Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4e8e3d-6593-45a7-a3f5-86af3e3c341d/1/U4CMtgATzuuP-ifvubGFlunMwAY.roa
File: U4CMtgATzuuP-ifvubGFlunMwAY.roa (raw, json)
Hash identifier: Iy/6YV/FdLTpfxLAn4JSdIBB+FpNvdryxJpYmkTy88g=
Subject key identifier: 53:80:8C:B6:00:13:CE:EB:8F:FA:27:EF:B9:B1:85:96:E9:CC:C0:06
Certificate issuer: /CN=21a1d1ba22e0f9985f4b96e0e81325d538116737
Certificate serial: 018CCA29E124937BF1D8AF947CEBC59C2663
Authority key identifier: 21:A1:D1:BA:22:E0:F9:98:5F:4B:96:E0:E8:13:25:D5:38:11:67:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaHRuiLg-ZhfS5bg6BMl1TgRZzc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4e8e3d-6593-45a7-a3f5-86af3e3c341d/1/U4CMtgATzuuP-ifvubGFlunMwAY.roa
Signing time: Tue 02 Jan 2024 12:33:11 +0000
ROA not before: Tue 02 Jan 2024 12:33:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62359
IP address blocks: 91.242.173.0/24 maxlen: 24
2001:67c:6d8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:e1:24:93:7b:f1:d8:af:94:7c:eb:c5:9c:26:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a1d1ba22e0f9985f4b96e0e81325d538116737
Validity
Not Before: Jan 2 12:33:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=53808cb60013ceeb8ffa27efb9b18596e9ccc006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:d8:ae:56:95:50:18:15:ec:88:ee:a7:01:
95:53:23:8f:5a:65:b9:f8:8e:59:fa:38:57:c2:12:
fe:95:46:e7:05:ed:46:c1:40:ad:f9:02:c7:af:2e:
3a:1b:b7:be:8a:99:9b:58:15:94:0d:a3:8e:2b:5e:
c1:1f:54:51:8d:29:c2:33:a5:c9:5a:0f:22:33:0d:
10:7c:b7:7e:14:59:c0:28:fe:57:f4:7f:fa:3e:1a:
29:7b:b6:9a:7b:49:fa:ce:de:7e:4c:a7:c9:b1:80:
60:1a:9b:63:1d:73:ba:f7:9d:be:1a:98:0c:7e:d4:
2d:22:62:01:6a:64:10:cb:a3:8d:c5:73:1f:1a:a2:
49:fa:b6:de:bd:10:3b:9a:b8:57:ea:ae:5a:3b:9c:
4e:f9:d6:9d:a0:17:0c:6d:18:7d:07:36:c1:d7:d3:
35:da:3d:75:2e:10:0e:d6:cb:09:94:d8:a0:1f:d5:
f7:e0:99:f9:8d:a6:ef:51:16:52:02:b6:ce:09:d8:
04:7e:ab:39:fa:a9:5b:f2:03:0d:72:fa:12:82:9a:
28:47:57:58:d6:84:04:14:6a:5a:bc:b1:b7:15:f4:
cd:27:1c:b3:eb:b2:40:11:14:29:6a:5e:9b:34:d7:
3c:00:5a:67:31:7c:6d:07:c9:08:6b:5f:d9:e2:be:
29:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:80:8C:B6:00:13:CE:EB:8F:FA:27:EF:B9:B1:85:96:E9:CC:C0:06
X509v3 Authority Key Identifier:
keyid:21:A1:D1:BA:22:E0:F9:98:5F:4B:96:E0:E8:13:25:D5:38:11:67:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaHRuiLg-ZhfS5bg6BMl1TgRZzc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4e8e3d-6593-45a7-a3f5-86af3e3c341d/1/U4CMtgATzuuP-ifvubGFlunMwAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4e8e3d-6593-45a7-a3f5-86af3e3c341d/1/IaHRuiLg-ZhfS5bg6BMl1TgRZzc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.173.0/24
IPv6:
2001:67c:6d8::/48
Signature Algorithm: sha256WithRSAEncryption
66:ac:64:84:c7:3a:48:eb:b0:1c:75:75:22:08:bd:55:f9:41:
56:6a:48:a3:f1:90:65:2a:2a:88:02:eb:10:73:1a:de:08:02:
b6:8a:c7:29:b0:e5:46:93:3d:07:ab:32:cd:9e:8d:9a:05:9e:
48:10:6e:41:1a:55:52:02:2d:9c:c9:c2:26:0b:30:4e:c2:c0:
df:3b:81:c6:2f:03:ed:a9:b7:52:98:4c:7b:ab:d6:af:65:25:
09:fb:ea:34:1c:63:92:9d:1d:b0:ae:b3:d8:ab:6f:d6:81:10:
3d:2a:07:6d:ea:0d:34:15:5c:05:5d:46:01:df:37:07:57:8b:
53:fa:93:3a:ee:e0:2b:0d:90:d7:46:57:86:72:11:a4:bc:d9:
d1:f8:86:88:15:3d:66:2b:f6:73:89:62:cf:d2:85:76:0e:42:
f5:6f:99:69:f9:53:28:02:f6:3b:cd:09:91:58:8b:66:a6:5f:
ef:f6:ee:c0:3a:ca:8f:26:c1:08:be:f5:0d:02:89:91:ff:fa:
d3:81:03:30:aa:15:2b:4d:fb:88:9c:0b:08:b3:24:6a:34:3d:
bd:60:23:ec:e8:0e:06:c2:67:fb:3d:0f:4f:60:16:a8:3e:fc:
a3:f0:d2:38:84:65:c5:ee:3f:f2:cf:21:6c:c2:0d:23:a3:3e:
ff:7f:3d:4f
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYzKKeEkk3vx2K+UfOvFnCZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYTFkMWJhMjJlMGY5OTg1ZjRiOTZlMGU4MTMyNWQ1Mzgx
MTY3MzcwHhcNMjQwMTAyMTIzMzExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzgwOGNiNjAwMTNjZWViOGZmYTI3ZWZiOWIxODU5NmU5Y2NjMDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseHYrlaVUBgV7IjupwGVUyOPWmW5
+I5Z+jhXwhL+lUbnBe1GwUCt+QLHry46G7e+ipmbWBWUDaOOK17BH1RRjSnCM6XJ
Wg8iMw0QfLd+FFnAKP5X9H/6Phope7aae0n6zt5+TKfJsYBgGptjHXO6952+GpgM
ftQtImIBamQQy6ONxXMfGqJJ+rbevRA7mrhX6q5aO5xO+dadoBcMbRh9BzbB19M1
2j11LhAO1ssJlNigH9X34Jn5jabvURZSArbOCdgEfqs5+qlb8gMNcvoSgpooR1dY
1oQEFGpavLG3FfTNJxyz67JAERQpal6bNNc8AFpnMXxtB8kIa1/Z4r4p8wIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFFOAjLYAE87rj/on77mxhZbpzMAGMB8GA1UdIwQY
MBaAFCGh0boi4PmYX0uW4OgTJdU4EWc3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWFIUnVpTGctWmhmUzViZzZCTWwxVGdSWnpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy80ZThlM2QtNjU5My00NWE3LWEzZjUt
ODZhZjNlM2MzNDFkLzEvVTRDTXRnQVR6dXVQLWlmdnViR0ZsdW5Nd0FZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy80ZThlM2QtNjU5My00NWE3LWEzZjUtODZhZjNlM2MzNDFk
LzEvSWFIUnVpTGctWmhmUzViZzZCTWwxVGdSWnpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW/KtMA8E
AgACMAkDBwAgAQZ8BtgwDQYJKoZIhvcNAQELBQADggEBAGasZITHOkjrsBx1dSII
vVX5QVZqSKPxkGUqKogC6xBzGt4IAraKxymw5UaTPQerMs2ejZoFnkgQbkEaVVIC
LZzJwiYLME7CwN87gcYvA+2pt1KYTHur1q9lJQn76jQcY5KdHbCus9irb9aBED0q
B23qDTQVXAVdRgHfNwdXi1P6kzru4CsNkNdGV4ZyEaS82dH4hogVPWYr9nOJYs/S
hXYOQvVvmWn5UygC9jvNCZFYi2amX+/27sA6yo8mwQi+9Q0CiZH/+tOBAzCqFStN
+4icCwizJGo0Pb1gI+zoDgbCZ/s9D09gFqg+/KPw0jiEZcXuP/LPIWzCDSOjPv9/
PU8=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:34:53 2025 by rpki-client