Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/1-EeSCCOFCUoz0VplGP1Lo0h-9As.roa
File: 1-EeSCCOFCUoz0VplGP1Lo0h-9As.roa (raw, json)
Hash identifier: ZLnUsrTQcRzljBuufN+eacOU/oxAjJXf2wRzESRepgg=
Subject key identifier: F8:47:92:08:23:85:09:4A:33:D1:5A:65:18:FD:4B:A3:48:7E:F4:0B
Certificate issuer: /CN=5cd379cedcdc20f0875c4b08b94b41161b3e8c03
Certificate serial: 019424457CE029B0EC02C62FCD1D5403BBA3
Authority key identifier: 5C:D3:79:CE:DC:DC:20:F0:87:5C:4B:08:B9:4B:41:16:1B:3E:8C:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/1-EeSCCOFCUoz0VplGP1Lo0h-9As.roa
Signing time: Wed 01 Jan 2025 23:48:41 +0000
ROA not before: Wed 01 Jan 2025 23:48:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42936
IP address blocks: 91.193.64.0/22 maxlen: 22
2001:67c:13c8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:7c:e0:29:b0:ec:02:c6:2f:cd:1d:54:03:bb:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5cd379cedcdc20f0875c4b08b94b41161b3e8c03
Validity
Not Before: Jan 1 23:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f84792082385094a33d15a6518fd4ba3487ef40b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fb:d7:71:2e:6a:a9:ba:63:7a:6a:31:ab:d9:
10:32:e9:e9:c1:ba:84:c8:6b:26:b1:3d:b9:e7:c8:
5f:ea:64:48:b2:5a:4b:a9:d3:15:4c:27:b3:be:47:
0b:93:cd:41:3b:31:6c:d7:4a:41:d3:6a:51:5c:c3:
65:35:42:1c:42:47:11:67:a7:54:2a:fe:46:40:95:
0f:cd:a7:0d:7e:94:fd:c1:13:ed:58:4f:76:65:9c:
f4:1e:27:d1:b2:b3:ea:ec:51:0b:a4:d6:87:de:9d:
5f:46:09:fc:41:e0:c8:03:e2:78:a6:71:29:c2:71:
74:6d:a3:69:ee:bd:ce:de:37:b0:86:7a:b5:c0:cc:
85:80:c4:df:88:29:a9:3f:1c:ae:4c:50:9e:e6:11:
e6:85:e0:0d:2e:c4:bf:cb:a0:08:f8:12:9d:ee:9d:
12:d6:b3:a9:0d:c2:36:84:72:2f:50:eb:e6:67:1c:
03:71:2d:0c:f7:f2:99:28:0f:f3:fd:73:ca:74:ad:
1e:3e:f2:90:e2:03:9f:b8:90:53:2f:63:a7:6b:df:
aa:85:d7:24:38:9b:e9:64:f5:6e:b3:b1:b3:1e:5d:
e9:2a:11:47:4a:6f:c9:c1:ce:7c:54:45:92:81:f9:
da:ed:9e:b2:13:87:67:bd:78:08:b0:5e:ec:21:82:
9f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:47:92:08:23:85:09:4A:33:D1:5A:65:18:FD:4B:A3:48:7E:F4:0B
X509v3 Authority Key Identifier:
keyid:5C:D3:79:CE:DC:DC:20:F0:87:5C:4B:08:B9:4B:41:16:1B:3E:8C:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XNN5ztzcIPCHXEsIuUtBFhs-jAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/1-EeSCCOFCUoz0VplGP1Lo0h-9As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/f3cca4-f6bf-4734-abbd-0964464c1751/1/XNN5ztzcIPCHXEsIuUtBFhs-jAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.64.0/22
IPv6:
2001:67c:13c8::/48
Signature Algorithm: sha256WithRSAEncryption
93:b6:45:47:99:dc:98:d5:ed:12:45:89:e4:33:37:6d:f4:5d:
8f:b2:12:24:be:f7:9a:e8:7b:21:02:0b:df:0b:62:50:32:9c:
87:91:0c:fb:7d:57:f8:02:15:72:0a:c5:d4:81:5b:8b:ef:9c:
e1:5a:13:a6:5a:27:d0:e4:5b:50:05:78:8e:ea:5e:fd:c8:7a:
43:ed:fe:0f:86:19:4a:88:de:d4:a4:c0:e8:9c:43:88:1a:64:
bc:93:d2:d9:d4:b8:55:34:75:f4:96:ee:ef:e3:50:4e:8b:46:
fe:92:b7:92:dd:ec:6e:47:f6:e6:6b:d7:76:cf:c9:80:d9:d0:
a6:fa:e0:79:51:49:8a:d1:a9:c5:4b:bb:90:58:22:cf:79:30:
a3:95:33:2d:3b:52:20:48:ed:bf:01:40:e9:d5:d3:45:00:2a:
6d:35:75:3f:c1:a9:38:bb:04:fa:59:02:a0:bb:da:3c:f2:47:
0d:99:9a:92:70:0c:b6:fe:52:0f:56:25:2c:f4:81:ea:5c:78:
ce:2a:83:d3:91:f1:76:42:2d:92:8b:07:4d:14:d7:81:b4:6d:
ce:e9:c2:bc:d2:13:98:ec:aa:82:8b:09:8b:2c:e0:78:76:60:
4e:21:cf:39:93:ad:d0:1a:19:1f:5f:d6:7d:5c:aa:a2:ed:b3:
19:7c:e8:35
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQkRXzgKbDsAsYvzR1UA7ujMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVjZDM3OWNlZGNkYzIwZjA4NzVjNGIwOGI5NGI0MTE2MWIz
ZThjMDMwHhcNMjUwMTAxMjM0ODQxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODQ3OTIwODIzODUwOTRhMzNkMTVhNjUxOGZkNGJhMzQ4N2VmNDBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/vXcS5qqbpjemoxq9kQMunpwbqE
yGsmsT2558hf6mRIslpLqdMVTCezvkcLk81BOzFs10pB02pRXMNlNUIcQkcRZ6dU
Kv5GQJUPzacNfpT9wRPtWE92ZZz0HifRsrPq7FELpNaH3p1fRgn8QeDIA+J4pnEp
wnF0baNp7r3O3jewhnq1wMyFgMTfiCmpPxyuTFCe5hHmheANLsS/y6AI+BKd7p0S
1rOpDcI2hHIvUOvmZxwDcS0M9/KZKA/z/XPKdK0ePvKQ4gOfuJBTL2Ona9+qhdck
OJvpZPVus7GzHl3pKhFHSm/Jwc58VEWSgfna7Z6yE4dnvXgIsF7sIYKfRQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPhHkggjhQlKM9FaZRj9S6NIfvQLMB8GA1UdIwQY
MBaAFFzTec7c3CDwh1xLCLlLQRYbPowDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWE5ONXp0emNJUENIWEVzSXVVdEJGaHMtakFNLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS9mM2NjYTQtZjZiZi00NzM0LWFiYmQt
MDk2NDQ2NGMxNzUxLzEvMS1FZVNDQ09GQ1VvejBWcGxHUDFMbzBoLTlBcy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYmEvZjNjY2E0LWY2YmYtNDczNC1hYmJkLTA5NjQ0NjRjMTc1
MS8xL1hOTjV6dHpjSVBDSFhFc0l1VXRCRmhzLWpBTS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAwBggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAlvBQDAP
BAIAAjAJAwcAIAEGfBPIMA0GCSqGSIb3DQEBCwUAA4IBAQCTtkVHmdyY1e0SRYnk
Mzdt9F2PshIkvvea6HshAgvfC2JQMpyHkQz7fVf4AhVyCsXUgVuL75zhWhOmWifQ
5FtQBXiO6l79yHpD7f4PhhlKiN7UpMDonEOIGmS8k9LZ1LhVNHX0lu7v41BOi0b+
kreS3exuR/bma9d2z8mA2dCm+uB5UUmK0anFS7uQWCLPeTCjlTMtO1IgSO2/AUDp
1dNFACptNXU/wak4uwT6WQKgu9o88kcNmZqScAy2/lIPViUs9IHqXHjOKoPTkfF2
Qi2SiwdNFNeBtG3O6cK80hOY7KqCiwmLLOB4dmBOIc85k63QGhkfX9Z9XKqi7bMZ
fOg1
-----END CERTIFICATE-----
Generated at Thu Feb 20 03:30:54 2025 by rpki-client