Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/V8k0n9rqEarIEgNITkDx8oQ4w44.roa
File: V8k0n9rqEarIEgNITkDx8oQ4w44.roa (raw, json)
Hash identifier: BkPM7QHIpoN+47+MwN2OB6x0pADkUYwi5FlR1ZsHikQ=
Subject key identifier: 57:C9:34:9F:DA:EA:11:AA:C8:12:03:48:4E:40:F1:F2:84:38:C3:8E
Certificate issuer: /CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
Certificate serial: 019420D64DDAD831755C8AEDC19D2E43B76F
Authority key identifier: 2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/V8k0n9rqEarIEgNITkDx8oQ4w44.roa
Signing time: Wed 01 Jan 2025 07:48:23 +0000
ROA not before: Wed 01 Jan 2025 07:48:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201933
IP address blocks: 91.193.116.0/22 maxlen: 22
2a06:40c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4d:da:d8:31:75:5c:8a:ed:c1:9d:2e:43:b7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f6dbc6ae0b58a11731f219eda022471d1e11edb
Validity
Not Before: Jan 1 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57c9349fdaea11aac81203484e40f1f28438c38e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:d5:22:f4:29:fa:87:d0:69:87:9b:5f:b1:52:
a5:4d:48:70:e9:c2:ce:f9:f1:78:63:d6:b2:26:6c:
ee:48:97:1c:04:1d:54:b8:c1:f0:3e:1a:5f:ff:54:
e5:d0:e7:2c:28:48:56:00:95:31:ad:c5:2d:b6:e0:
eb:ab:06:cb:8e:7a:75:6a:2e:30:3e:6b:15:ab:78:
96:43:ab:56:b2:c6:f0:32:df:3d:b0:4b:8b:9e:a7:
bf:8a:4d:39:53:1b:c2:29:05:d6:5c:10:02:4f:4e:
63:5c:bc:55:3a:b2:ee:ba:46:ba:b8:f7:cc:b5:8d:
43:69:95:e1:83:4e:5c:25:0e:33:59:c6:6a:07:4c:
65:eb:44:b9:23:1a:9c:32:49:0f:09:54:c8:64:50:
0b:79:2f:7e:67:f1:9d:b6:bb:15:30:ff:81:20:4a:
9c:16:ee:9d:5e:43:3c:74:f2:e9:ff:a2:8a:b0:66:
2f:4a:a6:27:2c:33:48:d3:ce:57:5c:66:86:a6:8f:
d8:41:a7:8d:64:f2:5b:fb:41:f6:2f:b9:4f:9b:bd:
24:3c:ef:b7:e3:28:11:9f:ee:7d:28:3f:a4:43:66:
59:35:99:a5:0c:74:d9:4a:e6:27:ae:91:88:24:2d:
d6:31:37:3a:c1:41:a6:82:86:4d:26:ed:ef:be:b2:
6a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C9:34:9F:DA:EA:11:AA:C8:12:03:48:4E:40:F1:F2:84:38:C3:8E
X509v3 Authority Key Identifier:
keyid:2F:6D:BC:6A:E0:B5:8A:11:73:1F:21:9E:DA:02:24:71:D1:E1:1E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L228auC1ihFzHyGe2gIkcdHhHts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/V8k0n9rqEarIEgNITkDx8oQ4w44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e6d062-8f77-497d-b181-2510dac32496/1/L228auC1ihFzHyGe2gIkcdHhHts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.116.0/22
IPv6:
2a06:40c0::/29
Signature Algorithm: sha256WithRSAEncryption
0e:c0:17:9d:c8:be:ae:1c:2b:e3:29:c9:bb:46:22:a2:19:bb:
9a:20:ac:7d:da:03:2c:a6:c1:ba:1a:b2:76:e3:5c:38:d9:7e:
77:74:ed:a5:37:ab:d7:a4:19:15:9a:9a:eb:f4:ba:06:e6:34:
22:12:01:e7:cc:bf:a3:4d:d0:14:68:61:2a:12:d2:bc:46:84:
5c:88:64:07:09:19:d3:31:10:df:ba:f1:08:db:8f:09:ce:cc:
84:2b:4a:e1:c0:3c:8e:b9:d7:24:df:68:e6:01:d1:df:d5:0c:
c6:c5:c2:de:a3:ce:d7:ac:77:91:e9:3b:bd:e7:ed:01:9f:5c:
51:9a:62:56:5d:d1:ea:6f:bc:41:4a:33:2e:89:52:79:d3:38:
51:65:1b:45:39:9c:29:11:ea:1f:2d:70:94:27:8f:ad:ba:9b:
31:78:e1:8e:80:28:00:31:45:e5:46:e6:74:0d:d8:c8:93:b7:
81:3d:9a:22:26:31:3f:33:11:4f:ed:47:28:df:e8:41:03:7a:
a8:ab:79:31:85:f9:7b:33:40:0a:ef:47:d7:35:8f:aa:30:99:
49:3b:b4:c7:19:d8:75:21:fd:0b:52:5b:0f:fe:9d:fc:19:75:
10:37:50:1b:8d:a5:42:23:dc:c8:35:26:c3:38:a1:43:75:d9:
27:f3:9e:53
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQg1k3a2DF1XIrtwZ0uQ7dvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmNmRiYzZhZTBiNThhMTE3MzFmMjE5ZWRhMDIyNDcxZDFl
MTFlZGIwHhcNMjUwMTAxMDc0ODIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2M5MzQ5ZmRhZWExMWFhYzgxMjAzNDg0ZTQwZjFmMjg0MzhjMzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29Ui9Cn6h9Bph5tfsVKlTUhw6cLO
+fF4Y9ayJmzuSJccBB1UuMHwPhpf/1Tl0OcsKEhWAJUxrcUttuDrqwbLjnp1ai4w
PmsVq3iWQ6tWssbwMt89sEuLnqe/ik05UxvCKQXWXBACT05jXLxVOrLuuka6uPfM
tY1DaZXhg05cJQ4zWcZqB0xl60S5IxqcMkkPCVTIZFALeS9+Z/GdtrsVMP+BIEqc
Fu6dXkM8dPLp/6KKsGYvSqYnLDNI085XXGaGpo/YQaeNZPJb+0H2L7lPm70kPO+3
4ygRn+59KD+kQ2ZZNZmlDHTZSuYnrpGIJC3WMTc6wUGmgoZNJu3vvrJqYwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFFfJNJ/a6hGqyBIDSE5A8fKEOMOOMB8GA1UdIwQY
MBaAFC9tvGrgtYoRcx8hntoCJHHR4R7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDIyOGF1QzFpaEZ6SHlHZTJnSWtjZEhoSHRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lNmQwNjItOGY3Ny00OTdkLWIxODEt
MjUxMGRhYzMyNDk2LzEvVjhrMG45cnFFYXJJRWdOSVRrRHg4b1E0dzQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lNmQwNjItOGY3Ny00OTdkLWIxODEtMjUxMGRhYzMyNDk2
LzEvTDIyOGF1QzFpaEZ6SHlHZTJnSWtjZEhoSHRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCW8F0MA0E
AgACMAcDBQMqBkDAMA0GCSqGSIb3DQEBCwUAA4IBAQAOwBedyL6uHCvjKcm7RiKi
GbuaIKx92gMspsG6GrJ241w42X53dO2lN6vXpBkVmprr9LoG5jQiEgHnzL+jTdAU
aGEqEtK8RoRciGQHCRnTMRDfuvEI248JzsyEK0rhwDyOudck32jmAdHf1QzGxcLe
o87XrHeR6Tu95+0Bn1xRmmJWXdHqb7xBSjMuiVJ50zhRZRtFOZwpEeofLXCUJ4+t
upsxeOGOgCgAMUXlRuZ0DdjIk7eBPZoiJjE/MxFP7Uco3+hBA3qoq3kxhfl7M0AK
70fXNY+qMJlJO7THGdh1If0LUlsP/p38GXUQN1AbjaVCI9zINSbDOKFDddkn855T
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:32 2025 by rpki-client