Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/ffd706-f19c-4fc4-be31-9362adc91630/1/RC4aaqO_uX8ielyRqsGajEbbd78.roa
File: RC4aaqO_uX8ielyRqsGajEbbd78.roa (raw, json)
Hash identifier: daDOGAgD/q4VMmj2YWjZMExkDqd8RmHGoeWbiENifnI=
Subject key identifier: 44:2E:1A:6A:A3:BF:B9:7F:22:7A:5C:91:AA:C1:9A:8C:46:DB:77:BF
Certificate issuer: /CN=edad3753015fc7e1682a4b1f77ff24d4c0e86b51
Certificate serial: 0193F4C44A2BBB4B6D99BD1E71EE39F74C9B
Authority key identifier: ED:AD:37:53:01:5F:C7:E1:68:2A:4B:1F:77:FF:24:D4:C0:E8:6B:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7a03UwFfx-FoKksfd_8k1MDoa1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/ffd706-f19c-4fc4-be31-9362adc91630/1/RC4aaqO_uX8ielyRqsGajEbbd78.roa
Signing time: Mon 23 Dec 2024 18:25:24 +0000
ROA not before: Mon 23 Dec 2024 18:25:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 198984
IP address blocks: 91.237.136.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:f4:c4:4a:2b:bb:4b:6d:99:bd:1e:71:ee:39:f7:4c:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edad3753015fc7e1682a4b1f77ff24d4c0e86b51
Validity
Not Before: Dec 23 18:25:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=442e1a6aa3bfb97f227a5c91aac19a8c46db77bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:4f:3b:24:29:d3:dd:da:a7:1e:47:e9:80:c5:
63:ee:f4:40:c5:8d:6a:e8:cf:27:cd:70:dc:bf:16:
ba:59:31:07:11:c5:f5:71:67:dd:51:a5:b4:7b:19:
1e:d4:10:85:1b:e3:47:dd:70:d2:c7:f7:df:9a:81:
dd:8f:31:2f:b8:7b:05:ca:ea:0c:17:28:a3:84:bb:
1d:24:58:9c:2b:c8:2f:2b:10:e0:89:66:b9:e0:08:
e2:de:f7:0a:45:cf:74:05:a6:49:b2:d9:ca:72:1e:
27:cd:fc:5b:54:8c:9a:67:e2:fc:2d:41:29:c9:01:
fd:ca:75:cf:ae:a2:ce:c3:8d:13:62:13:8b:14:e0:
65:8b:c6:f0:aa:d8:90:de:36:11:69:94:73:e9:da:
1c:6f:00:ce:df:8a:a3:58:79:3b:a7:1c:b1:7c:81:
af:69:7d:d1:8f:38:88:21:23:38:1c:56:bc:3f:f8:
45:41:93:66:5d:6d:31:a1:91:b4:c7:50:ad:6e:32:
a8:aa:c5:5f:d1:22:50:fe:a2:cc:1f:7c:c2:f9:6f:
98:5b:72:06:cf:b0:a3:94:09:7a:01:cd:3c:6f:a8:
5e:8a:79:29:10:25:8b:40:3e:94:a9:40:a9:19:be:
9f:a9:7e:f1:e3:bb:6a:e8:e2:cb:98:a6:3f:df:01:
59:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:2E:1A:6A:A3:BF:B9:7F:22:7A:5C:91:AA:C1:9A:8C:46:DB:77:BF
X509v3 Authority Key Identifier:
keyid:ED:AD:37:53:01:5F:C7:E1:68:2A:4B:1F:77:FF:24:D4:C0:E8:6B:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a03UwFfx-FoKksfd_8k1MDoa1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ffd706-f19c-4fc4-be31-9362adc91630/1/RC4aaqO_uX8ielyRqsGajEbbd78.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/ffd706-f19c-4fc4-be31-9362adc91630/1/7a03UwFfx-FoKksfd_8k1MDoa1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.136.0/23
Signature Algorithm: sha256WithRSAEncryption
37:fa:fe:fe:6d:21:71:39:69:8d:31:c9:c5:9c:07:37:0b:21:
8b:09:c7:e5:c9:72:e1:b2:ae:c0:75:28:84:65:d1:52:e2:db:
70:1e:81:99:fe:8a:0b:33:37:93:ca:e3:9b:c0:5d:8a:40:81:
f8:84:7d:37:2f:65:8e:9e:fe:5c:eb:45:f7:84:60:1d:a4:0f:
cd:9b:9a:c8:4d:8b:9a:68:46:8b:0d:ba:50:07:83:5b:be:79:
5b:28:7d:0b:69:75:ab:ea:be:29:7a:31:24:7d:ac:2f:d5:89:
7a:42:41:0e:68:33:55:73:07:ed:66:37:22:ae:ba:da:56:7a:
c5:c5:44:76:3b:02:8e:a4:e4:e4:56:e3:99:3a:51:de:d5:ce:
50:c2:ba:18:36:5e:d3:d2:ff:c7:10:3b:41:ff:87:14:5f:09:
da:62:05:b1:bb:eb:52:71:45:ae:25:20:fb:54:1a:2f:ff:29:
82:97:3e:1c:5b:58:6d:06:22:73:b4:de:c4:83:a5:a3:44:4c:
a2:c5:4b:36:10:b1:29:6b:3e:92:7a:15:e3:39:97:7e:48:33:
4f:61:1e:8c:e1:7e:48:a2:ab:1e:ce:51:7c:87:f5:08:66:33:
7a:11:19:aa:6f:2a:c8:f5:4c:88:4c:dc:cb:30:4b:a3:ac:3e:
9e:79:d7:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZP0xEoru0ttmb0ece4590ybMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVkYWQzNzUzMDE1ZmM3ZTE2ODJhNGIxZjc3ZmYyNGQ0YzBl
ODZiNTEwHhcNMjQxMjIzMTgyNTI0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NDJlMWE2YWEzYmZiOTdmMjI3YTVjOTFhYWMxOWE4YzQ2ZGI3N2JmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4U87JCnT3dqnHkfpgMVj7vRAxY1q
6M8nzXDcvxa6WTEHEcX1cWfdUaW0exke1BCFG+NH3XDSx/ffmoHdjzEvuHsFyuoM
FyijhLsdJFicK8gvKxDgiWa54Aji3vcKRc90BaZJstnKch4nzfxbVIyaZ+L8LUEp
yQH9ynXPrqLOw40TYhOLFOBli8bwqtiQ3jYRaZRz6docbwDO34qjWHk7pxyxfIGv
aX3RjziIISM4HFa8P/hFQZNmXW0xoZG0x1CtbjKoqsVf0SJQ/qLMH3zC+W+YW3IG
z7CjlAl6Ac08b6heinkpECWLQD6UqUCpGb6fqX7x47tq6OLLmKY/3wFZvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEQuGmqjv7l/InpckarBmoxG23e/MB8GA1UdIwQY
MBaAFO2tN1MBX8fhaCpLH3f/JNTA6GtRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2EwM1V3RmZ4LUZvS2tzZmRfOGsxTURvYTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi9mZmQ3MDYtZjE5Yy00ZmM0LWJlMzEt
OTM2MmFkYzkxNjMwLzEvUkM0YWFxT191WDhpZWx5UnFzR2FqRWJiZDc4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi9mZmQ3MDYtZjE5Yy00ZmM0LWJlMzEtOTM2MmFkYzkxNjMw
LzEvN2EwM1V3RmZ4LUZvS2tzZmRfOGsxTURvYTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+2IMA0G
CSqGSIb3DQEBCwUAA4IBAQA3+v7+bSFxOWmNMcnFnAc3CyGLCcflyXLhsq7AdSiE
ZdFS4ttwHoGZ/ooLMzeTyuObwF2KQIH4hH03L2WOnv5c60X3hGAdpA/Nm5rITYua
aEaLDbpQB4NbvnlbKH0LaXWr6r4pejEkfawv1Yl6QkEOaDNVcwftZjcirrraVnrF
xUR2OwKOpOTkVuOZOlHe1c5QwroYNl7T0v/HEDtB/4cUXwnaYgWxu+tScUWuJSD7
VBov/ymClz4cW1htBiJztN7Eg6WjREyixUs2ELEpaz6SehXjOZd+SDNPYR6M4X5I
oqsezlF8h/UIZjN6ERmqbyrI9UyITNzLMEujrD6eedd8
-----END CERTIFICATE-----
Generated at Wed Mar 12 12:58:52 2025 by rpki-client