Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/fF2AHOLwJzWd-V0jXlznT-DIvrg.roa
File: fF2AHOLwJzWd-V0jXlznT-DIvrg.roa (raw, json)
Hash identifier: Klzn+8SPAyFuC03MA8v68FnU7O/xZUVRMbKUgh6VJOI=
Subject key identifier: 7C:5D:80:1C:E2:F0:27:35:9D:F9:5D:23:5E:5C:E7:4F:E0:C8:BE:B8
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 0194258F01A9A3830356DF16DDD245AAFCE3
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/fF2AHOLwJzWd-V0jXlznT-DIvrg.roa
Signing time: Thu 02 Jan 2025 05:48:36 +0000
ROA not before: Thu 02 Jan 2025 05:48:36 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 61112
IP address blocks: 91.229.132.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:01:a9:a3:83:03:56:df:16:dd:d2:45:aa:fc:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 05:48:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c5d801ce2f027359df95d235e5ce74fe0c8beb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3e:f6:3d:2c:01:25:15:78:eb:af:33:af:ef:
d8:f9:54:20:f5:1e:b0:20:e5:fb:a9:47:53:48:9c:
37:5b:09:d9:7d:e3:a4:39:81:b4:f4:2d:82:43:7c:
3d:ef:ed:cb:f3:43:d6:0b:91:b8:2f:35:02:e0:e7:
49:ff:37:55:79:82:6f:c6:c8:fb:dc:04:a3:71:66:
b9:f3:70:2e:a2:cd:90:d1:8c:47:ec:38:42:7c:dc:
61:2e:47:95:c7:57:63:9b:55:e3:1f:3e:d8:12:95:
ce:b5:33:41:62:ee:2f:79:f4:26:08:dc:3a:c6:fc:
0a:2c:83:e4:63:03:bc:59:e9:33:fe:ac:aa:74:ad:
f2:58:e0:36:99:69:bd:7a:86:17:bf:a8:92:b1:ce:
20:f1:52:3b:58:1d:1c:be:79:65:98:10:14:c8:80:
65:a8:bf:d1:c7:7b:94:86:d1:33:d0:59:bd:75:65:
bc:c6:d2:93:a8:ed:5d:49:e1:b5:3b:84:0f:17:1b:
8b:c4:10:2e:2c:2b:e4:b7:34:10:a8:b0:65:6a:a1:
bd:2c:ee:05:ff:9b:ed:02:ff:1f:0d:18:a0:0b:35:
4e:e9:c3:ac:fd:80:37:b4:f8:d6:6a:b3:59:91:3e:
73:54:5a:66:fd:93:f4:18:b0:9e:05:2b:c5:92:d4:
43:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:5D:80:1C:E2:F0:27:35:9D:F9:5D:23:5E:5C:E7:4F:E0:C8:BE:B8
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/fF2AHOLwJzWd-V0jXlznT-DIvrg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.132.0/23
Signature Algorithm: sha256WithRSAEncryption
86:69:c9:bc:04:a0:84:e8:38:12:0e:1d:c8:a0:18:fd:e5:08:
1b:9b:80:b7:b5:98:30:42:4a:85:73:4a:04:6e:b6:5b:19:52:
7b:7a:f2:17:90:34:8e:9a:4e:9e:72:b6:a2:e8:d7:b8:f8:5a:
5f:f7:33:1b:5a:c6:ca:3a:a3:50:44:35:dd:03:95:e2:c6:7a:
84:a1:66:ff:fa:99:1b:00:6d:fa:b2:ae:d7:f8:14:1b:26:a2:
a2:56:7f:25:b8:11:ab:74:08:74:be:8c:e9:77:d9:46:3a:75:
7a:d8:7e:12:df:ba:67:00:1a:94:88:64:a0:5b:c9:47:2b:92:
19:bf:99:83:68:48:ef:a5:48:4f:64:f5:b2:dd:ea:3f:7e:18:
cf:2f:f1:48:30:dc:4d:fc:e7:86:dc:e0:2e:51:36:39:a8:b1:
8a:79:92:f9:1a:58:e7:7f:ae:71:57:4f:2d:12:4e:16:f6:50:
82:24:52:59:05:35:5a:80:4f:87:71:c7:87:a1:cc:36:98:95:
13:46:9c:6c:6f:15:49:b0:9d:01:79:1f:13:f8:31:cf:29:bf:
08:41:97:c5:b5:ef:a2:01:d8:a5:8d:ce:8d:e4:85:c8:e3:31:
bc:70:ab:60:bc:9b:6a:9f:be:35:78:26:c2:ac:c5:b5:08:cf:
28:2e:9a:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQljwGpo4MDVt8W3dJFqvzjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYmYzMDIwMWYxMmEwNDBkMzg2ZDJiNGVlZDQ0ODQ2MjNl
NGQxMWIwHhcNMjUwMTAyMDU0ODM2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YzVkODAxY2UyZjAyNzM1OWRmOTVkMjM1ZTVjZTc0ZmUwYzhiZWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0D72PSwBJRV4668zr+/Y+VQg9R6w
IOX7qUdTSJw3WwnZfeOkOYG09C2CQ3w97+3L80PWC5G4LzUC4OdJ/zdVeYJvxsj7
3ASjcWa583Auos2Q0YxH7DhCfNxhLkeVx1djm1XjHz7YEpXOtTNBYu4vefQmCNw6
xvwKLIPkYwO8Wekz/qyqdK3yWOA2mWm9eoYXv6iSsc4g8VI7WB0cvnllmBAUyIBl
qL/Rx3uUhtEz0Fm9dWW8xtKTqO1dSeG1O4QPFxuLxBAuLCvktzQQqLBlaqG9LO4F
/5vtAv8fDRigCzVO6cOs/YA3tPjWarNZkT5zVFpm/ZP0GLCeBSvFktRD6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHxdgBzi8Cc1nfldI15c50/gyL64MB8GA1UdIwQY
MBaAFP6/MCAfEqBA04bStO7USEYj5NEbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUt
YTk3YzBkYzBhNzQ5LzEvZkYyQUhPTHdKeldkLVYwalhsem5ULURJdnJnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9mOGM0YTItOTZhYy00YjRlLWExOTUtYTk3YzBkYzBhNzQ5
LzEvX3I4d0lCOFNvRURUaHRLMDd0UklSaVBrMFJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+WEMA0G
CSqGSIb3DQEBCwUAA4IBAQCGacm8BKCE6DgSDh3IoBj95Qgbm4C3tZgwQkqFc0oE
brZbGVJ7evIXkDSOmk6ecrai6Ne4+Fpf9zMbWsbKOqNQRDXdA5XixnqEoWb/+pkb
AG36sq7X+BQbJqKiVn8luBGrdAh0vozpd9lGOnV62H4S37pnABqUiGSgW8lHK5IZ
v5mDaEjvpUhPZPWy3eo/fhjPL/FIMNxN/OeG3OAuUTY5qLGKeZL5Gljnf65xV08t
Ek4W9lCCJFJZBTVagE+HcceHocw2mJUTRpxsbxVJsJ0BeR8T+DHPKb8IQZfFte+i
Adiljc6N5IXI4zG8cKtgvJtqn741eCbCrMW1CM8oLpqv
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:28:43 2025 by rpki-client