Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/b6c5zm72T5u0EfOAbDE3JGGhXtw.roa
File: b6c5zm72T5u0EfOAbDE3JGGhXtw.roa (raw, json)
Hash identifier: OJH5Z8arKXzNL0yoYBrj6T/yS9sFayIfKvyurf8IbEI=
Subject key identifier: 6F:A7:39:CE:6E:F6:4F:9B:B4:11:F3:80:6C:31:37:24:61:A1:5E:DC
Certificate issuer: /CN=1530a6eb523969da92c8844c0dfb40ed820bd6c4
Certificate serial: 01941F8CA5CCF683FE813240102CAA1BA284
Authority key identifier: 15:30:A6:EB:52:39:69:DA:92:C8:84:4C:0D:FB:40:ED:82:0B:D6:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/b6c5zm72T5u0EfOAbDE3JGGhXtw.roa
Signing time: Wed 01 Jan 2025 01:48:18 +0000
ROA not before: Wed 01 Jan 2025 01:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47903
IP address blocks: 91.208.200.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a5:cc:f6:83:fe:81:32:40:10:2c:aa:1b:a2:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1530a6eb523969da92c8844c0dfb40ed820bd6c4
Validity
Not Before: Jan 1 01:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6fa739ce6ef64f9bb411f3806c31372461a15edc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:d9:f6:0c:c2:d3:e9:37:7f:fb:63:b7:c5:9b:
d4:b7:c9:18:75:13:7a:36:79:ae:f1:57:a7:59:d7:
90:e8:9a:9d:9a:d9:6e:b7:c3:f8:5c:5d:86:47:70:
b6:ef:6b:d2:7b:2e:85:fd:29:77:0b:ad:4c:b1:83:
5f:31:80:c4:4a:ce:50:4e:57:2e:02:13:bb:f1:aa:
23:44:e1:25:2a:24:a0:0d:d3:e4:39:3f:f1:ba:a5:
f0:ec:ed:0e:4d:b2:cf:e1:22:9a:aa:2c:35:f5:64:
3f:f6:ea:13:8f:c5:d7:8d:cd:21:d2:4d:03:48:68:
c1:47:63:99:d9:5f:9e:51:be:b3:24:14:1d:c8:a2:
e7:0b:24:46:83:d3:4e:32:62:bc:fe:b0:bd:dd:27:
d2:75:be:ba:83:75:72:ae:9e:9b:95:ec:91:b1:0a:
b0:e4:01:30:28:d4:7b:33:f3:e0:fb:ed:aa:37:05:
56:91:86:77:7c:35:d6:04:64:04:8b:68:c6:91:aa:
68:66:43:7d:3d:5e:53:14:5b:ff:fa:08:bc:11:c4:
da:7d:da:fa:9c:3f:06:f4:f4:fe:70:37:f4:f1:61:
cc:dc:35:59:cc:ad:94:9f:df:3e:53:19:32:98:74:
59:c9:a2:3e:1b:84:3d:a6:3e:86:b9:db:a1:01:31:
06:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A7:39:CE:6E:F6:4F:9B:B4:11:F3:80:6C:31:37:24:61:A1:5E:DC
X509v3 Authority Key Identifier:
keyid:15:30:A6:EB:52:39:69:DA:92:C8:84:4C:0D:FB:40:ED:82:0B:D6:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTCm61I5adqSyIRMDftA7YIL1sQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/b6c5zm72T5u0EfOAbDE3JGGhXtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/2f10ee-7531-4f22-b1a8-d323fbdbb687/1/FTCm61I5adqSyIRMDftA7YIL1sQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.200.0/24
Signature Algorithm: sha256WithRSAEncryption
36:72:47:66:7f:7f:90:f2:02:32:10:0f:25:ee:09:89:5a:e8:
46:9e:2f:0c:81:b3:8b:0f:99:fe:a8:f3:6e:9c:2b:65:27:48:
08:e9:ec:66:2a:f2:3c:db:d2:c6:ad:1c:95:56:50:14:5b:2f:
b7:5f:21:31:2e:74:c2:7e:ee:e8:a6:8c:a7:3f:1d:a3:22:4f:
94:44:7b:3d:59:07:df:a7:7a:4c:9d:5f:f4:b0:2d:1c:c4:40:
f4:68:a8:5c:2b:af:e7:f2:38:54:76:a9:4b:88:95:06:47:53:
83:bc:3d:a0:b3:18:61:8c:b5:a2:b2:01:de:42:5c:2f:11:af:
43:0a:10:b3:24:e5:28:3b:2c:fe:14:bb:f7:69:4a:8e:11:e8:
83:fb:d4:f1:e9:6f:a4:2d:0c:69:f3:cc:42:cf:71:00:82:ec:
68:2b:54:d4:c3:8d:d1:e6:51:fe:49:e5:9a:ff:df:d7:d6:03:
3e:99:4b:80:dd:a4:06:c5:af:81:87:96:27:cc:25:ec:19:3a:
a4:cd:8e:a9:83:fe:8c:68:7c:e3:d7:4d:9e:6f:12:dc:d1:09:
e6:e1:85:bd:a7:9d:71:31:f7:cf:75:80:cf:be:45:0b:3a:2d:
8b:75:f8:69:3f:bd:71:c9:ce:c8:6c:08:15:be:f8:f8:2a:8a:
b2:32:06:bf
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjKXM9oP+gTJAECyqG6KEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MzBhNmViNTIzOTY5ZGE5MmM4ODQ0YzBkZmI0MGVkODIw
YmQ2YzQwHhcNMjUwMTAxMDE0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2ZmE3MzljZTZlZjY0ZjliYjQxMWYzODA2YzMxMzcyNDYxYTE1ZWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdn2DMLT6Td/+2O3xZvUt8kYdRN6
Nnmu8VenWdeQ6Jqdmtlut8P4XF2GR3C272vSey6F/Sl3C61MsYNfMYDESs5QTlcu
AhO78aojROElKiSgDdPkOT/xuqXw7O0OTbLP4SKaqiw19WQ/9uoTj8XXjc0h0k0D
SGjBR2OZ2V+eUb6zJBQdyKLnCyRGg9NOMmK8/rC93SfSdb66g3Vyrp6bleyRsQqw
5AEwKNR7M/Pg++2qNwVWkYZ3fDXWBGQEi2jGkapoZkN9PV5TFFv/+gi8EcTafdr6
nD8G9PT+cDf08WHM3DVZzK2Un98+UxkymHRZyaI+G4Q9pj6GuduhATEGLQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFG+nOc5u9k+btBHzgGwxNyRhoV7cMB8GA1UdIwQY
MBaAFBUwputSOWnaksiETA37QO2CC9bEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlRDbTYxSTVhZHFTeUlSTURmdEE3WUlMMXNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My8yZjEwZWUtNzUzMS00ZjIyLWIxYTgt
ZDMyM2ZiZGJiNjg3LzEvYjZjNXptNzJUNXUwRWZPQWJERTNKR0doWHR3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My8yZjEwZWUtNzUzMS00ZjIyLWIxYTgtZDMyM2ZiZGJiNjg3
LzEvRlRDbTYxSTVhZHFTeUlSTURmdEE3WUlMMXNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9DIMA0G
CSqGSIb3DQEBCwUAA4IBAQA2ckdmf3+Q8gIyEA8l7gmJWuhGni8MgbOLD5n+qPNu
nCtlJ0gI6exmKvI829LGrRyVVlAUWy+3XyExLnTCfu7opoynPx2jIk+URHs9WQff
p3pMnV/0sC0cxED0aKhcK6/n8jhUdqlLiJUGR1ODvD2gsxhhjLWisgHeQlwvEa9D
ChCzJOUoOyz+FLv3aUqOEeiD+9Tx6W+kLQxp88xCz3EAguxoK1TUw43R5lH+SeWa
/9/X1gM+mUuA3aQGxa+Bh5YnzCXsGTqkzY6pg/6MaHzj102ebxLc0Qnm4YW9p51x
MffPdYDPvkULOi2LdfhpP71xyc7IbAgVvvj4KoqyMga/
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:16:43 2025 by rpki-client