Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/5ROabaZ0IQjGvjydG24dxkFdbIw.roa
File: 5ROabaZ0IQjGvjydG24dxkFdbIw.roa (raw, json)
Hash identifier: VZzap9WlH6EGkLU7RiUuipaz7yv8laZyaoXJmwbYxFo=
Subject key identifier: E5:13:9A:6D:A6:74:21:08:C6:BE:3C:9D:1B:6E:1D:C6:41:5D:6C:8C
Certificate issuer: /CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Certificate serial: 0195CC963102655E763808DC463EDD8FDD02
Authority key identifier: 8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/5ROabaZ0IQjGvjydG24dxkFdbIw.roa
Signing time: Tue 25 Mar 2025 09:15:49 +0000
ROA not before: Tue 25 Mar 2025 09:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49544
IP address blocks: 91.221.208.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:cc:96:31:02:65:5e:76:38:08:dc:46:3e:dd:8f:dd:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aab4c0cf21c1a3d6ea41068cbe908be388e450a
Validity
Not Before: Mar 25 09:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5139a6da6742108c6be3c9d1b6e1dc6415d6c8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:36:f0:53:3d:71:34:ab:2d:1a:55:8a:99:b4:
18:8e:ef:3a:60:7a:20:28:01:d9:de:bb:c9:c3:b1:
11:b6:54:87:02:57:23:fe:98:37:0c:c3:24:be:f0:
cf:8e:52:c1:d4:f6:ae:93:20:31:0c:df:54:52:60:
1d:6f:7a:a4:0d:71:9a:7f:0f:10:8f:c2:b7:bd:af:
95:33:a7:99:ef:47:6b:3d:c3:76:7c:2a:44:eb:02:
11:5d:82:8b:4a:24:54:a7:01:15:95:c9:25:22:97:
91:8e:51:eb:30:71:ac:48:bf:cb:5e:fe:a5:ac:c9:
a2:41:62:08:b1:19:c2:34:2b:b2:67:dd:97:54:a4:
3f:59:6f:0f:b0:7b:76:9e:19:2a:8a:c7:22:37:b3:
76:42:35:96:f8:b5:96:1b:86:04:c5:8d:10:99:93:
6e:4c:48:81:27:e3:80:73:90:a6:95:1c:eb:91:b9:
80:91:0b:ed:6d:a1:03:9d:6e:19:b1:54:af:32:ce:
09:28:1d:75:3e:0b:65:ae:2b:ed:7c:95:25:e1:e2:
ec:b1:01:fb:0a:d3:24:04:04:e0:e1:55:40:f0:92:
0e:cb:83:cf:67:fd:e9:ec:18:4d:2f:f6:7f:7b:a3:
70:25:be:13:5d:bc:cd:d8:d2:15:be:43:a8:e2:c0:
a1:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:13:9A:6D:A6:74:21:08:C6:BE:3C:9D:1B:6E:1D:C6:41:5D:6C:8C
X509v3 Authority Key Identifier:
keyid:8A:AB:4C:0C:F2:1C:1A:3D:6E:A4:10:68:CB:E9:08:BE:38:8E:45:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iqtMDPIcGj1upBBoy-kIvjiORQo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/5ROabaZ0IQjGvjydG24dxkFdbIw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/740c1e-1a4c-4ca2-bd53-537b1b49dfe7/1/iqtMDPIcGj1upBBoy-kIvjiORQo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.208.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:6b:16:35:1f:83:be:15:36:4c:ca:60:d6:45:50:ab:7b:f2:
36:08:34:ae:7d:6b:89:fc:4a:92:64:6c:9b:7b:36:3e:50:2e:
40:24:80:12:39:06:46:3b:51:8d:39:fe:66:a6:0a:76:3f:d4:
af:37:ab:d2:b1:50:8f:63:50:41:45:3d:20:1d:0d:b4:6b:6d:
b8:ac:ea:d1:30:2b:75:0c:19:e7:5a:5c:2f:7a:b8:07:82:3d:
b4:fd:84:be:96:57:2a:13:15:e5:bd:78:d9:68:12:43:28:15:
af:f6:41:65:10:2a:f3:68:df:a0:54:48:f0:3e:e2:bc:be:92:
e3:fa:97:5d:35:fa:16:e8:a1:c1:47:8c:0c:df:66:91:ec:49:
df:90:f8:b6:83:9a:eb:0e:c5:b7:1e:09:5d:e4:59:d4:41:1d:
4d:e8:5a:ee:aa:94:8b:3f:45:4e:0b:ca:22:cf:2a:8a:94:d2:
b7:eb:46:8c:fd:d1:bf:a6:0e:3d:b1:90:83:78:15:49:fb:28:
3a:ea:5e:ac:a1:39:0a:cd:b2:9a:71:8e:82:73:a3:b3:6e:da:
97:76:b8:70:74:e8:69:7e:cb:08:1e:df:64:39:e6:40:19:f0:
dd:27:ea:1d:8d:b2:ce:21:69:fe:44:04:fd:6e:ca:46:93:2b:
fd:c2:61:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZXMljECZV52OAjcRj7dj90CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhYWI0YzBjZjIxYzFhM2Q2ZWE0MTA2OGNiZTkwOGJlMzg4
ZTQ1MGEwHhcNMjUwMzI1MDkxNTQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlNTEzOWE2ZGE2NzQyMTA4YzZiZTNjOWQxYjZlMWRjNjQxNWQ2YzhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DbwUz1xNKstGlWKmbQYju86YHog
KAHZ3rvJw7ERtlSHAlcj/pg3DMMkvvDPjlLB1PaukyAxDN9UUmAdb3qkDXGafw8Q
j8K3va+VM6eZ70drPcN2fCpE6wIRXYKLSiRUpwEVlcklIpeRjlHrMHGsSL/LXv6l
rMmiQWIIsRnCNCuyZ92XVKQ/WW8PsHt2nhkqisciN7N2QjWW+LWWG4YExY0QmZNu
TEiBJ+OAc5CmlRzrkbmAkQvtbaEDnW4ZsVSvMs4JKB11PgtlrivtfJUl4eLssQH7
CtMkBATg4VVA8JIOy4PPZ/3p7BhNL/Z/e6NwJb4TXbzN2NIVvkOo4sChJQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOUTmm2mdCEIxr48nRtuHcZBXWyMMB8GA1UdIwQY
MBaAFIqrTAzyHBo9bqQQaMvpCL44jkUKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXF0TURQSWNHajF1cEJCb3kta0l2amlPUlFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS83NDBjMWUtMWE0Yy00Y2EyLWJkNTMt
NTM3YjFiNDlkZmU3LzEvNVJPYWJhWjBJUWpHdmp5ZEcyNGR4a0ZkYkl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS83NDBjMWUtMWE0Yy00Y2EyLWJkNTMtNTM3YjFiNDlkZmU3
LzEvaXF0TURQSWNHajF1cEJCb3kta0l2amlPUlFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW93QMA0G
CSqGSIb3DQEBCwUAA4IBAQBNaxY1H4O+FTZMymDWRVCre/I2CDSufWuJ/EqSZGyb
ezY+UC5AJIASOQZGO1GNOf5mpgp2P9SvN6vSsVCPY1BBRT0gHQ20a224rOrRMCt1
DBnnWlwvergHgj20/YS+llcqExXlvXjZaBJDKBWv9kFlECrzaN+gVEjwPuK8vpLj
+pddNfoW6KHBR4wM32aR7EnfkPi2g5rrDsW3Hgld5FnUQR1N6FruqpSLP0VOC8oi
zyqKlNK360aM/dG/pg49sZCDeBVJ+yg66l6soTkKzbKacY6Cc6OzbtqXdrhwdOhp
fssIHt9kOeZAGfDdJ+odjbLOIWn+RAT9bspGkyv9wmFv
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:28:54 2025 by rpki-client