Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/Tadh_qpMdGoIN33tMjbACuKsZOE.roa
File: Tadh_qpMdGoIN33tMjbACuKsZOE.roa (raw, json)
Hash identifier: 9pXxqdk2JpjcdUH8kyShVqd2tJEpgHvO7OyF9bO5c78=
Subject key identifier: 4D:A7:61:FE:AA:4C:74:6A:08:37:7D:ED:32:36:C0:0A:E2:AC:64:E1
Certificate issuer: /CN=5ff6ea802307bc53bff3cbb63e9f8179ac4c1e39
Certificate serial: 0194266BE33D7DBF67053ECBC6A912EF943C
Authority key identifier: 5F:F6:EA:80:23:07:BC:53:BF:F3:CB:B6:3E:9F:81:79:AC:4C:1E:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/Tadh_qpMdGoIN33tMjbACuKsZOE.roa
Signing time: Thu 02 Jan 2025 09:49:52 +0000
ROA not before: Thu 02 Jan 2025 09:49:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57982
IP address blocks: 91.237.108.0/24 maxlen: 24
91.237.109.0/24 maxlen: 24
91.237.110.0/24 maxlen: 24
91.237.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:e3:3d:7d:bf:67:05:3e:cb:c6:a9:12:ef:94:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ff6ea802307bc53bff3cbb63e9f8179ac4c1e39
Validity
Not Before: Jan 2 09:49:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4da761feaa4c746a08377ded3236c00ae2ac64e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:58:21:83:a8:d2:a4:8f:b2:a5:9b:d7:e9:8b:
e5:56:c2:91:ca:f5:d9:ad:fa:6c:51:cd:9e:57:a1:
f2:d5:2e:ed:09:75:12:d5:57:25:e1:3a:c6:cf:03:
c5:13:b1:18:84:3b:6e:e9:e5:22:ab:4f:c0:c5:6e:
b9:52:1a:2a:9b:56:a9:e5:ff:12:91:74:a5:3e:af:
74:b4:e8:2e:4f:1c:84:cd:65:d3:8e:c6:42:0f:12:
5d:97:b6:9b:d4:00:38:6b:58:96:44:82:1e:a9:a8:
db:a7:0f:88:45:62:b4:bf:b5:09:e2:b1:b9:33:0b:
1d:c8:8f:44:6d:2f:3f:07:84:25:60:43:a3:a3:6a:
2b:03:4b:35:a3:fa:d2:dc:ae:67:15:6a:ca:03:a7:
2a:43:6d:30:46:d1:be:37:95:35:ce:b8:81:3e:2c:
f9:38:30:0e:16:d1:c2:3d:43:06:63:f5:a2:95:3b:
fe:d4:68:3a:ca:86:f8:2e:d1:cc:e7:32:46:a4:9a:
f8:92:05:81:e8:40:cb:6f:c8:5b:95:8b:0e:bb:7a:
59:d9:83:1a:72:63:61:fc:28:ee:6f:15:5c:c0:24:
30:c5:c8:52:5c:2f:58:0e:d0:3f:d6:2d:56:23:b5:
41:bf:fb:e8:7f:fd:71:2a:b2:5a:92:ff:a5:4b:c3:
5a:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:A7:61:FE:AA:4C:74:6A:08:37:7D:ED:32:36:C0:0A:E2:AC:64:E1
X509v3 Authority Key Identifier:
keyid:5F:F6:EA:80:23:07:BC:53:BF:F3:CB:B6:3E:9F:81:79:AC:4C:1E:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X_bqgCMHvFO_88u2Pp-BeaxMHjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/Tadh_qpMdGoIN33tMjbACuKsZOE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c43505-b306-4941-b7c6-583823847952/1/X_bqgCMHvFO_88u2Pp-BeaxMHjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.108.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:82:7a:c9:e0:22:4a:19:ea:46:c6:f2:8e:5d:3c:60:97:20:
0d:ae:42:3d:33:b9:c0:d9:50:7e:ef:76:15:5b:5a:38:64:59:
0b:4f:5c:29:b3:24:06:3f:58:e7:86:6d:65:44:90:48:71:f0:
ae:3c:28:07:54:69:fd:07:8e:64:27:39:13:28:d9:b2:ce:90:
10:bd:ab:60:cb:70:b9:6a:c1:f4:61:a5:cf:ea:8a:17:bb:4c:
35:1d:e0:d2:0d:98:90:ce:ee:64:41:5f:12:dc:e2:46:9e:8b:
52:6a:06:1f:3c:57:aa:a1:b8:7a:fd:eb:83:bf:8d:99:9b:00:
60:bc:1e:e5:3a:58:80:b6:a7:32:e5:4f:9f:7b:5c:4b:41:ba:
fa:67:72:79:59:b0:a5:05:a6:15:72:e6:8d:9f:82:ed:45:90:
07:aa:1b:fd:f2:7d:59:93:c3:50:54:bd:a7:62:ec:ad:85:09:
61:57:ca:ce:ff:92:23:b7:30:db:c6:5e:d3:63:bb:f7:9f:ea:
4b:49:42:98:2a:a5:0a:e1:93:75:32:51:ec:d4:c6:7d:2e:a7:
5f:88:e1:6a:cb:91:1f:c2:e5:a0:ea:22:ec:48:02:7a:a1:aa:
eb:3d:d7:a1:c2:70:5b:35:71:b2:37:72:d8:23:35:18:65:ec:
08:71:bc:29
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma+M9fb9nBT7LxqkS75Q8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZjZlYTgwMjMwN2JjNTNiZmYzY2JiNjNlOWY4MTc5YWM0
YzFlMzkwHhcNMjUwMTAyMDk0OTUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0ZGE3NjFmZWFhNGM3NDZhMDgzNzdkZWQzMjM2YzAwYWUyYWM2NGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplghg6jSpI+ypZvX6YvlVsKRyvXZ
rfpsUc2eV6Hy1S7tCXUS1Vcl4TrGzwPFE7EYhDtu6eUiq0/AxW65Uhoqm1ap5f8S
kXSlPq90tOguTxyEzWXTjsZCDxJdl7ab1AA4a1iWRIIeqajbpw+IRWK0v7UJ4rG5
MwsdyI9EbS8/B4QlYEOjo2orA0s1o/rS3K5nFWrKA6cqQ20wRtG+N5U1zriBPiz5
ODAOFtHCPUMGY/WilTv+1Gg6yob4LtHM5zJGpJr4kgWB6EDLb8hblYsOu3pZ2YMa
cmNh/CjubxVcwCQwxchSXC9YDtA/1i1WI7VBv/vof/1xKrJakv+lS8NaSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFE2nYf6qTHRqCDd97TI2wArirGThMB8GA1UdIwQY
MBaAFF/26oAjB7xTv/PLtj6fgXmsTB45MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWF9icWdDTUh2Rk9fODh1MlBwLUJlYXhNSGprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9jNDM1MDUtYjMwNi00OTQxLWI3YzYt
NTgzODIzODQ3OTUyLzEvVGFkaF9xcE1kR29JTjMzdE1qYkFDdUtzWk9FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9jNDM1MDUtYjMwNi00OTQxLWI3YzYtNTgzODIzODQ3OTUy
LzEvWF9icWdDTUh2Rk9fODh1MlBwLUJlYXhNSGprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+1sMA0G
CSqGSIb3DQEBCwUAA4IBAQCKgnrJ4CJKGepGxvKOXTxglyANrkI9M7nA2VB+73YV
W1o4ZFkLT1wpsyQGP1jnhm1lRJBIcfCuPCgHVGn9B45kJzkTKNmyzpAQvatgy3C5
asH0YaXP6ooXu0w1HeDSDZiQzu5kQV8S3OJGnotSagYfPFeqobh6/euDv42ZmwBg
vB7lOliAtqcy5U+fe1xLQbr6Z3J5WbClBaYVcuaNn4LtRZAHqhv98n1Zk8NQVL2n
YuythQlhV8rO/5IjtzDbxl7TY7v3n+pLSUKYKqUK4ZN1MlHs1MZ9LqdfiOFqy5Ef
wuWg6iLsSAJ6oarrPdehwnBbNXGyN3LYIzUYZewIcbwp
-----END CERTIFICATE-----
Generated at Fri Feb 21 13:05:22 2025 by rpki-client