Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/tqiyhAwG9vZGTuCBcB3Ep8Bsk0k.roa
File: tqiyhAwG9vZGTuCBcB3Ep8Bsk0k.roa (raw, json)
Hash identifier: ViHxSsFsnpASXarlQUAHnVHJN7UM7cJ/sEWxYKdVpew=
Subject key identifier: B6:A8:B2:84:0C:06:F6:F6:46:4E:E0:81:70:1D:C4:A7:C0:6C:93:49
Certificate issuer: /CN=27f83e56b6af760083eb54bb5b6e19ddb41dd88a
Certificate serial: 019421445179CED06D371B3C12325773DA64
Authority key identifier: 27:F8:3E:56:B6:AF:76:00:83:EB:54:BB:5B:6E:19:DD:B4:1D:D8:8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J_g-VravdgCD61S7W24Z3bQd2Io.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/tqiyhAwG9vZGTuCBcB3Ep8Bsk0k.roa
Signing time: Wed 01 Jan 2025 09:48:32 +0000
ROA not before: Wed 01 Jan 2025 09:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57577
IP address blocks: 91.233.56.0/22 maxlen: 22
91.233.56.0/24 maxlen: 24
91.233.57.0/24 maxlen: 24
91.233.58.0/24 maxlen: 24
91.233.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:51:79:ce:d0:6d:37:1b:3c:12:32:57:73:da:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27f83e56b6af760083eb54bb5b6e19ddb41dd88a
Validity
Not Before: Jan 1 09:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b6a8b2840c06f6f6464ee081701dc4a7c06c9349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b9:9b:5b:82:50:66:4b:51:fd:56:57:44:23:
a8:34:4b:6b:24:44:f6:a3:e2:59:70:51:e3:64:c3:
d7:39:05:5c:4f:96:b2:d8:26:e8:23:fe:7e:d2:e3:
0c:a9:5e:81:c2:93:2b:3e:3c:06:03:e1:3f:ce:a6:
4b:c6:06:7c:a4:d1:e3:8a:64:4d:02:5e:6f:dd:50:
ba:03:4d:e3:20:26:37:38:07:4c:71:bb:6c:80:90:
c5:26:17:3f:7c:38:90:11:66:57:ea:f4:cc:c0:6b:
8a:fa:d7:fd:06:e1:ad:e5:b9:2a:34:a0:09:09:21:
de:8c:26:ea:55:82:3e:2e:d0:0e:75:c7:04:e3:4d:
3b:80:e8:b5:c1:13:bd:72:55:95:ec:6b:d5:69:a1:
4d:f1:9c:fe:2b:ab:fc:f2:64:13:c7:95:9a:9e:53:
1f:96:e0:3e:b0:ab:ee:12:6f:17:96:2c:37:2d:05:
a2:93:3e:84:4e:fb:06:2e:5c:58:91:c0:d0:a5:77:
2d:1f:fd:29:d8:64:91:13:13:04:47:1d:74:3a:2c:
ef:37:dc:cc:b5:19:fa:5d:c7:69:e1:9e:63:93:38:
55:9d:de:ce:e0:08:b9:74:37:6c:c9:88:52:fb:34:
b8:9d:b8:eb:5e:e1:d8:62:b8:cf:53:df:51:59:f7:
af:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:A8:B2:84:0C:06:F6:F6:46:4E:E0:81:70:1D:C4:A7:C0:6C:93:49
X509v3 Authority Key Identifier:
keyid:27:F8:3E:56:B6:AF:76:00:83:EB:54:BB:5B:6E:19:DD:B4:1D:D8:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J_g-VravdgCD61S7W24Z3bQd2Io.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/tqiyhAwG9vZGTuCBcB3Ep8Bsk0k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/c0305e-59a1-4b67-9e61-7c4fe361037a/1/J_g-VravdgCD61S7W24Z3bQd2Io.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.56.0/22
Signature Algorithm: sha256WithRSAEncryption
09:9c:b6:4a:ef:3b:3b:d7:4c:6b:d5:51:6f:e9:6e:e7:a5:30:
f1:14:e7:84:d9:07:96:ec:12:90:25:3c:a5:2b:5d:5b:94:a0:
5e:86:a3:11:c6:20:7a:3e:7f:2c:22:fa:01:10:19:8d:03:c1:
db:13:2b:15:16:e4:eb:9c:f4:ed:fd:e2:69:ee:c6:f3:32:13:
7e:ce:11:61:9a:5e:f6:0e:d7:48:4d:d8:5e:06:27:12:40:21:
8c:4e:f2:22:1f:32:e0:05:04:ee:8a:d0:52:02:59:e6:4f:99:
61:d1:98:63:53:33:5c:d3:c4:f2:57:be:1f:44:62:95:b0:e1:
8e:af:6b:8d:13:e2:e5:5d:48:1a:40:6c:69:45:93:f4:6d:36:
e2:01:30:25:7f:66:a0:d7:ee:1d:55:70:8e:43:a3:26:05:ee:
33:69:cd:74:bc:11:a6:92:a9:35:05:ae:72:d4:58:a9:71:ca:
bf:21:c0:4b:f6:16:60:ec:07:b7:59:b8:2c:a4:c3:86:e3:af:
07:a8:86:cc:d0:50:99:a3:97:c3:cb:28:ef:61:06:f5:0a:03:
5a:d6:d2:de:82:1b:1f:c8:29:77:54:b5:7e:0f:68:a0:f7:4e:
20:fc:3a:49:3e:f4:af:9f:60:86:69:b7:f9:81:9b:12:80:8e:
ef:fa:75:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhRFF5ztBtNxs8EjJXc9pkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3ZjgzZTU2YjZhZjc2MDA4M2ViNTRiYjViNmUxOWRkYjQx
ZGQ4OGEwHhcNMjUwMTAxMDk0ODMyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNmE4YjI4NDBjMDZmNmY2NDY0ZWUwODE3MDFkYzRhN2MwNmM5MzQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rmbW4JQZktR/VZXRCOoNEtrJET2
o+JZcFHjZMPXOQVcT5ay2CboI/5+0uMMqV6BwpMrPjwGA+E/zqZLxgZ8pNHjimRN
Al5v3VC6A03jICY3OAdMcbtsgJDFJhc/fDiQEWZX6vTMwGuK+tf9BuGt5bkqNKAJ
CSHejCbqVYI+LtAOdccE4007gOi1wRO9clWV7GvVaaFN8Zz+K6v88mQTx5WanlMf
luA+sKvuEm8Xliw3LQWikz6ETvsGLlxYkcDQpXctH/0p2GSRExMERx10OizvN9zM
tRn6Xcdp4Z5jkzhVnd7O4Ai5dDdsyYhS+zS4nbjrXuHYYrjPU99RWfevgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLaosoQMBvb2Rk7ggXAdxKfAbJNJMB8GA1UdIwQY
MBaAFCf4Pla2r3YAg+tUu1tuGd20HdiKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSl9nLVZyYXZkZ0NENjFTN1cyNFozYlFkMklvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jMDMwNWUtNTlhMS00YjY3LTllNjEt
N2M0ZmUzNjEwMzdhLzEvdHFpeWhBd0c5dlpHVHVDQmNCM0VwOEJzazBrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jMDMwNWUtNTlhMS00YjY3LTllNjEtN2M0ZmUzNjEwMzdh
LzEvSl9nLVZyYXZkZ0NENjFTN1cyNFozYlFkMklvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+k4MA0G
CSqGSIb3DQEBCwUAA4IBAQAJnLZK7zs710xr1VFv6W7npTDxFOeE2QeW7BKQJTyl
K11blKBehqMRxiB6Pn8sIvoBEBmNA8HbEysVFuTrnPTt/eJp7sbzMhN+zhFhml72
DtdITdheBicSQCGMTvIiHzLgBQTuitBSAlnmT5lh0ZhjUzNc08TyV74fRGKVsOGO
r2uNE+LlXUgaQGxpRZP0bTbiATAlf2ag1+4dVXCOQ6MmBe4zac10vBGmkqk1Ba5y
1Fipccq/IcBL9hZg7Ae3WbgspMOG468HqIbM0FCZo5fDyyjvYQb1CgNa1tLeghsf
yCl3VLV+D2ig904g/DpJPvSvn2CGabf5gZsSgI7v+nUa
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:55:48 2025 by rpki-client