Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/67e2a1-efc5-400a-a67d-fe573ba26ddb/1/m0u1zNysegtlgLL_CaM91_FoQb8.roa
File: m0u1zNysegtlgLL_CaM91_FoQb8.roa (raw, json)
Hash identifier: +hpfYeSH32DY7U9QCOyMX+izYm2r6EiL2CN9T0YVjHo=
Subject key identifier: 9B:4B:B5:CC:DC:AC:7A:0B:65:80:B2:FF:09:A3:3D:D7:F1:68:41:BF
Certificate issuer: /CN=e5e24b031683bb1a8ca16c2a5c95dcc8a8e3e1a5
Certificate serial: 018607E4AD1D9315F756E3E74C4C93E115A6
Authority key identifier: E5:E2:4B:03:16:83:BB:1A:8C:A1:6C:2A:5C:95:DC:C8:A8:E3:E1:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5eJLAxaDuxqMoWwqXJXcyKjj4aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/67e2a1-efc5-400a-a67d-fe573ba26ddb/1/m0u1zNysegtlgLL_CaM91_FoQb8.roa
Signing time: Tue 31 Jan 2023 12:54:32 +0000
ROA not before: Tue 31 Jan 2023 12:54:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60064
IP address blocks: 91.132.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:07:e4:ad:1d:93:15:f7:56:e3:e7:4c:4c:93:e1:15:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5e24b031683bb1a8ca16c2a5c95dcc8a8e3e1a5
Validity
Not Before: Jan 31 12:54:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9b4bb5ccdcac7a0b6580b2ff09a33dd7f16841bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b9:4a:79:b5:68:59:b0:6e:16:d7:d6:a6:a1:
46:4c:f3:7b:2a:dc:d1:56:03:91:c8:f8:f5:5c:be:
1c:81:28:78:90:12:6f:ba:da:ef:19:cd:da:30:e2:
0d:ab:48:88:e7:e0:91:14:75:d4:53:48:49:58:49:
e5:db:f7:3b:95:b6:3d:3b:a5:de:6f:39:d5:b7:a6:
48:40:22:1c:20:ec:67:8b:bb:ba:5d:ce:b8:71:83:
08:81:f8:87:a8:69:28:c8:5e:16:10:a7:a8:7e:9f:
3e:db:f6:00:99:f5:bf:07:8f:90:5b:54:7b:3b:5a:
8d:d3:31:d1:c1:23:f6:a8:21:ef:a7:8d:6b:d9:b7:
bc:dd:f5:69:d2:3e:68:94:ee:b3:97:91:86:7e:cf:
72:3a:07:fc:83:2e:03:19:9c:e5:03:4c:0b:99:5c:
97:72:8e:6f:83:72:fc:30:e3:d4:60:d2:73:5c:28:
cc:1e:c8:23:ab:6e:70:15:be:1d:3f:33:1e:a4:30:
1a:5e:3c:e2:83:1f:1e:43:d5:cc:ea:d7:ec:72:46:
f9:0a:99:6c:ed:79:e4:31:32:df:92:a0:47:d2:0a:
3d:ba:23:ee:a3:e9:cc:bb:69:3d:3b:32:f8:8a:ac:
b8:49:5b:0a:58:58:d8:29:57:ec:36:f8:4f:5b:99:
1c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:4B:B5:CC:DC:AC:7A:0B:65:80:B2:FF:09:A3:3D:D7:F1:68:41:BF
X509v3 Authority Key Identifier:
keyid:E5:E2:4B:03:16:83:BB:1A:8C:A1:6C:2A:5C:95:DC:C8:A8:E3:E1:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5eJLAxaDuxqMoWwqXJXcyKjj4aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67e2a1-efc5-400a-a67d-fe573ba26ddb/1/m0u1zNysegtlgLL_CaM91_FoQb8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/67e2a1-efc5-400a-a67d-fe573ba26ddb/1/5eJLAxaDuxqMoWwqXJXcyKjj4aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.225.0/24
Signature Algorithm: sha256WithRSAEncryption
33:f4:ff:69:2b:bb:ea:ca:1a:1e:91:d9:c9:c0:eb:d1:ea:e1:
22:27:1e:01:ba:72:5b:6a:48:67:7b:d4:2a:91:2e:36:37:de:
d9:1a:bd:b1:21:68:85:59:d7:51:5d:66:ca:3f:c3:97:27:ef:
ab:59:f2:f0:c2:c4:4c:25:fb:5a:2b:83:96:74:78:f3:6e:da:
69:06:e2:fc:49:c6:c9:b0:8f:e4:24:64:1e:a0:67:b3:74:9e:
43:88:02:bd:06:95:23:21:30:71:c8:b0:38:c0:43:fc:83:58:
fa:9e:89:7f:37:de:3f:73:3a:5c:12:a6:07:aa:f8:af:48:ee:
46:ab:d0:4d:b5:38:d8:68:b0:95:8a:f2:7d:18:f2:f0:f2:8e:
b8:0b:ea:69:11:60:e1:ba:8e:78:b5:2f:d0:d2:cc:2e:7e:bc:
57:0d:35:96:80:9d:ac:db:2c:91:b9:0f:11:81:0c:50:a2:7d:
74:0f:5a:bd:fb:13:ac:16:30:e6:78:7f:47:95:07:5b:a4:8e:
1b:8e:4b:b3:c2:cf:49:73:95:64:b6:4e:14:dd:b0:6a:f8:50:
95:30:e9:8a:7f:99:26:11:e5:22:3a:58:7b:64:41:73:c0:bf:
1c:62:ce:78:27:98:17:ac:e4:e9:39:0f:ee:b1:6b:c1:4e:47:
9e:ec:06:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYYH5K0dkxX3VuPnTEyT4RWmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZTI0YjAzMTY4M2JiMWE4Y2ExNmMyYTVjOTVkY2M4YThl
M2UxYTUwHhcNMjMwMTMxMTI1NDMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjRiYjVjY2RjYWM3YTBiNjU4MGIyZmYwOWEzM2RkN2YxNjg0MWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLlKebVoWbBuFtfWpqFGTPN7KtzR
VgORyPj1XL4cgSh4kBJvutrvGc3aMOINq0iI5+CRFHXUU0hJWEnl2/c7lbY9O6Xe
bznVt6ZIQCIcIOxni7u6Xc64cYMIgfiHqGkoyF4WEKeofp8+2/YAmfW/B4+QW1R7
O1qN0zHRwSP2qCHvp41r2be83fVp0j5olO6zl5GGfs9yOgf8gy4DGZzlA0wLmVyX
co5vg3L8MOPUYNJzXCjMHsgjq25wFb4dPzMepDAaXjzigx8eQ9XM6tfsckb5Cpls
7XnkMTLfkqBH0go9uiPuo+nMu2k9OzL4iqy4SVsKWFjYKVfsNvhPW5kcEwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJtLtczcrHoLZYCy/wmjPdfxaEG/MB8GA1UdIwQY
MBaAFOXiSwMWg7sajKFsKlyV3Mio4+GlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWVKTEF4YUR1eHFNb1d3cVhKWGN5S2pqNGFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82N2UyYTEtZWZjNS00MDBhLWE2N2Qt
ZmU1NzNiYTI2ZGRiLzEvbTB1MXpOeXNlZ3RsZ0xMX0NhTTkxX0ZvUWI4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82N2UyYTEtZWZjNS00MDBhLWE2N2QtZmU1NzNiYTI2ZGRi
LzEvNWVKTEF4YUR1eHFNb1d3cVhKWGN5S2pqNGFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW4ThMA0G
CSqGSIb3DQEBCwUAA4IBAQAz9P9pK7vqyhoekdnJwOvR6uEiJx4BunJbakhne9Qq
kS42N97ZGr2xIWiFWddRXWbKP8OXJ++rWfLwwsRMJftaK4OWdHjzbtppBuL8ScbJ
sI/kJGQeoGezdJ5DiAK9BpUjITBxyLA4wEP8g1j6nol/N94/czpcEqYHqvivSO5G
q9BNtTjYaLCVivJ9GPLw8o64C+ppEWDhuo54tS/Q0swufrxXDTWWgJ2s2yyRuQ8R
gQxQon10D1q9+xOsFjDmeH9HlQdbpI4bjkuzws9Jc5Vktk4U3bBq+FCVMOmKf5km
EeUiOlh7ZEFzwL8cYs54J5gXrOTpOQ/usWvBTkee7AZp
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:05:18 2025 by rpki-client