Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c4b7b6-edcf-40ba-8867-ac4f6494aa38/1/OG0iR9va0eNXq64K0Rj5tu-2tiw.roa
File: OG0iR9va0eNXq64K0Rj5tu-2tiw.roa (raw, json)
Hash identifier: Ea87R9CfnMyBu9CR4h/DlqO1C+dgzA5qN/j0piFrPWU=
Subject key identifier: 38:6D:22:47:DB:DA:D1:E3:57:AB:AE:0A:D1:18:F9:B6:EF:B6:B6:2C
Certificate issuer: /CN=747bc81ad6dd0e1c06ab07be683b6c86fd8a6c06
Certificate serial: 018571A793A4478D28E6207483D38D15DBF9
Authority key identifier: 74:7B:C8:1A:D6:DD:0E:1C:06:AB:07:BE:68:3B:6C:86:FD:8A:6C:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHvIGtbdDhwGqwe-aDtshv2KbAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c4b7b6-edcf-40ba-8867-ac4f6494aa38/1/OG0iR9va0eNXq64K0Rj5tu-2tiw.roa
Signing time: Mon 02 Jan 2023 08:44:45 +0000
ROA not before: Mon 02 Jan 2023 08:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48031
IP address blocks: 91.246.54.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:93:a4:47:8d:28:e6:20:74:83:d3:8d:15:db:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747bc81ad6dd0e1c06ab07be683b6c86fd8a6c06
Validity
Not Before: Jan 2 08:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=386d2247dbdad1e357abae0ad118f9b6efb6b62c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:eb:e0:85:71:d1:4c:d0:8d:ae:06:d3:8f:fb:
a0:81:99:cb:78:cc:7c:db:9c:eb:a2:a4:22:4f:fe:
16:16:e4:c6:9d:cd:a7:79:91:5e:4f:6a:b3:45:cc:
04:89:df:c0:ad:a2:98:ed:2a:42:6d:a8:8c:3e:bf:
f4:9d:f6:02:24:e9:d8:19:18:56:df:94:78:4a:f2:
83:93:29:77:0e:4b:e9:93:44:3c:56:04:3e:e6:27:
51:75:75:51:cd:a3:c7:7e:83:64:d4:a7:23:97:99:
75:de:a8:c5:fa:76:c3:9b:ab:85:e0:c6:c3:bb:af:
e4:3a:cb:7f:19:c2:8d:45:73:ad:57:84:98:8b:d4:
3f:13:f7:16:16:73:32:62:1d:12:e6:af:49:a9:8e:
28:03:32:78:43:04:1e:be:9b:a6:94:f6:26:cc:f7:
90:05:53:5e:4d:6e:e6:0a:ee:70:72:d8:69:a1:e1:
87:03:19:e0:6f:d9:2f:d3:6a:49:2a:09:c9:96:10:
60:ac:76:95:0a:07:a4:0b:5b:d1:92:96:df:d0:a5:
f4:9c:1b:45:6c:3d:6e:b2:8e:a1:03:b6:5d:35:7b:
a7:78:b0:f1:c9:cd:ea:57:7a:e5:7a:4e:52:40:94:
ba:41:6e:c0:5e:e5:dd:85:bd:4a:f5:1a:fa:a8:cd:
ec:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6D:22:47:DB:DA:D1:E3:57:AB:AE:0A:D1:18:F9:B6:EF:B6:B6:2C
X509v3 Authority Key Identifier:
keyid:74:7B:C8:1A:D6:DD:0E:1C:06:AB:07:BE:68:3B:6C:86:FD:8A:6C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHvIGtbdDhwGqwe-aDtshv2KbAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c4b7b6-edcf-40ba-8867-ac4f6494aa38/1/OG0iR9va0eNXq64K0Rj5tu-2tiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c4b7b6-edcf-40ba-8867-ac4f6494aa38/1/dHvIGtbdDhwGqwe-aDtshv2KbAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.54.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:a6:f4:6f:14:a6:03:61:72:70:85:49:29:e3:44:c6:2b:d5:
c7:02:e0:15:cf:6e:c5:39:a0:86:bc:b7:c8:06:5c:e4:11:b8:
d2:2d:69:f8:58:bf:0d:e3:ac:c2:bd:be:90:e1:ac:9e:2f:e2:
d7:d6:7c:e1:18:74:be:24:d9:89:8b:1d:a4:46:1a:c1:74:3b:
d7:23:55:c9:07:85:52:e9:e2:56:d3:20:fd:3d:c8:de:4a:43:
17:d8:3b:45:1c:d8:4c:2a:61:e7:8c:bd:31:16:d4:dc:9d:98:
bf:5e:33:5e:01:3a:9c:9e:c7:fe:e1:2b:73:93:73:82:fc:ed:
7e:ec:e0:c1:16:ba:0e:6e:bd:92:f4:0e:72:22:b5:75:3a:46:
d5:52:a1:11:cc:b7:b0:fe:d9:f5:0a:b8:52:37:21:8a:3e:3f:
ba:63:70:48:25:f0:26:3f:b7:bf:b8:aa:72:5a:7c:b6:54:7f:
c1:71:5b:3e:16:42:ca:c0:f1:5e:08:c4:e8:9c:0f:64:83:f0:
1e:a0:2b:7f:6c:10:9f:cf:b6:c0:09:1b:c4:53:5f:f6:72:2a:
d3:2b:23:5b:79:2f:1a:1a:46:05:bf:92:22:ba:5c:cc:6b:1d:
d0:59:cd:ed:39:92:cf:38:be:84:55:01:b7:e2:3e:3f:66:88:
ab:ef:69:ee
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxp5OkR40o5iB0g9ONFdv5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0N2JjODFhZDZkZDBlMWMwNmFiMDdiZTY4M2I2Yzg2ZmQ4
YTZjMDYwHhcNMjMwMTAyMDg0NDQ1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzODZkMjI0N2RiZGFkMWUzNTdhYmFlMGFkMTE4ZjliNmVmYjZiNjJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhevghXHRTNCNrgbTj/uggZnLeMx8
25zroqQiT/4WFuTGnc2neZFeT2qzRcwEid/AraKY7SpCbaiMPr/0nfYCJOnYGRhW
35R4SvKDkyl3Dkvpk0Q8VgQ+5idRdXVRzaPHfoNk1Kcjl5l13qjF+nbDm6uF4MbD
u6/kOst/GcKNRXOtV4SYi9Q/E/cWFnMyYh0S5q9JqY4oAzJ4QwQevpumlPYmzPeQ
BVNeTW7mCu5wcthpoeGHAxngb9kv02pJKgnJlhBgrHaVCgekC1vRkpbf0KX0nBtF
bD1uso6hA7ZdNXuneLDxyc3qV3rlek5SQJS6QW7AXuXdhb1K9Rr6qM3sBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDhtIkfb2tHjV6uuCtEY+bbvtrYsMB8GA1UdIwQY
MBaAFHR7yBrW3Q4cBqsHvmg7bIb9imwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEh2SUd0YmREaHdHcXdlLWFEdHNodjJLYkFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jNGI3YjYtZWRjZi00MGJhLTg4Njct
YWM0ZjY0OTRhYTM4LzEvT0cwaVI5dmEwZU5YcTY0SzBSajV0dS0ydGl3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9jNGI3YjYtZWRjZi00MGJhLTg4NjctYWM0ZjY0OTRhYTM4
LzEvZEh2SUd0YmREaHdHcXdlLWFEdHNodjJLYkFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/Y2MA0G
CSqGSIb3DQEBCwUAA4IBAQCopvRvFKYDYXJwhUkp40TGK9XHAuAVz27FOaCGvLfI
BlzkEbjSLWn4WL8N46zCvb6Q4ayeL+LX1nzhGHS+JNmJix2kRhrBdDvXI1XJB4VS
6eJW0yD9PcjeSkMX2DtFHNhMKmHnjL0xFtTcnZi/XjNeATqcnsf+4Stzk3OC/O1+
7ODBFroObr2S9A5yIrV1OkbVUqERzLew/tn1CrhSNyGKPj+6Y3BIJfAmP7e/uKpy
Wny2VH/BcVs+FkLKwPFeCMTonA9kg/AeoCt/bBCfz7bACRvEU1/2cirTKyNbeS8a
GkYFv5IiulzMax3QWc3tOZLPOL6EVQG34j4/Zoir72nu
-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:44 2025 by rpki-client