Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/DSwyNAuAz2bJdfrLonxlYBob04I.roa
File: DSwyNAuAz2bJdfrLonxlYBob04I.roa (raw, json)
Hash identifier: 3+/CvQ/0iqsF5SqvqkyipksHlcWBh/rqDJFf0zM3tC8=
Subject key identifier: 0D:2C:32:34:0B:80:CF:66:C9:75:FA:CB:A2:7C:65:60:1A:1B:D3:82
Certificate issuer: /CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Certificate serial: 01942747F4136E8D204E8BB63C075F630781
Authority key identifier: F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/DSwyNAuAz2bJdfrLonxlYBob04I.roa
Signing time: Thu 02 Jan 2025 13:50:14 +0000
ROA not before: Thu 02 Jan 2025 13:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15830
IP address blocks: 91.233.52.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f4:13:6e:8d:20:4e:8b:b6:3c:07:5f:63:07:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4e7174c6f74fa9a22b0adee251a8d64312313f2
Validity
Not Before: Jan 2 13:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d2c32340b80cf66c975facba27c65601a1bd382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3a:31:cd:a3:39:88:dc:ff:d4:fa:30:85:79:
2b:66:3f:3d:93:64:75:79:7c:f6:17:ef:6b:3e:f5:
0b:e9:a3:79:f1:92:ff:82:4c:c9:2c:33:eb:8b:cd:
82:dc:f2:db:e1:18:6a:19:2a:64:d6:a0:cc:7f:d3:
0b:8f:a8:f0:17:0e:f2:86:b7:b0:ab:bd:e0:c2:7e:
23:a8:3a:94:1f:21:e7:2b:03:78:a0:f9:05:0c:e9:
2e:c1:6b:f6:21:b4:e1:71:83:e6:92:90:8e:ed:71:
a4:ba:f3:44:df:f1:1f:d2:1a:b7:02:68:63:66:b6:
da:bb:f3:5a:d8:5f:21:0d:e7:c7:bf:c8:89:67:fe:
ca:8d:34:1b:9f:c8:58:32:c1:50:ca:3c:61:88:26:
25:45:68:27:84:f5:7a:4b:a6:d7:f3:3a:a5:23:f7:
4f:5e:b1:58:22:11:27:92:cc:74:7f:b1:75:bf:ba:
b7:4c:3a:3d:ee:84:0b:28:f9:0d:04:d0:a3:0f:9d:
46:62:a4:db:aa:44:0a:c5:6a:b3:b4:ed:98:25:c5:
d0:2f:2e:6a:f4:21:e7:3e:f9:a6:6c:8b:94:8f:d4:
04:1a:25:a6:66:5b:42:a4:b4:30:06:9f:05:00:01:
0f:81:df:cc:75:91:c5:c3:fa:d3:89:7e:61:5c:58:
24:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:2C:32:34:0B:80:CF:66:C9:75:FA:CB:A2:7C:65:60:1A:1B:D3:82
X509v3 Authority Key Identifier:
keyid:F4:E7:17:4C:6F:74:FA:9A:22:B0:AD:EE:25:1A:8D:64:31:23:13:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9OcXTG90-poisK3uJRqNZDEjE_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/DSwyNAuAz2bJdfrLonxlYBob04I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/86efb3-ef1e-469c-aeb4-28978c3c7ec5/1/9OcXTG90-poisK3uJRqNZDEjE_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.52.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:e6:0a:95:31:54:fd:18:d8:fd:eb:85:c8:18:f4:66:e5:2c:
1c:cd:90:f6:8c:aa:b8:33:9a:b3:4c:33:09:bf:8a:52:89:a4:
94:d2:92:87:8e:cd:53:33:cf:81:56:3c:2e:01:3d:09:4f:10:
ab:59:b6:ef:5c:19:eb:71:ad:bb:e6:cd:be:65:99:c9:a0:1b:
20:07:4b:ba:28:59:54:9d:f6:68:26:20:1e:2c:eb:5c:e4:f5:
3f:4b:96:d1:3c:d7:b6:51:cf:28:05:08:b2:da:c4:1f:9e:8c:
57:a9:76:85:20:36:d4:af:32:73:0e:de:10:a5:c1:2a:e8:fa:
12:5c:89:98:c3:2e:1b:7a:b7:c9:b4:14:68:64:b4:ab:40:1d:
bd:c5:43:e1:46:71:0e:cf:fa:31:29:15:65:87:e6:4f:34:3d:
e8:a4:b5:4c:c0:28:03:fc:ee:03:cb:88:4e:65:f4:59:4c:d6:
c7:92:fb:30:94:2b:26:20:23:33:af:e8:fd:18:f6:0b:ae:b2:
a9:bb:d8:87:51:88:e8:2b:47:e9:f7:70:dc:38:01:d8:b1:07:
52:53:67:76:75:28:85:81:28:77:58:a0:05:fa:9c:65:ce:24:
1d:5f:8a:c4:37:a0:04:34:da:72:ca:16:d3:0f:a4:ff:ba:3f:
9b:15:b4:98
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR/QTbo0gTou2PAdfYweBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0ZTcxNzRjNmY3NGZhOWEyMmIwYWRlZTI1MWE4ZDY0MzEy
MzEzZjIwHhcNMjUwMTAyMTM1MDE0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDJjMzIzNDBiODBjZjY2Yzk3NWZhY2JhMjdjNjU2MDFhMWJkMzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjoxzaM5iNz/1PowhXkrZj89k2R1
eXz2F+9rPvUL6aN58ZL/gkzJLDPri82C3PLb4RhqGSpk1qDMf9MLj6jwFw7yhrew
q73gwn4jqDqUHyHnKwN4oPkFDOkuwWv2IbThcYPmkpCO7XGkuvNE3/Ef0hq3Amhj
Zrbau/Na2F8hDefHv8iJZ/7KjTQbn8hYMsFQyjxhiCYlRWgnhPV6S6bX8zqlI/dP
XrFYIhEnksx0f7F1v7q3TDo97oQLKPkNBNCjD51GYqTbqkQKxWqztO2YJcXQLy5q
9CHnPvmmbIuUj9QEGiWmZltCpLQwBp8FAAEPgd/MdZHFw/rTiX5hXFgkgQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA0sMjQLgM9myXX6y6J8ZWAaG9OCMB8GA1UdIwQY
MBaAFPTnF0xvdPqaIrCt7iUajWQxIxPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU9jWFRHOTAtcG9pc0szdUpScU5aREVqRV9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNi84NmVmYjMtZWYxZS00NjljLWFlYjQt
Mjg5NzhjM2M3ZWM1LzEvRFN3eU5BdUF6MmJKZGZyTG9ueGxZQm9iMDRJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNi84NmVmYjMtZWYxZS00NjljLWFlYjQtMjg5NzhjM2M3ZWM1
LzEvOU9jWFRHOTAtcG9pc0szdUpScU5aREVqRV9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+k0MA0G
CSqGSIb3DQEBCwUAA4IBAQBL5gqVMVT9GNj964XIGPRm5SwczZD2jKq4M5qzTDMJ
v4pSiaSU0pKHjs1TM8+BVjwuAT0JTxCrWbbvXBnrca275s2+ZZnJoBsgB0u6KFlU
nfZoJiAeLOtc5PU/S5bRPNe2Uc8oBQiy2sQfnoxXqXaFIDbUrzJzDt4QpcEq6PoS
XImYwy4berfJtBRoZLSrQB29xUPhRnEOz/oxKRVlh+ZPND3opLVMwCgD/O4Dy4hO
ZfRZTNbHkvswlCsmICMzr+j9GPYLrrKpu9iHUYjoK0fp93DcOAHYsQdSU2d2dSiF
gSh3WKAF+pxlziQdX4rEN6AENNpyyhbTD6T/uj+bFbSY
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:50 2025 by rpki-client