Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/598cc9-5177-42ee-8e77-fc27ebe12820/1/2khX9ew-aFezPUJbNUPt3t-Hj_w.roa
File: 2khX9ew-aFezPUJbNUPt3t-Hj_w.roa (raw, json)
Hash identifier: AcaMB0gb/+AVR+Pj9Efhe3kEvi0/uAkf62bg2bpfxD0=
Subject key identifier: DA:48:57:F5:EC:3E:68:57:B3:3D:42:5B:35:43:ED:DE:DF:87:8F:FC
Certificate issuer: /CN=faf120871ddc35d73b94babe36fa0ff9412b0154
Certificate serial: 050093A6
Authority key identifier: FA:F1:20:87:1D:DC:35:D7:3B:94:BA:BE:36:FA:0F:F9:41:2B:01:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-vEghx3cNdc7lLq-NvoP-UErAVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/598cc9-5177-42ee-8e77-fc27ebe12820/1/2khX9ew-aFezPUJbNUPt3t-Hj_w.roa
Signing time: Sat 01 Jan 2022 07:58:44 +0000
ROA not before: Sat 01 Jan 2022 07:58:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213222
IP address blocks: 91.220.113.0/24 maxlen: 24
2a06:ef00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 83923878 (0x50093a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faf120871ddc35d73b94babe36fa0ff9412b0154
Validity
Not Before: Jan 1 07:58:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=da4857f5ec3e6857b33d425b3543eddedf878ffc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:9a:cb:ec:44:41:29:45:3c:1d:b0:a2:6a:c1:
27:94:ec:05:a4:4b:5c:66:c2:90:4c:93:86:2c:fd:
01:dd:d3:26:fa:9b:9c:55:4a:15:d0:4d:d1:83:ff:
b4:ce:6f:e4:0c:88:d0:75:6e:bc:d1:4b:9b:81:b0:
b2:22:be:4e:0f:81:c4:25:70:d0:5d:c1:e3:76:c9:
8d:a0:d4:41:4f:9c:41:82:65:8a:fe:0d:e8:a7:a5:
09:96:58:19:3d:f9:38:df:10:02:bb:29:b5:d4:dc:
1d:3e:68:7e:65:08:34:96:1a:4a:d1:0c:d6:54:ef:
24:fd:b6:1f:9d:6c:62:e2:47:f6:fb:4f:fa:9c:a2:
d1:5e:c2:0e:a3:20:56:f9:69:ca:4a:9c:35:50:4c:
9d:97:19:65:8f:e4:8a:0d:97:82:2b:cf:91:a2:ad:
14:74:50:bc:bc:b1:a7:1e:55:4c:4d:a0:0c:da:e3:
c7:dc:ca:35:cd:9f:74:f1:27:58:03:8a:6b:4d:0a:
dc:82:23:0a:b3:1d:9c:1c:e6:d5:8c:9e:23:7d:6e:
79:9d:49:03:f4:3b:52:c9:b2:51:44:86:67:f3:4f:
01:b3:14:34:0c:e2:76:de:cc:2b:46:53:2d:b4:4e:
cf:d1:b7:77:2d:c1:b1:9b:c9:87:af:6a:52:4e:c9:
9f:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:48:57:F5:EC:3E:68:57:B3:3D:42:5B:35:43:ED:DE:DF:87:8F:FC
X509v3 Authority Key Identifier:
keyid:FA:F1:20:87:1D:DC:35:D7:3B:94:BA:BE:36:FA:0F:F9:41:2B:01:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vEghx3cNdc7lLq-NvoP-UErAVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/598cc9-5177-42ee-8e77-fc27ebe12820/1/2khX9ew-aFezPUJbNUPt3t-Hj_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/598cc9-5177-42ee-8e77-fc27ebe12820/1/1-vEghx3cNdc7lLq-NvoP-UErAVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.113.0/24
IPv6:
2a06:ef00::/29
Signature Algorithm: sha256WithRSAEncryption
9c:9c:55:79:c3:2e:0f:11:1a:4f:62:f6:fa:ac:44:51:42:45:
07:dc:fd:5d:e6:d6:1b:e2:35:b2:c8:54:8a:34:0e:a1:40:cb:
23:69:38:b8:22:45:a1:05:a2:42:1c:75:4e:92:08:37:f3:c1:
27:39:b9:1b:fa:37:9e:27:ed:f1:08:8c:81:af:cf:f7:40:b5:
0e:a9:8a:97:7b:96:a2:5e:58:ad:98:fd:65:9f:eb:18:39:60:
d4:3d:f8:a1:0e:fc:35:82:e0:b7:ed:e9:9d:3f:eb:e4:8e:39:
91:cb:28:53:c3:ab:bb:b5:9e:3f:98:d9:1d:18:00:f0:8d:67:
ee:e8:b5:37:d3:8b:71:2e:24:10:7c:ca:0f:b7:b7:96:4e:26:
4f:56:bb:d7:a6:0e:22:71:f7:bb:27:a1:c6:b2:51:1f:9f:80:
33:44:78:8d:09:f7:79:2f:e7:25:9f:f6:0d:b5:e6:2c:96:f1:
14:b7:6e:dd:fd:62:4e:49:bd:df:83:bd:08:a1:da:6a:42:45:
14:3b:1c:da:21:d2:6f:7d:5f:0f:f2:7f:cd:f4:13:ba:98:b6:
c0:ce:25:ac:69:44:95:67:8e:ad:fe:de:eb:d1:90:d1:ab:91:
40:c2:90:1a:4d:e8:43:7e:c4:62:f9:7d:01:3a:66:6a:ab:45:
33:08:08:20
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgIEBQCTpjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhm
YWYxMjA4NzFkZGMzNWQ3M2I5NGJhYmUzNmZhMGZmOTQxMmIwMTU0MB4XDTIyMDEw
MTA3NTg0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoZGE0ODU3ZjVlYzNl
Njg1N2IzM2Q0MjViMzU0M2VkZGVkZjg3OGZmYzCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAIqay+xEQSlFPB2womrBJ5TsBaRLXGbCkEyThiz9Ad3TJvqb
nFVKFdBN0YP/tM5v5AyI0HVuvNFLm4GwsiK+Tg+BxCVw0F3B43bJjaDUQU+cQYJl
iv4N6KelCZZYGT35ON8QArsptdTcHT5ofmUINJYaStEM1lTvJP22H51sYuJH9vtP
+pyi0V7CDqMgVvlpykqcNVBMnZcZZY/kig2XgivPkaKtFHRQvLyxpx5VTE2gDNrj
x9zKNc2fdPEnWAOKa00K3IIjCrMdnBzm1YyeI31ueZ1JA/Q7UsmyUUSGZ/NPAbMU
NAzidt7MK0ZTLbROz9G3dy3BsZvJh69qUk7Jn6kCAwEAAaOCAhowggIWMB0GA1Ud
DgQWBBTaSFf17D5oV7M9Qls1Q+3e34eP/DAfBgNVHSMEGDAWgBT68SCHHdw11zuU
ur42+g/5QSsBVDAOBgNVHQ8BAf8EBAMCB4AwZQYIKwYBBQUHAQEEWTBXMFUGCCsG
AQUFBzAChklyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
LzEtdkVnaHgzY05kYzdsTHEtTnZvUC1VRXJBVlEuY2VyMIGNBggrBgEFBQcBCwSB
gDB+MHwGCCsGAQUFBzALhnByc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9y
eS9ERUZBVUxUL2I0LzU5OGNjOS01MTc3LTQyZWUtOGU3Ny1mYzI3ZWJlMTI4MjAv
MS8ya2hYOWV3LWFGZXpQVUpiTlVQdDN0LUhqX3cucm9hMIGCBgNVHR8EezB5MHeg
daBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2I0
LzU5OGNjOS01MTc3LTQyZWUtOGU3Ny1mYzI3ZWJlMTI4MjAvMS8xLXZFZ2h4M2NO
ZGM3bExxLU52b1AtVUVyQVZRLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW9xxMA0EAgACMAcDBQMqBu8A
MA0GCSqGSIb3DQEBCwUAA4IBAQCcnFV5wy4PERpPYvb6rERRQkUH3P1d5tYb4jWy
yFSKNA6hQMsjaTi4IkWhBaJCHHVOkgg388EnObkb+jeeJ+3xCIyBr8/3QLUOqYqX
e5aiXlitmP1ln+sYOWDUPfihDvw1guC37emdP+vkjjmRyyhTw6u7tZ4/mNkdGADw
jWfu6LU304txLiQQfMoPt7eWTiZPVrvXpg4icfe7J6HGslEfn4AzRHiNCfd5L+cl
n/YNteYslvEUt27d/WJOSb3fg70IodpqQkUUOxzaIdJvfV8P8n/N9BO6mLbAziWs
aUSVZ46t/t7r0ZDRq5FAwpAaTehDfsRi+X0BOmZqq0UzCAgg
-----END CERTIFICATE-----
Generated at Sat Apr 19 07:14:38 2025 by rpki-client