Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/zqK89vow_bAAUVS7COvdS-Qjmh4.roa
File: zqK89vow_bAAUVS7COvdS-Qjmh4.roa (raw, json)
Hash identifier: Au44cD14Ka5Bha6O9SoHEAjg99bw30dc/IRtL9+hlW8=
Subject key identifier: CE:A2:BC:F6:FA:30:FD:B0:00:51:54:BB:08:EB:DD:4B:E4:23:9A:1E
Certificate issuer: /CN=e316318247d211841f9620a9a1130010ddb486f2
Certificate serial: 01919058C6E6BE09114CD436DE0D913F6C66
Authority key identifier: E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/zqK89vow_bAAUVS7COvdS-Qjmh4.roa
Signing time: Mon 26 Aug 2024 20:20:22 +0000
ROA not before: Mon 26 Aug 2024 20:20:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 30781
IP address blocks: 91.232.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:90:58:c6:e6:be:09:11:4c:d4:36:de:0d:91:3f:6c:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e316318247d211841f9620a9a1130010ddb486f2
Validity
Not Before: Aug 26 20:20:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=cea2bcf6fa30fdb0005154bb08ebdd4be4239a1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d0:b4:8d:c7:7f:6a:a1:f6:be:15:5d:41:f9:
f8:b0:34:81:7e:b4:fa:be:85:cc:7c:90:ba:b1:f8:
e0:0d:a9:15:ce:b6:00:6e:89:b3:ff:66:8b:02:0e:
83:d5:5a:cc:e6:cf:15:06:e9:c2:01:a2:17:e4:2f:
f4:e6:18:28:9f:94:83:01:4f:a0:c1:5e:4f:45:16:
c0:27:ea:61:d9:bd:81:b2:bb:bf:78:3a:18:f4:64:
84:38:ba:5b:28:ae:9b:3f:9b:44:11:e7:04:c9:3f:
dc:9f:15:51:bb:7f:26:41:7b:b2:00:c4:49:9b:af:
a9:f6:11:c7:a7:8a:3a:1c:71:9c:53:6f:01:01:2f:
64:3b:d4:e4:e6:59:c9:dc:de:2d:e5:9c:c3:d9:b6:
ab:d9:93:ef:7a:e0:2b:6e:dd:32:ad:ff:3f:d0:46:
55:2c:76:15:e8:12:81:ff:ae:b7:13:48:96:44:0e:
ae:8f:54:d2:c8:8d:2a:cc:5b:c1:70:03:66:93:f6:
5e:80:bc:81:47:2f:51:60:5d:f6:c0:36:37:09:b9:
a0:71:41:b5:1e:18:0c:ba:30:1e:c9:d9:02:5e:06:
ab:cd:45:39:bb:18:c8:0d:83:77:32:f6:e2:c9:18:
43:cf:ac:68:3b:2f:bb:24:52:e2:bf:99:06:bb:88:
8f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A2:BC:F6:FA:30:FD:B0:00:51:54:BB:08:EB:DD:4B:E4:23:9A:1E
X509v3 Authority Key Identifier:
keyid:E3:16:31:82:47:D2:11:84:1F:96:20:A9:A1:13:00:10:DD:B4:86:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4xYxgkfSEYQfliCpoRMAEN20hvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/zqK89vow_bAAUVS7COvdS-Qjmh4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/ee42bb-1e49-4c21-a4d6-ec287e1d37e5/1/4xYxgkfSEYQfliCpoRMAEN20hvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.99.0/24
Signature Algorithm: sha256WithRSAEncryption
91:fa:3f:8f:45:21:89:52:6c:c3:ea:15:ab:f7:36:7f:8f:1c:
83:aa:4d:54:10:84:ed:68:4f:dd:12:30:b6:e9:9d:4b:aa:f1:
df:9d:e2:a6:a2:ec:8a:09:99:7f:44:41:df:6a:8e:7c:94:8b:
d2:b5:5b:16:92:4c:a6:14:87:14:9a:32:a6:82:b3:6e:ef:3b:
dc:d5:9f:51:c2:68:f7:7c:1f:19:08:22:cb:ce:d0:d6:ff:b4:
49:9b:ca:b2:e4:bb:b8:cc:7f:82:09:cc:d5:b7:15:7f:42:a8:
af:af:4e:05:41:a0:a7:a8:e3:1b:04:0d:0d:c3:4f:ca:97:aa:
e5:c4:f0:5d:60:4c:14:d2:70:07:3c:37:6a:d1:76:8c:f5:7f:
89:a1:19:c7:11:12:2f:86:44:76:57:a9:0a:47:3f:f6:d7:d6:
b9:f9:a8:fb:a4:70:92:03:ff:5d:df:bc:72:90:2d:0e:70:c2:
95:52:3c:43:f0:ba:a8:4c:3a:ea:76:eb:2c:fc:d5:f7:7e:f5:
cf:fa:f5:55:76:54:be:3a:e6:92:12:8a:b5:17:d8:89:fe:56:
58:fb:00:91:fb:19:57:fd:c4:1c:ae:92:5b:f5:bc:65:65:35:
52:ca:94:4d:3d:63:cd:61:3c:19:2b:5d:34:b2:2f:f9:89:2e:
cc:d8:3b:bb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZGQWMbmvgkRTNQ23g2RP2xmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzMTYzMTgyNDdkMjExODQxZjk2MjBhOWExMTMwMDEwZGRi
NDg2ZjIwHhcNMjQwODI2MjAyMDIyWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjZWEyYmNmNmZhMzBmZGIwMDA1MTU0YmIwOGViZGQ0YmU0MjM5YTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydC0jcd/aqH2vhVdQfn4sDSBfrT6
voXMfJC6sfjgDakVzrYAbomz/2aLAg6D1VrM5s8VBunCAaIX5C/05hgon5SDAU+g
wV5PRRbAJ+ph2b2Bsru/eDoY9GSEOLpbKK6bP5tEEecEyT/cnxVRu38mQXuyAMRJ
m6+p9hHHp4o6HHGcU28BAS9kO9Tk5lnJ3N4t5ZzD2bar2ZPveuArbt0yrf8/0EZV
LHYV6BKB/663E0iWRA6uj1TSyI0qzFvBcANmk/ZegLyBRy9RYF32wDY3CbmgcUG1
HhgMujAeydkCXgarzUU5uxjIDYN3MvbiyRhDz6xoOy+7JFLiv5kGu4iPhwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFM6ivPb6MP2wAFFUuwjr3UvkI5oeMB8GA1UdIwQY
MBaAFOMWMYJH0hGEH5YgqaETABDdtIbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNHhZeGdrZlNFWVFmbGlDcG9STUFFTjIwaHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS9lZTQyYmItMWU0OS00YzIxLWE0ZDYt
ZWMyODdlMWQzN2U1LzEvenFLODl2b3dfYkFBVVZTN0NPdmRTLVFqbWg0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS9lZTQyYmItMWU0OS00YzIxLWE0ZDYtZWMyODdlMWQzN2U1
LzEvNHhZeGdrZlNFWVFmbGlDcG9STUFFTjIwaHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+hjMA0G
CSqGSIb3DQEBCwUAA4IBAQCR+j+PRSGJUmzD6hWr9zZ/jxyDqk1UEITtaE/dEjC2
6Z1LqvHfneKmouyKCZl/REHfao58lIvStVsWkkymFIcUmjKmgrNu7zvc1Z9Rwmj3
fB8ZCCLLztDW/7RJm8qy5Lu4zH+CCczVtxV/Qqivr04FQaCnqOMbBA0Nw0/Kl6rl
xPBdYEwU0nAHPDdq0XaM9X+JoRnHERIvhkR2V6kKRz/219a5+aj7pHCSA/9d37xy
kC0OcMKVUjxD8LqoTDrqduss/NX3fvXP+vVVdlS+OuaSEoq1F9iJ/lZY+wCR+xlX
/cQcrpJb9bxlZTVSypRNPWPNYTwZK100si/5iS7M2Du7
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:50 2025 by rpki-client