Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/76Ku33Cd5KsPOVQ_rrv1K1Vs0YE.roa
File: 76Ku33Cd5KsPOVQ_rrv1K1Vs0YE.roa (raw, json)
Hash identifier: bIpzoQN0+h6aCP8Twi97DZJlMh4h4gDxfzUCEkLuFOM=
Subject key identifier: EF:A2:AE:DF:70:9D:E4:AB:0F:39:54:3F:AE:BB:F5:2B:55:6C:D1:81
Certificate issuer: /CN=46d713ada8dabcf77681c0ca42d9969e447c8ea7
Certificate serial: 019567B91E239A0B9176C88D773CA9F0FF84
Authority key identifier: 46:D7:13:AD:A8:DA:BC:F7:76:81:C0:CA:42:D9:96:9E:44:7C:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtcTrajavPd2gcDKQtmWnkR8jqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/76Ku33Cd5KsPOVQ_rrv1K1Vs0YE.roa
Signing time: Wed 05 Mar 2025 19:12:19 +0000
ROA not before: Wed 05 Mar 2025 19:12:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137897
IP address blocks: 91.209.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:67:b9:1e:23:9a:0b:91:76:c8:8d:77:3c:a9:f0:ff:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d713ada8dabcf77681c0ca42d9969e447c8ea7
Validity
Not Before: Mar 5 19:12:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efa2aedf709de4ab0f39543faebbf52b556cd181
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ec:7a:77:7d:58:15:ff:5f:33:85:7c:c5:6a:
5d:e7:63:f0:5e:ee:ec:bc:73:68:ef:0d:22:59:cc:
51:b7:52:9e:73:80:45:92:6b:ea:cf:9b:1c:ae:cb:
de:e7:37:28:15:ff:b1:fa:7d:d7:50:b5:52:14:1e:
81:3c:da:b3:70:53:2b:64:71:6d:35:32:35:d1:4b:
e4:6e:f0:09:b4:51:3e:4b:ab:bd:c5:70:a8:9e:67:
7b:66:2c:ed:ec:93:17:27:87:25:c7:33:86:0d:b3:
03:7e:29:a7:14:bf:44:4c:7f:30:7a:3f:ca:17:bb:
ad:25:8c:3c:3b:26:7b:5e:7c:03:eb:b4:40:2a:ac:
30:73:af:cd:8a:2f:57:9b:48:6c:8b:75:f7:26:c0:
12:76:49:3c:cc:7e:e4:6b:87:4b:66:6f:e9:9c:3c:
8f:65:5c:b8:58:61:48:a6:cb:3a:f6:ad:cf:95:f6:
56:e6:bf:1c:d3:0f:04:f7:e8:3f:a5:d2:45:81:0a:
27:fa:39:6f:76:53:6d:37:f0:e5:b8:30:ed:9a:16:
16:ef:a1:9d:b9:7e:20:a9:17:40:53:12:a9:50:5c:
b4:5d:29:69:ee:8f:73:3e:ad:48:c4:5c:aa:2d:3b:
ab:da:fe:28:9c:78:c7:a6:ba:20:78:9d:f5:85:a1:
a8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:A2:AE:DF:70:9D:E4:AB:0F:39:54:3F:AE:BB:F5:2B:55:6C:D1:81
X509v3 Authority Key Identifier:
keyid:46:D7:13:AD:A8:DA:BC:F7:76:81:C0:CA:42:D9:96:9E:44:7C:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtcTrajavPd2gcDKQtmWnkR8jqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/76Ku33Cd5KsPOVQ_rrv1K1Vs0YE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/RtcTrajavPd2gcDKQtmWnkR8jqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.40.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:09:cf:f3:76:7b:80:b2:00:eb:ec:2a:58:ad:b8:b8:cb:d8:
27:bf:28:81:54:31:e9:40:17:e6:7c:c4:67:6d:b0:77:ef:79:
59:bb:81:87:33:58:00:25:75:b1:0e:38:f0:0c:34:a7:83:6d:
49:7c:41:2b:ed:93:81:95:61:12:a9:9f:aa:e5:29:2f:d1:d4:
67:3c:5d:d2:e4:0a:d9:ff:12:6a:37:79:0c:fb:c9:82:c3:94:
2e:64:36:bc:d6:7b:d1:26:53:e1:91:7a:10:0e:c8:b1:cb:81:
92:be:b6:07:da:d1:c1:5b:26:a3:0e:56:d1:de:4e:d9:10:24:
49:6f:44:bf:1a:53:67:7f:5d:76:cd:21:26:a1:0e:9e:ab:0d:
f3:df:15:d0:93:68:2b:75:92:79:69:84:07:aa:68:c1:f6:ad:
3a:88:2a:44:c9:44:18:d7:64:3e:26:36:07:99:a8:5f:fd:bc:
a0:ae:5d:58:ad:fb:84:21:96:91:d6:3c:8e:4f:bb:b8:5c:a9:
a6:3b:f1:dd:d1:1d:91:fb:e6:3b:88:45:33:8e:df:59:fc:2a:
3c:57:1d:8f:61:bf:a5:95:e6:5e:10:17:d4:6b:47:94:3d:c0:
8d:32:89:43:50:20:6a:21:f1:dd:77:0b:1a:7d:d0:b8:2d:a8:
fb:e4:5e:74
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVnuR4jmguRdsiNdzyp8P+EMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZDcxM2FkYThkYWJjZjc3NjgxYzBjYTQyZDk5NjllNDQ3
YzhlYTcwHhcNMjUwMzA1MTkxMjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZmEyYWVkZjcwOWRlNGFiMGYzOTU0M2ZhZWJiZjUyYjU1NmNkMTgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOx6d31YFf9fM4V8xWpd52PwXu7s
vHNo7w0iWcxRt1Kec4BFkmvqz5scrsve5zcoFf+x+n3XULVSFB6BPNqzcFMrZHFt
NTI10UvkbvAJtFE+S6u9xXConmd7Zizt7JMXJ4clxzOGDbMDfimnFL9ETH8wej/K
F7utJYw8OyZ7XnwD67RAKqwwc6/Nii9Xm0hsi3X3JsASdkk8zH7ka4dLZm/pnDyP
ZVy4WGFIpss69q3PlfZW5r8c0w8E9+g/pdJFgQon+jlvdlNtN/DluDDtmhYW76Gd
uX4gqRdAUxKpUFy0XSlp7o9zPq1IxFyqLTur2v4onHjHprogeJ31haGodwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFO+irt9wneSrDzlUP6679StVbNGBMB8GA1UdIwQY
MBaAFEbXE62o2rz3doHAykLZlp5EfI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnRjVHJhamF2UGQyZ2NES1F0bVdua1I4anFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84OWYwZjYtYTVhYy00NjdiLWE0YWQt
YmUyMThjZWY0YTExLzEvNzZLdTMzQ2Q1S3NQT1ZRX3JydjFLMVZzMFlFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84OWYwZjYtYTVhYy00NjdiLWE0YWQtYmUyMThjZWY0YTEx
LzEvUnRjVHJhamF2UGQyZ2NES1F0bVdua1I4anFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9EoMA0G
CSqGSIb3DQEBCwUAA4IBAQDXCc/zdnuAsgDr7CpYrbi4y9gnvyiBVDHpQBfmfMRn
bbB373lZu4GHM1gAJXWxDjjwDDSng21JfEEr7ZOBlWESqZ+q5Skv0dRnPF3S5ArZ
/xJqN3kM+8mCw5QuZDa81nvRJlPhkXoQDsixy4GSvrYH2tHBWyajDlbR3k7ZECRJ
b0S/GlNnf112zSEmoQ6eqw3z3xXQk2grdZJ5aYQHqmjB9q06iCpEyUQY12Q+JjYH
mahf/bygrl1YrfuEIZaR1jyOT7u4XKmmO/Hd0R2R++Y7iEUzjt9Z/Co8Vx2PYb+l
leZeEBfUa0eUPcCNMolDUCBqIfHddwsafdC4Laj75F50
-----END CERTIFICATE-----
Generated at Mon Apr 21 04:05:35 2025 by rpki-client