Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/9svdSi4VMR39LcPpfRqTZ_ivzWU.roa
File: 9svdSi4VMR39LcPpfRqTZ_ivzWU.roa (raw, json)
Hash identifier: qkFZEN8wS5/7d3PWnlFnfBgG42VLZsiC6RIzbDuNeoI=
Subject key identifier: F6:CB:DD:4A:2E:15:31:1D:FD:2D:C3:E9:7D:1A:93:67:F8:AF:CD:65
Certificate issuer: /CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Certificate serial: 01942444FA386540BEA32267C4D63DA5FAD2
Authority key identifier: 15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/9svdSi4VMR39LcPpfRqTZ_ivzWU.roa
Signing time: Wed 01 Jan 2025 23:48:07 +0000
ROA not before: Wed 01 Jan 2025 23:48:07 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 394814
IP address blocks: 91.239.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:fa:38:65:40:be:a3:22:67:c4:d6:3d:a5:fa:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15403e157c82f75efa7c54a9bc7d0d1bf01b1cae
Validity
Not Before: Jan 1 23:48:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f6cbdd4a2e15311dfd2dc3e97d1a9367f8afcd65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f4:76:ab:c4:e7:4f:67:12:60:2d:dd:57:6d:
17:0a:93:70:48:3b:b1:f7:8a:ce:df:8a:0d:55:b7:
0f:08:bf:5a:91:b0:80:a3:7e:e1:4b:57:0d:a7:cc:
81:1d:b9:14:38:0a:e9:ae:0e:7c:99:1f:03:7f:dd:
d5:72:27:e0:29:8e:f2:b1:86:5d:24:26:79:e2:b8:
4d:f0:e2:f3:00:d5:4f:da:f0:96:ff:d7:5d:b0:de:
4e:8d:da:8e:a2:44:98:c9:8c:2a:4c:0d:5b:a0:6b:
a5:3a:ad:c8:4f:87:dc:bd:11:0c:de:dc:8e:c5:32:
97:e0:88:3d:7d:bf:40:9f:58:b8:d9:61:b2:65:63:
e5:ab:f9:b7:d8:82:e9:ea:8d:0f:c0:d6:b2:c9:a7:
08:ed:3a:bb:34:08:74:b3:75:2f:f3:63:57:f1:5d:
dd:ee:1e:92:ee:ec:5b:d8:fe:d6:01:e4:de:d1:51:
79:71:50:2c:fe:5b:28:73:75:3f:2a:f2:57:5a:95:
21:84:a7:6e:5a:06:34:c3:9e:35:b8:e9:b3:d4:8f:
11:d4:d3:a3:39:d3:f9:df:60:53:fd:34:ee:1b:37:
b5:70:ea:4b:0d:21:5c:0c:d7:6f:99:b5:30:68:9e:
d3:60:60:11:5b:4e:c8:2f:df:1f:37:80:4a:5c:b1:
60:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:CB:DD:4A:2E:15:31:1D:FD:2D:C3:E9:7D:1A:93:67:F8:AF:CD:65
X509v3 Authority Key Identifier:
keyid:15:40:3E:15:7C:82:F7:5E:FA:7C:54:A9:BC:7D:0D:1B:F0:1B:1C:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FUA-FXyC9176fFSpvH0NG_AbHK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/9svdSi4VMR39LcPpfRqTZ_ivzWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/eaf880-7106-4d33-8735-334f9429248e/1/FUA-FXyC9176fFSpvH0NG_AbHK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.187.0/24
Signature Algorithm: sha256WithRSAEncryption
59:62:cb:fb:71:dd:09:47:32:ec:d8:8e:48:3a:4b:1a:f6:b0:
2b:2d:00:0e:65:5e:2a:6a:71:b0:3d:be:20:3f:93:b7:05:13:
be:f9:91:05:96:78:f9:d6:0c:0a:3a:5a:7a:8f:ff:ff:05:d0:
75:e4:7f:bf:f8:2b:53:10:46:24:be:c1:b1:77:76:e3:19:ea:
8b:af:25:f8:e7:6b:b6:97:f7:4d:7a:9e:5c:d1:d7:6e:e7:78:
c2:8a:54:94:51:7d:d4:c9:f1:b2:cc:58:5f:98:f9:c6:4a:0b:
e4:72:d6:62:2f:fa:ba:1a:51:d4:d4:c1:70:bb:26:8f:68:60:
0f:82:cf:a3:e2:3f:f8:97:fb:37:bb:2e:6a:7a:0e:a1:4a:9d:
a8:2d:f9:a1:35:62:b8:5c:50:0a:a2:22:20:c4:fa:97:3e:b3:
8f:a9:19:6c:bf:32:17:f9:e2:38:57:d7:be:40:64:a7:da:bf:
67:7d:8f:9b:f5:a7:80:da:cd:69:2b:32:6d:94:92:8c:8a:fe:
c2:00:ff:39:85:fb:e4:4f:81:39:f3:b9:71:45:87:13:53:42:
fa:4e:20:35:11:b0:6f:23:23:08:45:5f:f2:df:a0:62:b0:85:
f8:8b:5a:d3:62:aa:ec:08:22:51:3c:05:e6:b5:24:f3:5a:13:
92:33:63:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRPo4ZUC+oyJnxNY9pfrSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1NDAzZTE1N2M4MmY3NWVmYTdjNTRhOWJjN2QwZDFiZjAx
YjFjYWUwHhcNMjUwMTAxMjM0ODA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNmNiZGQ0YTJlMTUzMTFkZmQyZGMzZTk3ZDFhOTM2N2Y4YWZjZDY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy/R2q8TnT2cSYC3dV20XCpNwSDux
94rO34oNVbcPCL9akbCAo37hS1cNp8yBHbkUOArprg58mR8Df93VcifgKY7ysYZd
JCZ54rhN8OLzANVP2vCW/9ddsN5OjdqOokSYyYwqTA1boGulOq3IT4fcvREM3tyO
xTKX4Ig9fb9An1i42WGyZWPlq/m32ILp6o0PwNayyacI7Tq7NAh0s3Uv82NX8V3d
7h6S7uxb2P7WAeTe0VF5cVAs/lsoc3U/KvJXWpUhhKduWgY0w541uOmz1I8R1NOj
OdP532BT/TTuGze1cOpLDSFcDNdvmbUwaJ7TYGARW07IL98fN4BKXLFgZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPbL3UouFTEd/S3D6X0ak2f4r81lMB8GA1UdIwQY
MBaAFBVAPhV8gvde+nxUqbx9DRvwGxyuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlVBLUZYeUM5MTc2ZkZTcHZIME5HX0FiSEs0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9lYWY4ODAtNzEwNi00ZDMzLTg3MzUt
MzM0Zjk0MjkyNDhlLzEvOXN2ZFNpNFZNUjM5TGNQcGZScVRaX2l2eldVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9lYWY4ODAtNzEwNi00ZDMzLTg3MzUtMzM0Zjk0MjkyNDhl
LzEvRlVBLUZYeUM5MTc2ZkZTcHZIME5HX0FiSEs0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW++7MA0G
CSqGSIb3DQEBCwUAA4IBAQBZYsv7cd0JRzLs2I5IOksa9rArLQAOZV4qanGwPb4g
P5O3BRO++ZEFlnj51gwKOlp6j///BdB15H+/+CtTEEYkvsGxd3bjGeqLryX452u2
l/dNep5c0ddu53jCilSUUX3UyfGyzFhfmPnGSgvkctZiL/q6GlHU1MFwuyaPaGAP
gs+j4j/4l/s3uy5qeg6hSp2oLfmhNWK4XFAKoiIgxPqXPrOPqRlsvzIX+eI4V9e+
QGSn2r9nfY+b9aeA2s1pKzJtlJKMiv7CAP85hfvkT4E587lxRYcTU0L6TiA1EbBv
IyMIRV/y36BisIX4i1rTYqrsCCJRPAXmtSTzWhOSM2O4
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:54:55 2025 by rpki-client