Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/_Bsml2qqbGHZzbArZ45PfO9qGwQ.roa
File: _Bsml2qqbGHZzbArZ45PfO9qGwQ.roa (raw, json)
Hash identifier: 5uxbb9g8kfaytw7n+/xBV35PStLcWraqVO3EGHgGVxo=
Subject key identifier: FC:1B:26:97:6A:AA:6C:61:D9:CD:B0:2B:67:8E:4F:7C:EF:6A:1B:04
Certificate issuer: /CN=69b60a6d77c4cac8f102d810be330b3d391efe93
Certificate serial: 361AFA
Authority key identifier: 69:B6:0A:6D:77:C4:CA:C8:F1:02:D8:10:BE:33:0B:3D:39:1E:FE:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abYKbXfEysjxAtgQvjMLPTke_pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/_Bsml2qqbGHZzbArZ45PfO9qGwQ.roa
Signing time: Sat 05 Feb 2022 20:27:01 +0000
ROA not before: Sat 05 Feb 2022 20:27:01 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141677
IP address blocks: 91.202.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3545850 (0x361afa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b60a6d77c4cac8f102d810be330b3d391efe93
Validity
Not Before: Feb 5 20:27:01 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fc1b26976aaa6c61d9cdb02b678e4f7cef6a1b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8e:be:0a:a2:64:3f:31:cf:32:eb:40:91:12:
b0:95:5f:c5:88:07:d1:86:35:2a:6d:5b:b1:7e:32:
54:15:33:9c:2c:b0:cf:df:f6:d0:25:eb:1a:81:11:
d9:37:c1:c7:b0:f6:07:d6:2f:00:1f:17:da:ed:6d:
c2:68:8a:a6:f5:d7:83:59:ab:e8:94:80:07:f2:3a:
fb:70:5f:dc:71:e4:38:6c:30:93:b5:bc:f2:37:ce:
d2:b5:6b:80:5e:f4:1d:92:c0:e6:ef:bd:86:be:bc:
72:07:d9:2a:d0:71:ed:ba:06:72:30:e4:90:fd:a5:
f4:2f:c4:4d:42:8d:a5:6c:1c:9b:70:de:aa:8a:02:
23:ea:a1:af:23:69:54:96:e1:3b:09:b7:22:78:3a:
94:f8:aa:75:6d:df:b1:fd:4f:53:1e:4d:48:3f:c7:
93:a3:f7:f8:15:11:04:eb:b1:ac:7d:df:91:6a:99:
3b:f5:26:ea:de:73:65:6d:0f:b6:0a:c3:3f:82:19:
cc:ef:2f:c1:fe:66:e9:1f:60:db:10:c7:2f:24:d3:
77:c5:68:21:07:13:07:c0:bb:eb:17:a2:4f:a2:74:
04:79:8a:23:08:fb:b2:6b:d1:29:54:3d:29:b3:5c:
29:de:a6:b8:b1:fb:fa:52:58:5b:df:57:1e:85:3a:
44:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:1B:26:97:6A:AA:6C:61:D9:CD:B0:2B:67:8E:4F:7C:EF:6A:1B:04
X509v3 Authority Key Identifier:
keyid:69:B6:0A:6D:77:C4:CA:C8:F1:02:D8:10:BE:33:0B:3D:39:1E:FE:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abYKbXfEysjxAtgQvjMLPTke_pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/_Bsml2qqbGHZzbArZ45PfO9qGwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/abYKbXfEysjxAtgQvjMLPTke_pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.209.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:14:16:bc:d2:33:38:6b:b4:7d:3d:40:7e:fd:a0:24:42:37:
b1:c6:5f:ac:8e:3c:f5:1c:8c:4b:4e:62:6c:57:35:4d:d4:ab:
b9:d7:38:d5:4b:d5:02:d8:c4:38:25:1e:49:1c:e8:86:61:0a:
98:fa:76:61:fd:2a:30:af:0f:97:41:bc:2e:4b:c8:87:55:ed:
95:c8:1a:09:8c:91:87:e2:be:ff:78:97:bd:70:4a:23:d3:00:
bd:30:6c:82:ea:25:bf:e2:11:22:ec:cf:9f:58:74:f4:0c:9e:
f1:32:71:a1:9d:21:3a:2e:e3:1d:df:42:d9:af:d4:47:ff:a0:
e3:bb:93:f6:01:b9:3f:01:6a:b2:a0:ec:44:fe:c7:ee:69:df:
b4:e7:cc:18:14:74:e8:51:ac:f3:c3:1b:90:83:80:f4:55:e2:
7e:98:44:65:d7:cb:58:8f:cb:5f:f2:29:a8:f6:42:b8:fd:5c:
35:6a:75:69:40:51:a0:0a:4e:25:8a:e3:3f:a9:7d:51:de:73:
bb:db:5b:52:02:d6:da:6d:49:be:2e:c7:8b:f3:b5:70:bb:65:
55:00:b8:d0:b1:6b:ed:cc:69:c3:8d:3a:af:67:f7:20:56:ee:
d7:90:cc:b3:bb:ce:cc:ff:36:00:2c:90:79:a1:aa:05:81:4a:
6b:02:ce:ae
-----BEGIN CERTIFICATE-----
MIIE7jCCA9agAwIBAgIDNhr6MA0GCSqGSIb3DQEBCwUAMDMxMTAvBgNVBAMTKDY5
YjYwYTZkNzdjNGNhYzhmMTAyZDgxMGJlMzMwYjNkMzkxZWZlOTMwHhcNMjIwMjA1
MjAyNzAxWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQDEyhmYzFiMjY5NzZhYWE2
YzYxZDljZGIwMmI2NzhlNGY3Y2VmNmExYjA0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAqI6+CqJkPzHPMutAkRKwlV/FiAfRhjUqbVuxfjJUFTOcLLDP
3/bQJesagRHZN8HHsPYH1i8AHxfa7W3CaIqm9deDWavolIAH8jr7cF/cceQ4bDCT
tbzyN87StWuAXvQdksDm772GvrxyB9kq0HHtugZyMOSQ/aX0L8RNQo2lbBybcN6q
igIj6qGvI2lUluE7CbcieDqU+Kp1bd+x/U9THk1IP8eTo/f4FREE67Gsfd+Rapk7
9Sbq3nNlbQ+2CsM/ghnM7y/B/mbpH2DbEMcvJNN3xWghBxMHwLvrF6JPonQEeYoj
CPuya9EpVD0ps1wp3qa4sfv6Ulhb31cehTpE/wIDAQABo4ICCTCCAgUwHQYDVR0O
BBYEFPwbJpdqqmxh2c2wK2eOT3zvahsEMB8GA1UdIwQYMBaAFGm2Cm13xMrI8QLY
EL4zCz05Hv6TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEFBQcBAQRYMFYwVAYIKwYB
BQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQv
YWJZS2JYZkV5c2p4QXRnUXZqTUxQVGtlX3BNLmNlcjCBjQYIKwYBBQUHAQsEgYAw
fjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9kYy81ZmY0ZmYtNWJmZS00MTIzLWExNTItNGFkOTkxNGJiYTY4LzEv
X0JzbWwycXFiR0haemJBclo0NVBmTzlxR3dRLnJvYTCBgQYDVR0fBHoweDB2oHSg
coZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy81
ZmY0ZmYtNWJmZS00MTIzLWExNTItNGFkOTkxNGJiYTY4LzEvYWJZS2JYZkV5c2p4
QXRnUXZqTUxQVGtlX3BNLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8G
CCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8rRMA0GCSqGSIb3DQEBCwUAA4IB
AQCjFBa80jM4a7R9PUB+/aAkQjexxl+sjjz1HIxLTmJsVzVN1Ku51zjVS9UC2MQ4
JR5JHOiGYQqY+nZh/Sowrw+XQbwuS8iHVe2VyBoJjJGH4r7/eJe9cEoj0wC9MGyC
6iW/4hEi7M+fWHT0DJ7xMnGhnSE6LuMd30LZr9RH/6Dju5P2Abk/AWqyoOxE/sfu
ad+058wYFHToUazzwxuQg4D0VeJ+mERl18tYj8tf8imo9kK4/Vw1anVpQFGgCk4l
iuM/qX1R3nO721tSAtbabUm+LseL87Vwu2VVALjQsWvtzGnDjTqvZ/cgVu7XkMyz
u87M/zYALJB5oaoFgUprAs6u
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:00:54 2025 by rpki-client