Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/ueb8jWjZsgheztsTNqHl1-Lrnro.roa
File: ueb8jWjZsgheztsTNqHl1-Lrnro.roa (raw, json)
Hash identifier: bi/jdKM4OGa/0sgftxqgBQAErRWTNtYfIJIP4pXeceo=
Subject key identifier: B9:E6:FC:8D:68:D9:B2:08:5E:CE:DB:13:36:A1:E5:D7:E2:EB:9E:BA
Certificate issuer: /CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
Certificate serial: 0194221F4518C8A44642C81A0AE4B6ACFDA7
Authority key identifier: 31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/ueb8jWjZsgheztsTNqHl1-Lrnro.roa
Signing time: Wed 01 Jan 2025 13:47:42 +0000
ROA not before: Wed 01 Jan 2025 13:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61051
IP address blocks: 91.209.46.0/24 maxlen: 24
2a05:f540::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:45:18:c8:a4:46:42:c8:1a:0a:e4:b6:ac:fd:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=316f433bb4cedd72d86c44ed8599903522b5e4f1
Validity
Not Before: Jan 1 13:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9e6fc8d68d9b2085ecedb1336a1e5d7e2eb9eba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:09:98:1f:80:74:ac:6e:aa:ce:c9:5c:11:c7:
1f:90:39:9d:44:2d:45:7c:86:a1:c9:2f:e6:ae:4c:
fd:d4:76:05:d7:2d:94:f9:be:5a:40:5a:ec:a0:43:
d6:ac:b7:96:0b:c7:a1:fb:0d:fd:fe:99:5a:82:1c:
09:4b:52:61:b0:ad:c3:32:bd:80:ee:2c:84:7d:56:
76:af:61:28:9c:7b:93:5c:ea:bc:73:94:57:e4:01:
d2:40:30:ce:b5:05:2e:f4:e0:90:93:4c:4f:ff:c4:
8a:97:90:c6:6e:47:2e:d9:94:68:e2:ed:6c:cf:33:
81:6d:d5:6c:1c:d6:3d:8c:3e:cc:3b:3f:52:4e:d8:
4f:72:49:c7:2a:02:d5:c5:9b:9e:51:92:30:56:72:
45:1e:d4:31:da:cd:cd:c6:b7:18:12:f5:23:67:1e:
a8:fb:82:75:6b:4e:91:15:1a:4b:77:13:53:47:fb:
6d:bd:96:d4:43:d8:d4:db:0b:52:36:fb:26:cc:6e:
3f:76:68:71:dc:2a:10:b5:4e:df:7d:d4:7f:f5:57:
99:f9:c6:3b:d4:e7:05:cb:85:b0:5a:8f:83:a1:fa:
f5:e1:b3:f0:2f:d6:72:35:ea:2a:f6:4a:f9:87:7a:
ed:d4:02:ed:96:93:f0:5a:a5:0f:d3:a7:02:14:bd:
a8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E6:FC:8D:68:D9:B2:08:5E:CE:DB:13:36:A1:E5:D7:E2:EB:9E:BA
X509v3 Authority Key Identifier:
keyid:31:6F:43:3B:B4:CE:DD:72:D8:6C:44:ED:85:99:90:35:22:B5:E4:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MW9DO7TO3XLYbETthZmQNSK15PE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/ueb8jWjZsgheztsTNqHl1-Lrnro.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/73c829-1518-4d41-92c2-7e0ab8bcae89/1/MW9DO7TO3XLYbETthZmQNSK15PE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.46.0/24
IPv6:
2a05:f540::/29
Signature Algorithm: sha256WithRSAEncryption
6e:68:ef:55:1c:95:8c:3f:85:24:aa:ac:a0:51:a6:35:04:26:
07:34:d8:ea:0f:72:fc:d5:a1:d9:bf:2f:f8:be:78:00:a3:4e:
a3:87:40:d6:39:ae:86:dd:f3:e3:06:e6:36:40:f9:2d:2d:f8:
d1:81:ec:f4:7f:3f:75:1d:53:3a:a8:a8:ef:17:54:dd:0b:5f:
6c:9a:35:88:52:ce:35:eb:15:1b:41:27:24:1d:b8:50:2f:1e:
90:80:75:06:2c:8a:61:31:ad:61:02:5d:01:82:f9:2a:7a:ff:
ca:9b:d1:fc:28:d2:7e:9f:a1:f1:a6:11:98:6b:b6:0b:91:80:
66:22:56:f1:59:ed:47:1d:c2:fa:15:1a:e7:fa:ed:e2:06:af:
70:31:c6:02:af:a5:10:16:17:9c:dc:47:f9:77:28:bf:0d:f2:
ed:b1:a0:db:82:7f:94:35:ae:19:d5:92:e3:d3:f6:62:ca:75:
99:22:61:8f:60:62:ee:93:34:fc:c2:51:2e:c7:ec:b9:1f:ad:
8c:47:e5:72:17:0e:c6:98:90:db:f0:03:2c:be:90:3a:48:41:
13:21:e1:ef:57:dd:96:c2:3d:7d:9f:03:14:22:98:3d:ad:e1:
60:06:7a:21:ec:7c:e6:be:73:6f:8d:d8:cf:7e:e6:bb:16:34:
dd:8d:48:71
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQiH0UYyKRGQsgaCuS2rP2nMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxNmY0MzNiYjRjZWRkNzJkODZjNDRlZDg1OTk5MDM1MjJi
NWU0ZjEwHhcNMjUwMTAxMTM0NzQyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiOWU2ZmM4ZDY4ZDliMjA4NWVjZWRiMTMzNmExZTVkN2UyZWI5ZWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkgmYH4B0rG6qzslcEccfkDmdRC1F
fIahyS/mrkz91HYF1y2U+b5aQFrsoEPWrLeWC8eh+w39/plaghwJS1JhsK3DMr2A
7iyEfVZ2r2EonHuTXOq8c5RX5AHSQDDOtQUu9OCQk0xP/8SKl5DGbkcu2ZRo4u1s
zzOBbdVsHNY9jD7MOz9STthPcknHKgLVxZueUZIwVnJFHtQx2s3NxrcYEvUjZx6o
+4J1a06RFRpLdxNTR/ttvZbUQ9jU2wtSNvsmzG4/dmhx3CoQtU7ffdR/9VeZ+cY7
1OcFy4WwWo+Dofr14bPwL9ZyNeoq9kr5h3rt1ALtlpPwWqUP06cCFL2ocQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFLnm/I1o2bIIXs7bEzah5dfi6566MB8GA1UdIwQY
MBaAFDFvQzu0zt1y2GxE7YWZkDUiteTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVc5RE83VE8zWExZYkVUdGhabVFOU0sxNVBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS83M2M4MjktMTUxOC00ZDQxLTkyYzIt
N2UwYWI4YmNhZTg5LzEvdWViOGpXalpzZ2hlenRzVE5xSGwxLUxybnJvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS83M2M4MjktMTUxOC00ZDQxLTkyYzItN2UwYWI4YmNhZTg5
LzEvTVc5RE83VE8zWExZYkVUdGhabVFOU0sxNVBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW9EuMA0E
AgACMAcDBQMqBfVAMA0GCSqGSIb3DQEBCwUAA4IBAQBuaO9VHJWMP4UkqqygUaY1
BCYHNNjqD3L81aHZvy/4vngAo06jh0DWOa6G3fPjBuY2QPktLfjRgez0fz91HVM6
qKjvF1TdC19smjWIUs416xUbQSckHbhQLx6QgHUGLIphMa1hAl0Bgvkqev/Km9H8
KNJ+n6HxphGYa7YLkYBmIlbxWe1HHcL6FRrn+u3iBq9wMcYCr6UQFhec3Ef5dyi/
DfLtsaDbgn+UNa4Z1ZLj0/ZiynWZImGPYGLukzT8wlEux+y5H62MR+VyFw7GmJDb
8AMsvpA6SEETIeHvV92Wwj19nwMUIpg9reFgBnoh7HzmvnNvjdjPfua7FjTdjUhx
-----END CERTIFICATE-----
Generated at Tue Apr 8 01:15:10 2025 by rpki-client