Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/cgvwzEGEwvIm6BLp57QUUWZnOgc.roa
File: cgvwzEGEwvIm6BLp57QUUWZnOgc.roa (raw, json)
Hash identifier: vCJFSFQ95kdVcUfRmZQUyshrPebtrGGD4KfGIuEo6nM=
Subject key identifier: 72:0B:F0:CC:41:84:C2:F2:26:E8:12:E9:E7:B4:14:51:66:67:3A:07
Certificate issuer: /CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Certificate serial: 01942823A766E25C410D561E04FDD8B5E50C
Authority key identifier: 1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/cgvwzEGEwvIm6BLp57QUUWZnOgc.roa
Signing time: Thu 02 Jan 2025 17:50:12 +0000
ROA not before: Thu 02 Jan 2025 17:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49638
IP address blocks: 91.213.30.0/24 maxlen: 24
2001:67c:137c::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:a7:66:e2:5c:41:0d:56:1e:04:fd:d8:b5:e5:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1cc451fbdfaa12efc352a59b007b0a8823b8e65d
Validity
Not Before: Jan 2 17:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=720bf0cc4184c2f226e812e9e7b4145166673a07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:6e:fc:f2:51:d3:7d:a4:d9:3b:7a:b0:1f:
df:44:fa:12:b1:0e:a4:d9:4a:69:14:e8:98:fc:ee:
0f:d1:ab:ec:3e:57:18:8a:17:bc:50:77:66:8f:00:
97:06:43:da:9e:97:b1:f5:17:a4:93:4e:2c:fb:c6:
1b:d1:36:71:bc:93:e3:07:de:d0:de:80:41:7d:a4:
a4:7f:b3:d7:27:f1:40:b3:12:ff:5c:99:df:72:a8:
ad:17:ad:57:cb:a3:19:a1:5a:db:2a:bf:1e:71:0f:
0b:ec:43:07:63:af:43:f1:fa:51:a6:f8:88:b5:b5:
be:fb:a5:ec:db:2a:9d:2e:fa:28:7f:f3:2a:dc:3a:
a7:00:b5:1f:1d:08:7c:cd:3c:08:24:e1:ea:5f:ff:
1a:2c:cc:9c:0d:64:a2:46:67:5b:66:18:b4:7d:5d:
dd:0b:a8:10:1e:68:ea:5b:55:01:34:81:70:e2:51:
34:d3:d5:9a:3c:f8:50:a9:f9:95:09:d4:4e:57:58:
58:79:32:4a:83:a7:76:27:45:41:6b:61:05:e5:82:
82:5a:d3:02:0d:90:26:f7:81:65:f2:2d:93:e6:dc:
42:44:da:7f:65:fd:32:77:f2:5a:fc:bd:91:a8:ae:
f1:36:25:da:9b:a2:14:1f:29:6a:d6:6d:b1:ca:80:
2c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0B:F0:CC:41:84:C2:F2:26:E8:12:E9:E7:B4:14:51:66:67:3A:07
X509v3 Authority Key Identifier:
keyid:1C:C4:51:FB:DF:AA:12:EF:C3:52:A5:9B:00:7B:0A:88:23:B8:E6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HMRR-9-qEu_DUqWbAHsKiCO45l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/cgvwzEGEwvIm6BLp57QUUWZnOgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4d9ca3-aa73-4998-ae63-832db9ebebaf/1/HMRR-9-qEu_DUqWbAHsKiCO45l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.30.0/24
IPv6:
2001:67c:137c::/48
Signature Algorithm: sha256WithRSAEncryption
03:95:04:72:e5:1f:97:68:9e:00:b3:9c:4f:38:cc:42:76:96:
a3:b5:cb:b1:08:9a:36:60:5c:88:a4:d3:29:c4:3f:f5:c6:4b:
9a:68:35:80:1f:8b:69:84:16:c5:ea:7a:ca:5e:c2:36:e6:af:
b6:61:88:32:e0:2e:6d:a1:8f:75:c0:57:01:20:45:53:00:4a:
53:c2:e2:be:fb:9c:fc:55:10:89:b6:7e:d2:59:46:e6:5f:18:
6d:a6:d8:6b:66:93:3f:e9:f0:0d:4c:8e:af:49:48:24:23:03:
d9:aa:d7:92:26:7e:97:fa:86:55:a6:91:c8:38:80:4c:d9:ca:
4d:0f:7b:10:94:61:64:8d:c2:68:65:d7:af:35:dc:d2:e5:77:
48:f0:e8:17:70:96:5e:a4:47:ad:c5:be:2e:00:35:8a:9b:4c:
2b:3c:6f:5e:16:6e:b4:f5:47:2c:98:c3:9c:d7:f5:27:27:7e:
3d:02:ac:15:c6:69:4e:c1:f6:8f:e3:43:b3:c2:7a:64:0e:71:
ea:ce:d1:af:14:46:85:4b:13:c1:c3:3c:e3:4e:bd:8e:d4:68:
d8:28:c6:ec:68:53:50:5a:3f:bc:27:f1:92:e2:c9:33:33:63:
6d:25:62:6e:a6:96:ec:82:d2:42:15:18:24:b0:0f:1f:6d:75:
e8:93:7b:1f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQoI6dm4lxBDVYeBP3YteUMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFjYzQ1MWZiZGZhYTEyZWZjMzUyYTU5YjAwN2IwYTg4MjNi
OGU2NWQwHhcNMjUwMTAyMTc1MDEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MjBiZjBjYzQxODRjMmYyMjZlODEyZTllN2I0MTQ1MTY2NjczYTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfhu/PJR032k2Tt6sB/fRPoSsQ6k
2UppFOiY/O4P0avsPlcYihe8UHdmjwCXBkPanpex9Rekk04s+8Yb0TZxvJPjB97Q
3oBBfaSkf7PXJ/FAsxL/XJnfcqitF61Xy6MZoVrbKr8ecQ8L7EMHY69D8fpRpviI
tbW++6Xs2yqdLvoof/Mq3DqnALUfHQh8zTwIJOHqX/8aLMycDWSiRmdbZhi0fV3d
C6gQHmjqW1UBNIFw4lE009WaPPhQqfmVCdROV1hYeTJKg6d2J0VBa2EF5YKCWtMC
DZAm94Fl8i2T5txCRNp/Zf0yd/Ja/L2RqK7xNiXam6IUHylq1m2xyoAstwIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFHIL8MxBhMLyJugS6ee0FFFmZzoHMB8GA1UdIwQY
MBaAFBzEUfvfqhLvw1KlmwB7CogjuOZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSE1SUi05LXFFdV9EVXFXYkFIc0tpQ080NWwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80ZDljYTMtYWE3My00OTk4LWFlNjMt
ODMyZGI5ZWJlYmFmLzEvY2d2d3pFR0V3dkltNkJMcDU3UVVVV1puT2djLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80ZDljYTMtYWE3My00OTk4LWFlNjMtODMyZGI5ZWJlYmFm
LzEvSE1SUi05LXFFdV9EVXFXYkFIc0tpQ080NWwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9UeMA8E
AgACMAkDBwAgAQZ8E3wwDQYJKoZIhvcNAQELBQADggEBAAOVBHLlH5dongCznE84
zEJ2lqO1y7EImjZgXIik0ynEP/XGS5poNYAfi2mEFsXqespewjbmr7ZhiDLgLm2h
j3XAVwEgRVMASlPC4r77nPxVEIm2ftJZRuZfGG2m2Gtmkz/p8A1Mjq9JSCQjA9mq
15Imfpf6hlWmkcg4gEzZyk0PexCUYWSNwmhl16813NLld0jw6Bdwll6kR63Fvi4A
NYqbTCs8b14WbrT1RyyYw5zX9Scnfj0CrBXGaU7B9o/jQ7PCemQOcerO0a8URoVL
E8HDPONOvY7UaNgoxuxoU1BaP7wn8ZLiyTMzY20lYm6mluyC0kIVGCSwDx9tdeiT
ex8=
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:51 2025 by rpki-client