Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/cekUNXzTWTu4gnxTXJJQQyW61Cg.roa
File: cekUNXzTWTu4gnxTXJJQQyW61Cg.roa (raw, json)
Hash identifier: ZDt6OkPV5Ex3Yi3FM3u0/RzjrLejRDKeTGQEGbNL8iA=
Subject key identifier: 71:E9:14:35:7C:D3:59:3B:B8:82:7C:53:5C:92:50:43:25:BA:D4:28
Certificate issuer: /CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Certificate serial: 019427B4F4EE7ACF34238030FC1E3A289784
Authority key identifier: 36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/cekUNXzTWTu4gnxTXJJQQyW61Cg.roa
Signing time: Thu 02 Jan 2025 15:49:18 +0000
ROA not before: Thu 02 Jan 2025 15:49:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205485
IP address blocks: 91.226.96.0/24 maxlen: 24
185.216.180.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b4:f4:ee:7a:cf:34:23:80:30:fc:1e:3a:28:97:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cfaffc9c7868708f3c81ee5c0d64c35ac1bef1
Validity
Not Before: Jan 2 15:49:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=71e914357cd3593bb8827c535c92504325bad428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d2:5b:8a:18:6d:1a:60:5a:e4:7e:a8:8d:23:
c2:37:e9:4d:9d:43:cf:73:73:e6:7b:2b:38:24:bb:
93:9e:88:dd:aa:28:ae:20:a9:c3:16:6a:62:93:ff:
c3:ea:51:26:cc:d5:22:84:d5:f8:09:63:d5:cc:b4:
bf:12:b1:97:b8:88:36:8e:83:d9:c9:9c:b4:45:bd:
31:60:0e:f5:33:92:d0:b5:7c:35:b1:ab:bc:53:3c:
4f:2c:5a:2f:b9:ba:5d:d6:79:6a:52:cf:0c:42:aa:
87:2f:1e:a0:3c:76:e7:7f:24:71:0a:6c:5e:f3:05:
49:d1:df:a9:e9:cf:cf:2b:82:72:72:c0:2b:cf:0b:
92:75:94:d6:c3:33:2e:77:b4:f1:dd:39:7d:c1:73:
32:de:b8:2a:ac:62:d1:17:58:a7:c8:f7:bf:f1:90:
ac:f1:15:79:6c:69:e8:a9:5f:e2:bd:37:f3:56:01:
25:ec:cd:1e:aa:df:b6:4f:a8:da:54:6e:0d:a5:e5:
03:17:62:a6:a3:49:c5:2a:05:ee:4e:da:b5:53:13:
8e:d0:3f:2f:43:01:0a:0a:54:eb:2d:c7:ab:6e:72:
c6:54:bf:ed:fd:1b:4a:53:f4:9f:b2:ff:bb:4a:de:
8c:b0:59:4a:22:d5:c0:d1:f3:92:06:98:97:df:aa:
0d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E9:14:35:7C:D3:59:3B:B8:82:7C:53:5C:92:50:43:25:BA:D4:28
X509v3 Authority Key Identifier:
keyid:36:CF:AF:FC:9C:78:68:70:8F:3C:81:EE:5C:0D:64:C3:5A:C1:BE:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/cekUNXzTWTu4gnxTXJJQQyW61Cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d09b56-4fcb-47bf-8025-99878cc9b14c/1/Ns-v_Jx4aHCPPIHuXA1kw1rBvvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.96.0/24
185.216.180.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:1d:11:1b:e9:f8:16:37:02:43:91:63:4f:63:fd:e2:d9:0e:
77:be:d1:34:7b:a7:cb:a2:b4:1b:36:e4:e8:8f:f1:40:ad:fe:
e1:14:88:aa:4c:f0:ba:fc:97:3d:9c:0c:73:a1:5e:6c:0f:da:
f0:ca:f2:02:14:96:ab:bd:07:8d:51:68:21:c1:e5:d4:9d:4c:
ed:60:fa:3e:75:12:12:9a:55:4a:52:a2:54:a2:7a:0e:6a:64:
32:4a:dd:02:28:25:c2:3f:4c:f9:18:a5:9c:34:83:b8:81:e9:
da:a2:c4:13:bb:7f:d1:24:92:cb:bf:b3:04:99:f1:18:59:5d:
e2:36:05:4d:74:fc:55:39:66:d5:cd:a7:a6:62:70:2f:40:8a:
a9:18:29:1d:fa:ef:0d:ef:1b:38:eb:91:59:0e:3c:da:eb:a1:
1b:03:61:39:4e:a7:81:43:0a:2c:ea:b4:e7:d8:67:cb:38:b2:
39:fd:b0:99:f7:ba:95:27:50:df:df:fa:54:0f:35:5d:08:6e:
00:5f:7b:dc:cb:37:c5:2b:87:e9:37:f7:5f:15:a0:b7:47:45:
0a:01:26:10:0e:a7:dc:82:b8:87:72:92:ea:2e:d2:b6:9e:e1:
55:15:9e:78:33:9c:dd:bc:38:f4:1d:7a:f8:cf:21:ae:37:05:
01:3e:41:1b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQntPTues80I4Aw/B46KJeEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2Y2ZhZmZjOWM3ODY4NzA4ZjNjODFlZTVjMGQ2NGMzNWFj
MWJlZjEwHhcNMjUwMTAyMTU0OTE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MWU5MTQzNTdjZDM1OTNiYjg4MjdjNTM1YzkyNTA0MzI1YmFkNDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAytJbihhtGmBa5H6ojSPCN+lNnUPP
c3Pmeys4JLuTnojdqiiuIKnDFmpik//D6lEmzNUihNX4CWPVzLS/ErGXuIg2joPZ
yZy0Rb0xYA71M5LQtXw1sau8UzxPLFovubpd1nlqUs8MQqqHLx6gPHbnfyRxCmxe
8wVJ0d+p6c/PK4JycsArzwuSdZTWwzMud7Tx3Tl9wXMy3rgqrGLRF1inyPe/8ZCs
8RV5bGnoqV/ivTfzVgEl7M0eqt+2T6jaVG4NpeUDF2Kmo0nFKgXuTtq1UxOO0D8v
QwEKClTrLcerbnLGVL/t/RtKU/Sfsv+7St6MsFlKItXA0fOSBpiX36oNEQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFHHpFDV801k7uIJ8U1ySUEMlutQoMB8GA1UdIwQY
MBaAFDbPr/yceGhwjzyB7lwNZMNawb7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnMtdl9KeDRhSENQUElIdVhBMWt3MXJCdnZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kMDliNTYtNGZjYi00N2JmLTgwMjUt
OTk4NzhjYzliMTRjLzEvY2VrVU5YelRXVHU0Z254VFhKSlFReVc2MUNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kMDliNTYtNGZjYi00N2JmLTgwMjUtOTk4NzhjYzliMTRj
LzEvTnMtdl9KeDRhSENQUElIdVhBMWt3MXJCdnZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW+JgAwQB
udi0MA0GCSqGSIb3DQEBCwUAA4IBAQBLHREb6fgWNwJDkWNPY/3i2Q53vtE0e6fL
orQbNuToj/FArf7hFIiqTPC6/Jc9nAxzoV5sD9rwyvICFJarvQeNUWghweXUnUzt
YPo+dRISmlVKUqJUonoOamQySt0CKCXCP0z5GKWcNIO4genaosQTu3/RJJLLv7ME
mfEYWV3iNgVNdPxVOWbVzaemYnAvQIqpGCkd+u8N7xs465FZDjza66EbA2E5TqeB
Qwos6rTn2GfLOLI5/bCZ97qVJ1Df3/pUDzVdCG4AX3vcyzfFK4fpN/dfFaC3R0UK
ASYQDqfcgriHcpLqLtK2nuFVFZ54M5zdvDj0HXr4zyGuNwUBPkEb
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:19 2025 by rpki-client