Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/SdL3j45cQbfWvU87T9PJ4ua-tF8.roa
File: SdL3j45cQbfWvU87T9PJ4ua-tF8.roa (raw, json)
Hash identifier: vvLbS2VQzc0V1p+oheI/BeTFrjXHDz9zZ3UZAbJLP4I=
Subject key identifier: 49:D2:F7:8F:8E:5C:41:B7:D6:BD:4F:3B:4F:D3:C9:E2:E6:BE:B4:5F
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 0194258F986A755E877BD30BA46DA311E236
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/SdL3j45cQbfWvU87T9PJ4ua-tF8.roa
Signing time: Thu 02 Jan 2025 05:49:15 +0000
ROA not before: Thu 02 Jan 2025 05:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56915
IP address blocks: 91.229.119.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:98:6a:75:5e:87:7b:d3:0b:a4:6d:a3:11:e2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Jan 2 05:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=49d2f78f8e5c41b7d6bd4f3b4fd3c9e2e6beb45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:7b:47:f8:aa:89:34:f8:e5:48:49:de:42:65:
33:94:f1:58:30:21:09:36:7b:27:aa:62:24:b0:cf:
39:8a:50:b8:94:61:a0:08:65:e2:0e:76:d0:d9:23:
b8:92:fc:4f:d7:c2:b4:f0:cd:dc:fd:17:36:d6:e2:
1f:89:15:18:7e:b7:c3:7e:cb:e7:c8:76:fe:4e:de:
0b:91:22:a5:e2:56:3f:0a:f1:ab:02:46:87:a5:c2:
30:1b:f6:ea:98:02:89:e3:8b:9f:b8:f2:09:e1:e2:
23:ae:e5:e1:7b:26:7d:39:21:49:84:1c:25:0f:b2:
cb:7e:15:0c:b1:7a:12:15:71:14:b6:6d:ab:a8:47:
86:3c:90:6e:91:ba:0a:e4:63:0d:e0:8e:26:fa:be:
a9:bf:7a:49:88:71:03:0a:ff:6b:65:a4:c7:d7:e4:
5d:3c:4c:7f:21:52:a5:09:c7:e1:10:28:9c:84:27:
06:01:78:cb:ea:a2:d9:89:0e:da:8a:28:81:47:40:
19:15:09:72:d4:dd:a4:1b:38:a0:28:13:74:7d:f9:
31:e2:8d:c8:bb:94:65:53:20:b5:c7:d5:62:42:ac:
f7:7c:88:ab:ac:2e:f4:ca:cd:12:6f:47:67:b8:83:
53:37:7f:81:f9:15:88:68:d9:75:ff:f6:c5:e5:ef:
c8:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:D2:F7:8F:8E:5C:41:B7:D6:BD:4F:3B:4F:D3:C9:E2:E6:BE:B4:5F
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/SdL3j45cQbfWvU87T9PJ4ua-tF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.119.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:62:45:52:87:0f:08:c1:c5:fd:0c:33:f9:0d:18:bd:d1:01:
46:f1:2a:6e:a1:cf:5e:bd:89:cd:09:3b:bb:94:d2:77:b6:88:
c3:bf:33:86:d8:da:c9:8b:c6:6b:d7:90:dc:51:45:7d:40:71:
d7:3d:47:72:69:b0:f9:c9:dc:d3:c1:ad:cc:cb:ac:77:63:87:
b3:1a:eb:20:1f:d1:de:9b:6c:0f:2e:02:db:24:0c:2d:41:99:
0f:dc:c6:e9:9e:2e:d0:00:bc:d7:ad:b0:fa:ab:af:ae:95:c2:
c5:12:a0:f0:98:7d:07:58:38:05:e1:a7:45:e7:3a:07:66:c5:
0f:0b:0c:8d:66:56:df:e6:8f:37:f2:de:21:8c:c5:82:2a:c6:
f0:dd:50:12:0f:69:30:19:ab:6f:12:ab:07:5d:ff:10:63:89:
26:ef:cb:7e:61:58:fd:f0:8d:59:1a:19:3b:74:99:cd:80:26:
02:a4:df:08:9c:a1:b2:d7:8b:68:bd:fc:11:6a:ba:c2:59:1b:
d4:48:5f:87:bb:46:06:b3:cc:ac:fc:84:04:cc:f4:31:0b:90:
66:af:94:0f:43:03:9f:41:5d:ac:d7:90:a4:98:93:09:1a:6f:
bc:ff:d4:e8:6a:05:76:62:2d:a3:ec:4d:93:d2:81:09:dc:fb:
18:bd:e6:21
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj5hqdV6He9MLpG2jEeI2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxODQ3OGYxOThmZTU2OTAxMGMzZGY2MjE5MTQyZjUzMGM0
ZjVlNTYwHhcNMjUwMTAyMDU0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0OWQyZjc4ZjhlNWM0MWI3ZDZiZDRmM2I0ZmQzYzllMmU2YmViNDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ntH+KqJNPjlSEneQmUzlPFYMCEJ
NnsnqmIksM85ilC4lGGgCGXiDnbQ2SO4kvxP18K08M3c/Rc21uIfiRUYfrfDfsvn
yHb+Tt4LkSKl4lY/CvGrAkaHpcIwG/bqmAKJ44ufuPIJ4eIjruXheyZ9OSFJhBwl
D7LLfhUMsXoSFXEUtm2rqEeGPJBukboK5GMN4I4m+r6pv3pJiHEDCv9rZaTH1+Rd
PEx/IVKlCcfhECichCcGAXjL6qLZiQ7aiiiBR0AZFQly1N2kGzigKBN0ffkx4o3I
u5RlUyC1x9ViQqz3fIirrC70ys0Sb0dnuINTN3+B+RWIaNl1//bF5e/IdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEnS94+OXEG31r1PO0/TyeLmvrRfMB8GA1UdIwQY
MBaAFGGEePGY/laQEMPfYhkUL1MMT15WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEt
YmE5OGYxMTIyMTIxLzEvU2RMM2o0NWNRYmZXdlU4N1Q5UEo0dWEtdEY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81M2M3YjgtNWU0Yi00OWZkLThjOTEtYmE5OGYxMTIyMTIx
LzEvWVlSNDhaai1WcEFRdzk5aUdSUXZVd3hQWGxZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+V3MA0G
CSqGSIb3DQEBCwUAA4IBAQBMYkVShw8IwcX9DDP5DRi90QFG8Spuoc9evYnNCTu7
lNJ3tojDvzOG2NrJi8Zr15DcUUV9QHHXPUdyabD5ydzTwa3My6x3Y4ezGusgH9He
m2wPLgLbJAwtQZkP3Mbpni7QALzXrbD6q6+ulcLFEqDwmH0HWDgF4adF5zoHZsUP
CwyNZlbf5o838t4hjMWCKsbw3VASD2kwGatvEqsHXf8QY4km78t+YVj98I1ZGhk7
dJnNgCYCpN8InKGy14tovfwRarrCWRvUSF+Hu0YGs8ys/IQEzPQxC5Bmr5QPQwOf
QV2s15CkmJMJGm+8/9ToagV2Yi2j7E2T0oEJ3PsYveYh
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:24 2025 by rpki-client