Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/1-BGofSFZOno9pVnXMBI7UJeHJBg.roa
File: 1-BGofSFZOno9pVnXMBI7UJeHJBg.roa (raw, json)
Hash identifier: LL/uaCHo6NuNRF9xktkjKIvVTGv3e4Z41mGfZiStgPc=
Subject key identifier: F8:11:A8:7D:21:59:3A:7A:3D:A5:59:D7:30:12:3B:50:97:87:24:18
Certificate issuer: /CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Certificate serial: 0194258F7269CA7B107A0BBE6B7CE2685616
Authority key identifier: E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/1-BGofSFZOno9pVnXMBI7UJeHJBg.roa
Signing time: Thu 02 Jan 2025 05:49:05 +0000
ROA not before: Thu 02 Jan 2025 05:49:05 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5511
IP address blocks: 91.240.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:72:69:ca:7b:10:7a:0b:be:6b:7c:e2:68:56:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e56076f27e13d1800e77d16e4b60b23b6f58c820
Validity
Not Before: Jan 2 05:49:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f811a87d21593a7a3da559d730123b5097872418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:1d:ca:6e:24:a9:58:40:f0:24:27:10:25:af:
f8:9f:fa:f7:62:b8:9b:7a:35:0c:65:26:f9:0c:a7:
1a:27:17:71:c7:7c:83:38:37:b6:00:af:86:36:f1:
48:f8:f2:da:3c:c3:1b:1b:90:74:60:19:04:fe:36:
50:4a:74:47:fa:b7:8f:b9:ca:05:85:69:60:c0:49:
bf:68:95:ce:78:f0:f4:d3:eb:28:9e:ab:7a:74:c0:
99:72:a1:ba:6a:a1:06:f1:2c:f8:62:7d:8a:3e:7d:
aa:1a:e8:b8:95:e4:cd:dc:fa:e5:a3:ca:0d:08:c1:
1b:c4:c3:98:c6:32:f7:42:5d:70:64:56:7d:ca:43:
b4:cb:92:d1:84:7c:26:63:78:bb:2a:3e:33:27:91:
f9:a7:cb:62:98:37:49:f2:8c:92:51:62:e7:19:97:
e2:23:ff:c5:ae:21:42:21:8c:5c:19:57:f2:7d:07:
e2:88:43:38:e4:3e:b1:b9:38:20:ba:a6:4f:c4:66:
e2:6b:97:84:60:9b:d8:f0:cc:3e:af:62:0b:88:f1:
50:91:1b:c2:65:b2:66:8a:69:3a:4b:2c:be:47:b7:
6d:3b:d3:e4:e0:25:37:09:b0:d9:df:4d:bc:be:12:
b1:9a:7a:65:32:a2:d7:ca:ce:78:9b:ca:ee:2b:57:
6f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:11:A8:7D:21:59:3A:7A:3D:A5:59:D7:30:12:3B:50:97:87:24:18
X509v3 Authority Key Identifier:
keyid:E5:60:76:F2:7E:13:D1:80:0E:77:D1:6E:4B:60:B2:3B:6F:58:C8:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5WB28n4T0YAOd9FuS2CyO29YyCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/1-BGofSFZOno9pVnXMBI7UJeHJBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0ac44d-b3be-4277-80f8-58cf89888e2a/1/5WB28n4T0YAOd9FuS2CyO29YyCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.228.0/24
Signature Algorithm: sha256WithRSAEncryption
85:22:32:29:de:1c:6e:61:9d:01:ae:2d:84:1b:a5:13:cf:9c:
52:a7:d4:75:0c:30:66:e0:03:41:cd:fb:2f:40:4f:55:64:6a:
c7:80:71:7a:81:c3:27:45:3a:03:2f:29:e9:f5:17:80:5e:25:
0a:5c:6b:2a:cd:76:91:86:f0:f9:6a:0d:75:fb:be:ac:38:f1:
59:e2:4a:01:05:63:f3:88:c5:3b:66:b9:7e:83:fc:c9:06:4b:
91:b6:6f:b0:0b:25:9c:39:e8:84:f9:26:cb:66:76:f6:33:a2:
4c:e1:9b:0d:a6:d5:c1:aa:40:74:01:ae:72:b5:9b:62:9b:49:
61:5a:75:d7:63:b3:f1:5e:9d:ad:d6:ec:b2:3b:94:01:39:76:
f7:54:79:56:02:45:c2:75:b0:3a:c4:76:a5:95:da:c4:ed:c1:
f7:17:d0:d0:f2:dc:db:3a:7d:86:d4:88:3d:58:46:90:a8:0f:
6f:aa:b7:37:08:98:b0:12:0d:95:48:42:56:77:8d:53:30:18:
c1:6e:d3:7d:ed:da:47:61:fa:39:32:fc:11:00:d8:0f:6e:18:
f4:2c:18:59:f3:f9:7a:3e:8f:5a:6f:de:5b:26:44:71:8f:63:
fc:2b:09:a5:eb:75:21:f8:93:87:7d:32:3b:20:5d:48:c2:05:
4a:06:f4:30
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQlj3JpynsQegu+a3ziaFYWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1NjA3NmYyN2UxM2QxODAwZTc3ZDE2ZTRiNjBiMjNiNmY1
OGM4MjAwHhcNMjUwMTAyMDU0OTA1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODExYTg3ZDIxNTkzYTdhM2RhNTU5ZDczMDEyM2I1MDk3ODcyNDE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjB3KbiSpWEDwJCcQJa/4n/r3Yrib
ejUMZSb5DKcaJxdxx3yDODe2AK+GNvFI+PLaPMMbG5B0YBkE/jZQSnRH+rePucoF
hWlgwEm/aJXOePD00+sonqt6dMCZcqG6aqEG8Sz4Yn2KPn2qGui4leTN3Prlo8oN
CMEbxMOYxjL3Ql1wZFZ9ykO0y5LRhHwmY3i7Kj4zJ5H5p8timDdJ8oySUWLnGZfi
I//FriFCIYxcGVfyfQfiiEM45D6xuTgguqZPxGbia5eEYJvY8Mw+r2ILiPFQkRvC
ZbJmimk6Syy+R7dtO9Pk4CU3CbDZ3028vhKxmnplMqLXys54m8ruK1dvdwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPgRqH0hWTp6PaVZ1zASO1CXhyQYMB8GA1UdIwQY
MBaAFOVgdvJ+E9GADnfRbktgsjtvWMggMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVdCMjhuNFQwWUFPZDlGdVMyQ3lPMjlZeUNBLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC8wYWM0NGQtYjNiZS00Mjc3LTgwZjgt
NThjZjg5ODg4ZTJhLzEvMS1CR29mU0ZaT25vOXBWblhNQkk3VUplSEpCZy5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZTAvMGFjNDRkLWIzYmUtNDI3Ny04MGY4LTU4Y2Y4OTg4OGUy
YS8xLzVXQjI4bjRUMFlBT2Q5RnVTMkN5TzI5WXlDQS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvw5DAN
BgkqhkiG9w0BAQsFAAOCAQEAhSIyKd4cbmGdAa4thBulE8+cUqfUdQwwZuADQc37
L0BPVWRqx4BxeoHDJ0U6Ay8p6fUXgF4lClxrKs12kYbw+WoNdfu+rDjxWeJKAQVj
84jFO2a5foP8yQZLkbZvsAslnDnohPkmy2Z29jOiTOGbDabVwapAdAGucrWbYptJ
YVp112Oz8V6drdbssjuUATl291R5VgJFwnWwOsR2pZXaxO3B9xfQ0PLc2zp9htSI
PVhGkKgPb6q3NwiYsBINlUhCVneNUzAYwW7Tfe3aR2H6OTL8EQDYD24Y9CwYWfP5
ej6PWm/eWyZEcY9j/CsJpet1IfiTh30yOyBdSMIFSgb0MA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:16:01 2025 by rpki-client