Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/rjoKSFT64wx9I01-lQ0W0ynohgU.roa
File: rjoKSFT64wx9I01-lQ0W0ynohgU.roa (raw, json)
Hash identifier: kjj+Ef2J/by9CyPkpbVAwiAkNqP+TYAiZ/aCdSXrkAg=
Subject key identifier: AE:3A:0A:48:54:FA:E3:0C:7D:23:4D:7E:95:0D:16:D3:29:E8:86:05
Certificate issuer: /CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Certificate serial: 019421B1B93932B530A41402E682A972D421
Authority key identifier: 0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/rjoKSFT64wx9I01-lQ0W0ynohgU.roa
Signing time: Wed 01 Jan 2025 11:48:02 +0000
ROA not before: Wed 01 Jan 2025 11:48:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214068
IP address blocks: 93.157.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:b9:39:32:b5:30:a4:14:02:e6:82:a9:72:d4:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d2efe3b63fa9b2a7932c5b5ec854b70c3f18839
Validity
Not Before: Jan 1 11:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae3a0a4854fae30c7d234d7e950d16d329e88605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:52:ad:58:d2:b0:10:6a:6d:63:ed:41:e7:00:
06:ab:66:f9:ca:24:20:f6:62:21:25:be:ae:63:c6:
0f:87:61:cc:ba:5e:9e:ef:0d:df:5c:8b:86:a1:3f:
8b:24:e6:dc:fe:8a:aa:1a:e9:20:a6:67:a1:3b:ab:
14:16:e7:d4:38:32:34:7a:89:94:76:1b:57:25:01:
2c:26:06:ff:37:37:9c:76:07:1e:46:3f:f4:8e:dd:
9a:2b:8c:da:32:53:b1:cb:cb:78:1a:01:a7:10:02:
ee:88:ed:de:92:f0:a5:a5:cd:85:20:35:5e:6d:bf:
e9:30:29:c0:93:91:e5:36:6c:40:43:e4:ad:f1:e5:
57:f9:60:2d:35:39:ee:32:2b:64:fc:5e:06:f0:3b:
1d:f9:c9:2c:40:8f:ff:75:5f:17:73:0b:ad:63:51:
ec:6e:0a:d1:f8:f3:45:d8:36:a2:11:19:b4:35:ce:
0e:f7:32:ba:3e:b0:2e:19:41:2a:b7:4d:65:f6:6e:
c0:23:d2:0b:b3:73:e7:a5:74:e8:fc:69:dc:4b:f1:
97:4a:d5:11:f3:5e:76:1d:1c:c5:ad:7f:e1:be:59:
86:ea:89:a5:26:a9:5b:51:15:c7:db:3b:ff:79:c9:
25:45:b8:2c:4a:a7:88:16:81:27:0f:1d:13:91:b1:
35:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3A:0A:48:54:FA:E3:0C:7D:23:4D:7E:95:0D:16:D3:29:E8:86:05
X509v3 Authority Key Identifier:
keyid:0D:2E:FE:3B:63:FA:9B:2A:79:32:C5:B5:EC:85:4B:70:C3:F1:88:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DS7-O2P6myp5MsW17IVLcMPxiDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/rjoKSFT64wx9I01-lQ0W0ynohgU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/ae0a93-f690-4e36-befa-91a349e77478/1/DS7-O2P6myp5MsW17IVLcMPxiDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.142.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:b2:05:f3:3c:c0:98:ca:61:16:df:ca:69:b1:01:c0:7a:16:
9d:66:6c:02:dc:46:e8:b7:41:17:cc:2b:04:31:19:66:d4:5a:
ec:45:36:13:97:2c:59:d9:d7:bd:86:8c:0b:4f:f3:f1:ec:5c:
fc:27:3d:4b:5a:54:8e:11:e3:c6:08:17:df:2e:f8:ab:39:71:
86:d3:61:b5:a3:af:e3:90:b0:8b:03:1d:22:b7:f4:c3:0a:f9:
fc:dd:76:79:3b:19:1b:92:42:ae:9e:a3:a5:fe:1c:64:7f:1b:
25:20:55:fe:f0:f0:80:3c:05:a5:1a:f1:84:29:5d:3b:8a:bb:
75:b7:73:40:50:7f:d3:3d:c9:ee:2f:72:3a:ff:f8:5b:61:b8:
d4:f6:c9:69:72:a3:a8:14:23:84:45:1a:a4:41:52:e7:10:1f:
c5:cb:e7:f5:3e:eb:4a:8a:47:06:49:dd:4c:32:fe:76:08:d0:
5f:0e:6f:e0:1c:bb:f7:77:55:9f:af:a9:f8:f6:21:c6:23:ea:
8e:6f:72:66:ad:51:41:a5:f7:32:3a:2b:78:97:71:39:a8:2e:
0b:85:86:6c:bb:47:5f:32:d8:c2:35:7f:fa:39:41:7d:cc:26:
0a:e6:fb:07:2e:1b:db:96:bc:95:1c:78:81:07:3c:4a:9a:a5:
6f:35:4a:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsbk5MrUwpBQC5oKpctQhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkMmVmZTNiNjNmYTliMmE3OTMyYzViNWVjODU0YjcwYzNm
MTg4MzkwHhcNMjUwMTAxMTE0ODAyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZTNhMGE0ODU0ZmFlMzBjN2QyMzRkN2U5NTBkMTZkMzI5ZTg4NjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFKtWNKwEGptY+1B5wAGq2b5yiQg
9mIhJb6uY8YPh2HMul6e7w3fXIuGoT+LJObc/oqqGukgpmehO6sUFufUODI0eomU
dhtXJQEsJgb/NzecdgceRj/0jt2aK4zaMlOxy8t4GgGnEALuiO3ekvClpc2FIDVe
bb/pMCnAk5HlNmxAQ+St8eVX+WAtNTnuMitk/F4G8Dsd+cksQI//dV8XcwutY1Hs
bgrR+PNF2DaiERm0Nc4O9zK6PrAuGUEqt01l9m7AI9ILs3PnpXTo/GncS/GXStUR
8152HRzFrX/hvlmG6omlJqlbURXH2zv/ecklRbgsSqeIFoEnDx0TkbE1ZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK46CkhU+uMMfSNNfpUNFtMp6IYFMB8GA1UdIwQY
MBaAFA0u/jtj+psqeTLFteyFS3DD8Yg5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFM3LU8yUDZteXA1TXNXMTdJVkxjTVB4aURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9hZTBhOTMtZjY5MC00ZTM2LWJlZmEt
OTFhMzQ5ZTc3NDc4LzEvcmpvS1NGVDY0d3g5STAxLWxRMFcweW5vaGdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9hZTBhOTMtZjY5MC00ZTM2LWJlZmEtOTFhMzQ5ZTc3NDc4
LzEvRFM3LU8yUDZteXA1TXNXMTdJVkxjTVB4aURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXZ2OMA0G
CSqGSIb3DQEBCwUAA4IBAQBasgXzPMCYymEW38ppsQHAehadZmwC3Ebot0EXzCsE
MRlm1FrsRTYTlyxZ2de9howLT/Px7Fz8Jz1LWlSOEePGCBffLvirOXGG02G1o6/j
kLCLAx0it/TDCvn83XZ5OxkbkkKunqOl/hxkfxslIFX+8PCAPAWlGvGEKV07irt1
t3NAUH/TPcnuL3I6//hbYbjU9slpcqOoFCOERRqkQVLnEB/Fy+f1PutKikcGSd1M
Mv52CNBfDm/gHLv3d1Wfr6n49iHGI+qOb3JmrVFBpfcyOit4l3E5qC4LhYZsu0df
MtjCNX/6OUF9zCYK5vsHLhvblryVHHiBBzxKmqVvNUoh
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:31:02 2025 by rpki-client