Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/cO5HXhdkW-9sTYlyxMUlTq4VrHM.roa
File: cO5HXhdkW-9sTYlyxMUlTq4VrHM.roa (raw, json)
Hash identifier: 2vNmvGiB6oqNqpjdkXzwA+2UM7st3DevXSjO7XrFVio=
Subject key identifier: 70:EE:47:5E:17:64:5B:EF:6C:4D:89:72:C4:C5:25:4E:AE:15:AC:73
Certificate issuer: /CN=ae3cc567febfe34878aeb913861cf0600a283903
Certificate serial: 019420D6244E56C26A69B9BB4356C50ECBEE
Authority key identifier: AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/cO5HXhdkW-9sTYlyxMUlTq4VrHM.roa
Signing time: Wed 01 Jan 2025 07:48:12 +0000
ROA not before: Wed 01 Jan 2025 07:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51881
IP address blocks: 91.220.167.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:24:4e:56:c2:6a:69:b9:bb:43:56:c5:0e:cb:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae3cc567febfe34878aeb913861cf0600a283903
Validity
Not Before: Jan 1 07:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=70ee475e17645bef6c4d8972c4c5254eae15ac73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bd:fa:2b:4c:dc:41:a9:e9:55:be:4c:64:d7:
65:15:85:2c:b5:41:79:d7:ef:03:b2:bd:6c:1d:d3:
73:51:91:78:37:72:b0:29:2a:cb:f0:7f:1f:7f:db:
32:b1:51:ba:45:32:92:99:8b:04:3c:d9:83:4a:eb:
68:89:1b:a1:02:5b:14:bb:bc:a6:9b:4f:dc:be:34:
86:ad:4a:36:36:d3:aa:89:d5:49:96:dd:51:80:ed:
99:a5:60:fe:eb:96:2a:2f:5e:9d:58:32:d8:1a:7e:
b4:27:ef:dd:be:4e:9f:36:d2:aa:97:8e:22:a7:13:
85:5f:d7:e9:f5:a8:b5:4b:91:c7:82:c4:96:6c:61:
38:1d:86:cc:27:cb:4f:69:fc:00:9d:d5:6d:89:07:
a8:48:8a:4b:3c:a6:92:bb:8c:e2:cb:87:5e:9c:7c:
61:ab:70:85:ef:72:2a:0f:e3:b6:46:6e:8c:b6:76:
4f:52:9f:96:37:f3:9b:7e:14:ab:62:f2:a4:6c:51:
03:8c:b0:86:71:4d:6f:00:04:07:0e:56:b1:d7:da:
1c:19:83:ed:ae:6b:e5:f0:39:ba:fb:51:3a:c5:97:
2d:42:03:72:05:23:0e:80:25:4e:e0:b0:7b:b6:09:
49:3e:64:4c:91:4d:a8:7c:1c:c3:af:7f:63:fe:c0:
79:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:EE:47:5E:17:64:5B:EF:6C:4D:89:72:C4:C5:25:4E:AE:15:AC:73
X509v3 Authority Key Identifier:
keyid:AE:3C:C5:67:FE:BF:E3:48:78:AE:B9:13:86:1C:F0:60:0A:28:39:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjzFZ_6_40h4rrkThhzwYAooOQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/cO5HXhdkW-9sTYlyxMUlTq4VrHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/299278-c57c-4354-b966-9fb224be8b08/1/rjzFZ_6_40h4rrkThhzwYAooOQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.167.0/24
Signature Algorithm: sha256WithRSAEncryption
34:39:a7:df:3c:70:3c:ea:16:69:4b:16:e5:1d:9f:14:2d:5e:
ba:5e:ac:8f:7e:7e:6c:12:a1:b2:d5:77:b0:3c:f0:b4:85:73:
fb:13:43:38:35:56:95:ff:76:d7:3e:94:be:8d:8b:bd:7f:2b:
ea:c1:7b:7f:a6:8e:c8:51:c0:94:fe:5d:94:c5:51:c8:6b:50:
98:47:f9:9c:d7:bd:c0:61:3d:dd:5c:a4:9d:a7:f4:2e:48:2e:
7a:33:bf:c4:00:56:9f:e5:01:b6:04:4e:27:d9:ca:3b:ec:c7:
20:ef:62:5c:f1:e7:f9:f2:e1:9d:16:fa:95:7f:fa:9a:d0:cd:
ee:43:19:1d:5d:b6:40:23:75:22:1b:2b:23:e4:13:ff:1e:6f:
e6:a2:25:56:dc:65:67:d8:65:28:c7:fb:d7:5a:53:8d:41:1f:
52:35:5c:f8:0f:d5:92:82:10:f9:d0:3a:b2:41:fa:e5:f8:e8:
ae:8a:e6:b6:23:35:53:b5:a2:21:66:55:99:29:b4:37:76:99:
ef:71:d8:40:87:c2:62:13:2c:07:a7:21:aa:6a:f5:36:dc:90:
25:06:84:c6:fb:75:db:33:60:8c:17:db:d9:4f:b0:e9:c1:6f:
84:5e:49:70:1d:ef:bd:db:5e:1f:46:93:ee:b2:8b:c3:55:76:
09:06:53:20
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1iROVsJqabm7Q1bFDsvuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlM2NjNTY3ZmViZmUzNDg3OGFlYjkxMzg2MWNmMDYwMGEy
ODM5MDMwHhcNMjUwMTAxMDc0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MGVlNDc1ZTE3NjQ1YmVmNmM0ZDg5NzJjNGM1MjU0ZWFlMTVhYzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwb36K0zcQanpVb5MZNdlFYUstUF5
1+8Dsr1sHdNzUZF4N3KwKSrL8H8ff9sysVG6RTKSmYsEPNmDSutoiRuhAlsUu7ym
m0/cvjSGrUo2NtOqidVJlt1RgO2ZpWD+65YqL16dWDLYGn60J+/dvk6fNtKql44i
pxOFX9fp9ai1S5HHgsSWbGE4HYbMJ8tPafwAndVtiQeoSIpLPKaSu4ziy4denHxh
q3CF73IqD+O2Rm6MtnZPUp+WN/ObfhSrYvKkbFEDjLCGcU1vAAQHDlax19ocGYPt
rmvl8Dm6+1E6xZctQgNyBSMOgCVO4LB7tglJPmRMkU2ofBzDr39j/sB5aQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHDuR14XZFvvbE2JcsTFJU6uFaxzMB8GA1UdIwQY
MBaAFK48xWf+v+NIeK65E4Yc8GAKKDkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmp6RlpfNl80MGg0cnJrVGhoendZQW9vT1FNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yOTkyNzgtYzU3Yy00MzU0LWI5NjYt
OWZiMjI0YmU4YjA4LzEvY081SFhoZGtXLTlzVFlseXhNVWxUcTRWckhNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8yOTkyNzgtYzU3Yy00MzU0LWI5NjYtOWZiMjI0YmU4YjA4
LzEvcmp6RlpfNl80MGg0cnJrVGhoendZQW9vT1FNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9ynMA0G
CSqGSIb3DQEBCwUAA4IBAQA0OaffPHA86hZpSxblHZ8ULV66XqyPfn5sEqGy1Xew
PPC0hXP7E0M4NVaV/3bXPpS+jYu9fyvqwXt/po7IUcCU/l2UxVHIa1CYR/mc173A
YT3dXKSdp/QuSC56M7/EAFaf5QG2BE4n2co77Mcg72Jc8ef58uGdFvqVf/qa0M3u
QxkdXbZAI3UiGysj5BP/Hm/moiVW3GVn2GUox/vXWlONQR9SNVz4D9WSghD50Dqy
Qfrl+Oiuiua2IzVTtaIhZlWZKbQ3dpnvcdhAh8JiEywHpyGqavU23JAlBoTG+3Xb
M2CMF9vZT7DpwW+EXklwHe+9214fRpPusovDVXYJBlMg
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:42 2025 by rpki-client