Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/9xvozV0Sfo7a-oMrkY2fIOco-E4.roa
File: 9xvozV0Sfo7a-oMrkY2fIOco-E4.roa (raw, json)
Hash identifier: 2VRW6dlLND2Lp3xRLbodxSsSzYG05UKUdmznQXQmzOM=
Subject key identifier: F7:1B:E8:CD:5D:12:7E:8E:DA:FA:83:2B:91:8D:9F:20:E7:28:F8:4E
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 01942067B95CCBFAAF42599FA737F9839C99
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/9xvozV0Sfo7a-oMrkY2fIOco-E4.roa
Signing time: Wed 01 Jan 2025 05:47:36 +0000
ROA not before: Wed 01 Jan 2025 05:47:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 932
IP address blocks: 91.217.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:b9:5c:cb:fa:af:42:59:9f:a7:37:f9:83:9c:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Jan 1 05:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f71be8cd5d127e8edafa832b918d9f20e728f84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f5:80:a4:85:99:f4:e1:cc:23:8c:95:56:db:
23:83:30:d6:65:0b:ef:de:31:01:59:6f:79:e3:c0:
4c:87:1d:4b:20:55:6b:b6:ce:fd:3f:8d:c2:c5:44:
18:25:e7:34:9a:25:1e:e1:6b:19:ab:ba:f3:40:9e:
d5:f5:7c:c1:9e:d0:e2:1a:f6:d7:aa:42:dd:98:8b:
1e:72:6c:50:31:0e:e0:30:fd:aa:17:26:2c:07:0c:
7c:ea:a9:ff:8a:3c:db:55:a9:67:db:b9:7b:bf:c1:
a6:b4:0f:23:67:86:55:6c:75:08:c7:9b:08:58:93:
d0:7d:83:0a:b6:25:91:7a:0d:0a:30:21:fc:71:ae:
93:35:aa:1c:50:ba:30:4c:13:e0:be:41:eb:89:43:
9b:fa:c4:45:e4:09:7a:58:f1:0f:8e:ef:6e:25:de:
38:bd:0b:c6:9a:28:dc:c7:9c:ee:b1:1c:17:16:86:
c3:69:2b:ad:09:9b:a9:28:d8:03:22:0f:b6:7d:3e:
f6:8e:6f:63:7b:a8:df:1e:69:06:d8:15:19:b5:9b:
00:33:bb:69:3a:d7:ff:6f:f2:59:9f:ba:e8:d4:4c:
74:05:0d:8e:c8:ee:54:d7:74:44:2c:1e:06:16:6a:
dc:7d:c2:8a:fb:83:3a:63:ad:2a:64:88:72:ad:40:
15:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:1B:E8:CD:5D:12:7E:8E:DA:FA:83:2B:91:8D:9F:20:E7:28:F8:4E
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/9xvozV0Sfo7a-oMrkY2fIOco-E4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.162.0/24
Signature Algorithm: sha256WithRSAEncryption
28:0b:f4:2f:bc:4f:ff:99:13:62:70:f0:ba:19:ce:56:1c:d2:
49:80:8c:d8:45:b4:dc:72:a5:64:02:38:4d:1c:60:4f:7e:8b:
00:ff:fc:17:93:4a:de:63:b6:67:ce:fa:d7:15:f2:2f:2a:06:
bc:0d:49:de:00:8b:6c:9b:78:9e:c8:95:1b:d2:6e:4b:63:a1:
88:2f:61:d2:3b:a2:26:ae:24:5d:83:bb:33:7c:bb:8b:c3:5f:
6e:6e:57:3a:bd:3c:eb:0c:94:5e:5e:25:b1:76:c1:07:98:b2:
f4:b6:f9:33:fa:ac:6f:ba:fe:87:8d:ac:8d:d7:df:0a:2b:82:
7e:f8:27:23:8f:06:90:02:07:72:9d:09:7f:62:18:5d:66:5d:
75:4a:71:80:f7:b5:01:5a:f2:50:7e:2e:46:47:9a:b0:a4:7c:
0b:52:6e:21:17:5f:72:e8:6a:dd:87:28:54:11:6f:a8:2d:46:
8b:fa:dc:cb:82:59:a3:2e:e0:04:f5:5e:6e:36:97:83:40:c9:
30:9e:3b:74:2e:df:f5:ad:6f:86:07:59:b3:c2:87:bf:9c:89:
e4:2c:d0:20:e5:49:92:b4:f3:f1:8d:79:34:21:a5:cc:ec:4d:
51:72:2e:eb:ae:4c:fa:82:20:27:97:3a:b7:09:c3:72:4e:93:
80:76:bc:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQgZ7lcy/qvQlmfpzf5g5yZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiMzcxODMzNDFhMmFiNmRmM2M1OWVjODI3ZWQ3MTIwMGI1
YTYyNDQwHhcNMjUwMTAxMDU0NzM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzFiZThjZDVkMTI3ZThlZGFmYTgzMmI5MThkOWYyMGU3MjhmODRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/WApIWZ9OHMI4yVVtsjgzDWZQvv
3jEBWW9548BMhx1LIFVrts79P43CxUQYJec0miUe4WsZq7rzQJ7V9XzBntDiGvbX
qkLdmIsecmxQMQ7gMP2qFyYsBwx86qn/ijzbValn27l7v8GmtA8jZ4ZVbHUIx5sI
WJPQfYMKtiWReg0KMCH8ca6TNaocULowTBPgvkHriUOb+sRF5Al6WPEPju9uJd44
vQvGmijcx5zusRwXFobDaSutCZupKNgDIg+2fT72jm9je6jfHmkG2BUZtZsAM7tp
Otf/b/JZn7ro1Ex0BQ2OyO5U13RELB4GFmrcfcKK+4M6Y60qZIhyrUAVHQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPcb6M1dEn6O2vqDK5GNnyDnKPhOMB8GA1UdIwQY
MBaAFIs3GDNBoqtt88WeyCftcSALWmJEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUt
MDg1MmNiMzUzMjkzLzEvOXh2b3pWMFNmbzdhLW9NcmtZMmZJT2NvLUU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8xYzc4ZTMtNjdkNi00ZTkwLWFlYjUtMDg1MmNiMzUzMjkz
LzEvaXpjWU0wR2lxMjN6eFo3SUotMXhJQXRhWWtRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9miMA0G
CSqGSIb3DQEBCwUAA4IBAQAoC/QvvE//mRNicPC6Gc5WHNJJgIzYRbTccqVkAjhN
HGBPfosA//wXk0reY7ZnzvrXFfIvKga8DUneAItsm3ieyJUb0m5LY6GIL2HSO6Im
riRdg7szfLuLw19ublc6vTzrDJReXiWxdsEHmLL0tvkz+qxvuv6HjayN198KK4J+
+CcjjwaQAgdynQl/YhhdZl11SnGA97UBWvJQfi5GR5qwpHwLUm4hF19y6GrdhyhU
EW+oLUaL+tzLglmjLuAE9V5uNpeDQMkwnjt0Lt/1rW+GB1mzwoe/nInkLNAg5UmS
tPPxjXk0IaXM7E1Rci7rrkz6giAnlzq3CcNyTpOAdrwv
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:40:37 2025 by rpki-client