b4:9f:9f:
16:3a:0d:b6:94:7a:28:10:23:e4:2d:f5:11:d4:b1:
b3:af:f9:1d:50:9d:46:75:44:2f:63:97:91:00:75:
68:15:6c:d5:b2:c3:61:ac:73:da:c3:b3:90:4d:14:
18:e2:94:f4:90:e0:85:fb:2e:65:84:f7:71:ed:bb:
cb:31:2f:da:b4:b6:0a:96:83:f8:6b:a2:50:01:44:
ef:c0:90:0d:a8:81:0a:32:35:d9:e1:4f:f8:1c:3f:
da:e8:bc:e9:b7:fa:24:47:0a:50:b4:d3:a3:07:15:
a5:ae:61:43:00:af:d0:d7:30:04:86:11:36:a9:6b:
01:50:c9:cc:bb:36:80:12:f9:94:77:31:8d:2b:50:
b5:da:fb:22:ce:9d:7e:c9:74:01:d0:85:3e:f2:d5:
e2:1a:e7:c3:8c:49:3a:23:ca:18:1e:6d:1b:08:a1:
a7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B3:58:83:EA:61:75:20:7D:35:E2:B6:BD:AF:49:20:AB:00:6F:90
X509v3 Authority Key Identifier:
keyid:64:F8:73:AD:B6:A1:F3:E8:1B:33:43:C7:49:98:94:75:26:C4:3D:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZPhzrbah8-gbM0PHSZiUdSbEPc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/47NYg-phdSB9NeK2va9JIKsAb5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/b9e4c4-a3dc-46e8-aa3e-397f36c91982/1/ZPhzrbah8-gbM0PHSZiUdSbEPc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.224.0/24
194.145.224.0/24
Signature Algorithm: sha256WithRSAEncryption
07:9e:2c:96:60:ac:aa:0e:96:f2:2b:59:65:0d:fd:3d:f5:99:
ca:c2:b1:29:34:75:01:a7:db:47:ba:e9:ba:36:8d:a6:e7:91:
e2:5d:51:90:d2:e1:ad:d4:c3:28:52:44:2c:98:e8:5d:d4:3e:
7b:3b:6a:a0:85:a3:16:38:4f:ae:b0:72:dc:9d:03:1b:c4:38:
67:7b:44:20:b7:5f:af:51:3d:e0:f3:7a:b9:1e:d7:b9:c0:3b:
ea:a1:b8:e4:a7:a7:95:3c:a5:63:68:85:85:a6:8f:05:58:c3:
19:56:d4:44:f8:18:56:e9:b7:ca:3f:34:9f:be:c7:f6:79:75:
7e:02:4e:6c:e1:a0:c8:6e:7b:88:ca:48:0f:e7:2e:d1:0b:bd:
81:ee:77:98:b1:6f:fb:ca:5a:b8:e8:04:bd:ac:ec:fa:fd:34:
4e:1a:73:65:2b:85:1c:76:62:88:08:5c:12:35:6e:89:01:15:
d0:4c:75:61:95:2a:d4:52:6e:15:ef:23:44:69:ec:aa:69:8c:
97:eb:e6:79:22:cf:46:3a:11:c2:26:bc:a0:d2:82:47:b3:27:
28:2f:76:b3:c4:8f:51:d3:78:8e:af:93:90:93:b1:8c:d5:c2:
f4:4f:15:12:98:a6:b0:cc:06:d9:01:66:12:98:f3:2a:82:85:
10:8d:28:37
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQiICGt0tzo+DX+/OVV14edMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0Zjg3M2FkYjZhMWYzZTgxYjMzNDNjNzQ5OTg5NDc1MjZj
NDNkY2YwHhcNMjUwMTAxMTM0ODM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlM2IzNTg4M2VhNjE3NTIwN2QzNWUyYjZiZGFmNDkyMGFiMDA2ZjkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ukh5ET/rB3ZWt5sRKAnvGs88wk7
bit61pfHLQhB9dMAzYtNFciBDA236oOI1wl/FW+tyIxsGh0epNrsTvu3GCzPNgqU
y4z2FY38poPdQTmkN9mf2K20n58WOg22lHooECPkLfUR1LGzr/kdUJ1GdUQvY5eR
AHVoFWzVssNhrHPaw7OQTRQY4pT0kOCF+y5lhPdx7bvLMS/atLYKloP4a6JQAUTv
wJANqIEKMjXZ4U/4HD/a6Lzpt/okRwpQtNOjBxWlrmFDAK/Q1zAEhhE2qWsBUMnM
uzaAEvmUdzGNK1C12vsizp1+yXQB0IU+8tXiGufDjEk6I8oYHm0bCKGntQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFOOzWIPqYXUgfTXitr2vSSCrAG+QMB8GA1UdIwQY
MBaAFGT4c622ofPoGzNDx0mYlHUmxD3PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWlBoenJiYWg4LWdiTTBQSFNaaVVkU2JFUGM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9iOWU0YzQtYTNkYy00NmU4LWFhM2Ut
Mzk3ZjM2YzkxOTgyLzEvNDdOWWctcGhkU0I5TmVLMnZhOUpJS3NBYjVBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9iOWU0YzQtYTNkYy00NmU4LWFhM2UtMzk3ZjM2YzkxOTgy
LzEvWlBoenJiYWg4LWdiTTBQSFNaaVVkU2JFUGM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW8bgAwQA
wpHgMA0GCSqGSIb3DQEBCwUAA4IBAQAHniyWYKyqDpbyK1llDf099ZnKwrEpNHUB
p9tHuum6No2m55HiXVGQ0uGt1MMoUkQsmOhd1D57O2qghaMWOE+usHLcnQMbxDhn
e0Qgt1+vUT3g83q5Hte5wDvqobjkp6eVPKVjaIWFpo8FWMMZVtRE+BhW6bfKPzSf
vsf2eXV+Ak5s4aDIbnuIykgP5y7RC72B7neYsW/7ylq46AS9rOz6/TROGnNlK4Uc
dmKICFwSNW6JARXQTHVhlSrUUm4V7yNEaeyqaYyX6+Z5Is9GOhHCJryg0oJHsyco
L3azxI9R03iOr5OQk7GM1cL0TxUSmKawzAbZAWYSmPMqgoUQjSg3
-----END CERTIFICATE-----
Generated at Mon Apr 7 02:32:13 2025 by rpki-client