Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/67knVum1wBay7k_VNa2UY1ZRh60.roa
File: 67knVum1wBay7k_VNa2UY1ZRh60.roa (raw, json)
Hash identifier: mJTVZRqj1O7LfCpRR9HxwFssov8nRBQ/WlFjuFod+is=
Subject key identifier: EB:B9:27:56:E9:B5:C0:16:B2:EE:4F:D5:35:AD:94:63:56:51:87:AD
Certificate issuer: /CN=50980fb6ade858f2652e736993126c85759f06d9
Certificate serial: 019425FD06E47AD4C237D02B2551CDD97606
Authority key identifier: 50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/67knVum1wBay7k_VNa2UY1ZRh60.roa
Signing time: Thu 02 Jan 2025 07:48:46 +0000
ROA not before: Thu 02 Jan 2025 07:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 91.204.180.0/24 maxlen: 24
91.204.181.0/24 maxlen: 24
91.204.182.0/23 maxlen: 23
91.204.182.0/24 maxlen: 24
91.218.176.0/22 maxlen: 24
91.232.8.0/22 maxlen: 24
195.234.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:06:e4:7a:d4:c2:37:d0:2b:25:51:cd:d9:76:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50980fb6ade858f2652e736993126c85759f06d9
Validity
Not Before: Jan 2 07:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ebb92756e9b5c016b2ee4fd535ad9463565187ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ab:34:43:a3:ad:ec:59:9f:ec:87:d5:31:91:
a8:b1:37:fc:33:df:71:8d:c4:fc:b5:58:6c:97:6e:
92:94:c6:e6:f7:41:18:42:b7:89:97:57:92:79:e2:
02:80:9c:77:53:d8:35:71:8b:b8:86:55:23:7d:ea:
af:54:19:39:ff:cc:82:fe:1b:67:5e:f5:11:b3:cd:
8a:25:9c:b9:79:74:4c:87:65:14:3a:9b:1f:4b:c5:
08:10:0d:fa:b3:59:8c:33:55:08:0d:75:f3:58:ba:
f4:47:30:8d:f8:65:79:88:e4:4e:db:98:96:ed:05:
9c:7b:ee:ad:7e:d5:ba:c2:e3:37:fb:9c:cf:b0:63:
8e:50:d8:ba:45:58:56:ec:94:d8:6b:7a:75:9a:54:
91:f1:9f:bb:4c:33:66:cd:b6:c5:82:a0:18:28:16:
90:a9:94:08:78:b0:fe:15:ad:58:99:f7:da:b6:a1:
45:d3:b6:a7:bd:74:d3:f6:e7:f3:38:fd:30:91:59:
ea:7d:75:4d:52:e6:87:55:8d:72:40:60:b2:9e:15:
c4:ed:e2:b3:d7:7e:b5:6a:7d:26:ea:85:4a:4a:9c:
18:05:bd:ea:0e:82:b9:30:f9:67:1a:50:3a:88:a6:
2f:13:53:41:55:66:20:33:cb:43:4a:0b:5a:0b:45:
8e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:B9:27:56:E9:B5:C0:16:B2:EE:4F:D5:35:AD:94:63:56:51:87:AD
X509v3 Authority Key Identifier:
keyid:50:98:0F:B6:AD:E8:58:F2:65:2E:73:69:93:12:6C:85:75:9F:06:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJgPtq3oWPJlLnNpkxJshXWfBtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/67knVum1wBay7k_VNa2UY1ZRh60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/UJgPtq3oWPJlLnNpkxJshXWfBtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.204.180.0/22
91.218.176.0/22
91.232.8.0/22
195.234.90.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:fd:0a:66:b5:7c:2b:1c:27:f4:3a:11:7c:02:0a:9e:7d:ca:
73:37:a9:24:eb:b0:7a:c9:39:20:83:37:b9:59:f2:ed:93:42:
ad:0b:f3:be:bc:ae:c8:f4:5b:dd:48:93:49:53:8f:52:82:01:
93:45:aa:1a:5c:85:d0:16:d5:92:03:f2:99:61:6d:6a:b9:75:
7d:23:fc:64:0e:72:98:39:79:74:a6:69:10:19:a1:bc:15:51:
a1:9c:e6:59:ae:ed:78:df:5b:07:13:5b:1a:0f:08:ae:b0:4d:
c6:84:42:30:05:98:b8:4e:21:f2:b2:50:aa:15:2c:d9:be:77:
9b:4e:fa:df:6f:62:ac:71:44:35:a5:18:a1:5e:3c:39:74:c9:
ba:95:79:da:81:4c:31:50:1c:20:be:25:17:92:51:98:ff:70:
a9:bd:34:f0:ec:57:21:3a:1a:bc:0d:5a:83:a4:0e:0f:1a:60:
c1:2e:58:6c:67:1a:25:c2:f2:a6:53:a7:43:a6:1f:6f:04:5f:
4e:76:c7:67:60:8e:b1:a6:e0:a3:43:a7:9e:b1:af:96:f1:33:
8e:83:ad:21:88:cf:f1:a3:56:84:e9:de:1c:65:ca:b5:ad:81:
f4:2a:32:f5:a0:2e:17:03:06:b1:52:97:41:3c:82:59:b1:f1:
20:50:4b:bd
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQl/QbketTCN9ArJVHN2XYGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwOTgwZmI2YWRlODU4ZjI2NTJlNzM2OTkzMTI2Yzg1NzU5
ZjA2ZDkwHhcNMjUwMTAyMDc0ODQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYmI5Mjc1NmU5YjVjMDE2YjJlZTRmZDUzNWFkOTQ2MzU2NTE4N2FkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKs0Q6Ot7Fmf7IfVMZGosTf8M99x
jcT8tVhsl26SlMbm90EYQreJl1eSeeICgJx3U9g1cYu4hlUjfeqvVBk5/8yC/htn
XvURs82KJZy5eXRMh2UUOpsfS8UIEA36s1mMM1UIDXXzWLr0RzCN+GV5iORO25iW
7QWce+6tftW6wuM3+5zPsGOOUNi6RVhW7JTYa3p1mlSR8Z+7TDNmzbbFgqAYKBaQ
qZQIeLD+Fa1YmffatqFF07anvXTT9ufzOP0wkVnqfXVNUuaHVY1yQGCynhXE7eKz
1361an0m6oVKSpwYBb3qDoK5MPlnGlA6iKYvE1NBVWYgM8tDSgtaC0WOzQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFOu5J1bptcAWsu5P1TWtlGNWUYetMB8GA1UdIwQY
MBaAFFCYD7at6FjyZS5zaZMSbIV1nwbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt
Y2NhNzlhNjk4MjBhLzEvNjdrblZ1bTF3QmF5N2tfVk5hMlVZMVpSaDYwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh
LzEvVUpnUHRxM29XUEpsTG5OcGt4SnNoWFdmQnRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCW8y0AwQC
W9qwAwQCW+gIAwQAw+paMA0GCSqGSIb3DQEBCwUAA4IBAQA7/QpmtXwrHCf0OhF8
AgqefcpzN6kk67B6yTkggze5WfLtk0KtC/O+vK7I9FvdSJNJU49SggGTRaoaXIXQ
FtWSA/KZYW1quXV9I/xkDnKYOXl0pmkQGaG8FVGhnOZZru1431sHE1saDwiusE3G
hEIwBZi4TiHyslCqFSzZvnebTvrfb2KscUQ1pRihXjw5dMm6lXnagUwxUBwgviUX
klGY/3CpvTTw7FchOhq8DVqDpA4PGmDBLlhsZxolwvKmU6dDph9vBF9OdsdnYI6x
puCjQ6eesa+W8TOOg60hiM/xo1aE6d4cZcq1rYH0KjL1oC4XAwaxUpdBPIJZsfEg
UEu9
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:44:22 2025 by rpki-client