Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/S1COUfvLMbvw9Yid0jd2wFBu_QI.roa
File: S1COUfvLMbvw9Yid0jd2wFBu_QI.roa (raw, json)
Hash identifier: DqSGs7KIucyAmnzlIGfShRFgJ8Xr172bSuA8k0xAfeI=
Subject key identifier: 4B:50:8E:51:FB:CB:31:BB:F0:F5:88:9D:D2:37:76:C0:50:6E:FD:02
Certificate issuer: /CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
Certificate serial: 0193BFE62DD31254C01C0D8D8013599EF411
Authority key identifier: E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/S1COUfvLMbvw9Yid0jd2wFBu_QI.roa
Signing time: Fri 13 Dec 2024 12:02:33 +0000
ROA not before: Fri 13 Dec 2024 12:02:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8823
IP address blocks: 91.223.95.0/24 maxlen: 24
2a0a:64c0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:bf:e6:2d:d3:12:54:c0:1c:0d:8d:80:13:59:9e:f4:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0f2f545ddb234e383d36b8a8d6b56a38dd72f89
Validity
Not Before: Dec 13 12:02:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4b508e51fbcb31bbf0f5889dd23776c0506efd02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cb:33:f5:2b:e8:8f:09:d2:0a:2a:59:f1:d8:
d8:13:1c:9d:fc:01:29:6c:6b:e2:e0:33:e3:b6:86:
a0:74:a8:29:3d:32:65:60:5a:54:7e:d8:ff:da:01:
d7:e6:0a:cd:af:d4:23:58:96:63:09:1b:14:2d:bd:
38:4e:b7:7f:50:67:ef:7a:0d:a1:c4:f1:b0:ca:76:
3b:7e:63:85:8f:db:3e:1f:e5:b2:ee:cc:76:cc:86:
cc:eb:c8:97:4d:53:45:a6:1f:53:3f:12:7c:7a:6a:
3b:79:cc:ff:2c:c4:ed:51:c3:de:54:66:c9:52:89:
27:cb:64:47:2f:ad:62:b0:77:80:cc:ca:99:5c:4f:
96:79:d1:cd:fc:91:40:d7:9d:9d:80:17:89:8b:c9:
15:bc:8f:8d:55:05:81:ea:7b:62:c5:dd:41:4e:ca:
be:0f:dd:ba:b8:e0:27:43:fc:b9:15:14:3d:70:d5:
6f:24:a1:31:b3:97:3f:e2:4e:a4:51:54:28:cd:80:
60:41:a4:f6:0a:d0:74:9b:72:52:87:d8:ce:33:70:
e8:f1:04:79:a4:b5:8b:f6:b8:f9:05:f3:75:95:9c:
a9:0d:f0:2c:3a:72:f6:d1:b5:fa:3d:a8:9b:72:e8:
e4:f6:da:a0:b1:5e:b5:cd:05:65:00:ae:6f:18:3d:
78:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:50:8E:51:FB:CB:31:BB:F0:F5:88:9D:D2:37:76:C0:50:6E:FD:02
X509v3 Authority Key Identifier:
keyid:E0:F2:F5:45:DD:B2:34:E3:83:D3:6B:8A:8D:6B:56:A3:8D:D7:2F:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4PL1Rd2yNOOD02uKjWtWo43XL4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/S1COUfvLMbvw9Yid0jd2wFBu_QI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/c80c5a-fae2-466d-aa16-8ca6c33d14bb/1/4PL1Rd2yNOOD02uKjWtWo43XL4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.95.0/24
IPv6:
2a0a:64c0::/32
Signature Algorithm: sha256WithRSAEncryption
0a:80:4e:0b:ea:9d:ff:3e:44:58:4a:e7:d3:c8:32:c4:e0:8a:
79:53:03:5e:15:c2:49:d2:de:e8:49:59:7c:cb:75:7c:7d:70:
b2:8e:a1:55:39:e3:bc:90:04:c7:5b:e9:e3:c7:8e:04:45:db:
9a:31:5b:b2:e5:e7:09:ce:4f:24:62:5e:45:48:0d:83:80:5c:
21:d4:fe:6b:c5:fd:2b:63:64:b7:b5:f5:71:bc:2e:d9:7c:0a:
1d:f0:43:5a:2d:19:1f:29:a2:5c:b4:01:53:dc:35:c4:43:67:
5d:11:f5:a8:60:5e:24:64:60:70:9f:c2:fc:d7:a6:ce:aa:4b:
7d:c1:97:60:94:e9:76:78:9c:e9:47:0c:bf:60:48:2a:6a:0b:
9f:99:d8:e8:a7:e8:d5:f7:9f:a1:86:9d:7e:84:e5:d4:00:3f:
ae:21:bd:aa:29:08:95:68:a8:00:cc:e0:82:16:e8:81:de:11:
00:07:3b:d6:ed:f7:a3:59:d2:ea:65:23:ee:66:98:e5:3b:38:
d6:17:0d:5d:93:d7:87:c8:84:91:25:f3:e9:17:7d:ea:91:ff:
55:3f:54:14:87:29:c8:fc:50:1a:2a:ee:91:49:be:45:8b:dd:
3a:9a:21:39:31:ef:fa:39:0b:77:52:bc:5b:fb:8c:63:8b:6a:
95:20:ce:ec
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZO/5i3TElTAHA2NgBNZnvQRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwZjJmNTQ1ZGRiMjM0ZTM4M2QzNmI4YThkNmI1NmEzOGRk
NzJmODkwHhcNMjQxMjEzMTIwMjMzWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YjUwOGU1MWZiY2IzMWJiZjBmNTg4OWRkMjM3NzZjMDUwNmVmZDAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMsz9SvojwnSCipZ8djYExyd/AEp
bGvi4DPjtoagdKgpPTJlYFpUftj/2gHX5grNr9QjWJZjCRsULb04Trd/UGfveg2h
xPGwynY7fmOFj9s+H+Wy7sx2zIbM68iXTVNFph9TPxJ8emo7ecz/LMTtUcPeVGbJ
Uokny2RHL61isHeAzMqZXE+WedHN/JFA152dgBeJi8kVvI+NVQWB6ntixd1BTsq+
D926uOAnQ/y5FRQ9cNVvJKExs5c/4k6kUVQozYBgQaT2CtB0m3JSh9jOM3Do8QR5
pLWL9rj5BfN1lZypDfAsOnL20bX6Paibcujk9tqgsV61zQVlAK5vGD14RQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEtQjlH7yzG78PWIndI3dsBQbv0CMB8GA1UdIwQY
MBaAFODy9UXdsjTjg9Nrio1rVqON1y+JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNFBMMVJkMnlOT09EMDJ1S2pXdFdvNDNYTDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9jODBjNWEtZmFlMi00NjZkLWFhMTYt
OGNhNmMzM2QxNGJiLzEvUzFDT1VmdkxNYnZ3OVlpZDBqZDJ3RkJ1X1FJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi9jODBjNWEtZmFlMi00NjZkLWFhMTYtOGNhNmMzM2QxNGJi
LzEvNFBMMVJkMnlOT09EMDJ1S2pXdFdvNDNYTDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW99fMA0E
AgACMAcDBQAqCmTAMA0GCSqGSIb3DQEBCwUAA4IBAQAKgE4L6p3/PkRYSufTyDLE
4Ip5UwNeFcJJ0t7oSVl8y3V8fXCyjqFVOeO8kATHW+njx44ERduaMVuy5ecJzk8k
Yl5FSA2DgFwh1P5rxf0rY2S3tfVxvC7ZfAod8ENaLRkfKaJctAFT3DXEQ2ddEfWo
YF4kZGBwn8L816bOqkt9wZdglOl2eJzpRwy/YEgqagufmdjop+jV95+hhp1+hOXU
AD+uIb2qKQiVaKgAzOCCFuiB3hEABzvW7fejWdLqZSPuZpjlOzjWFw1dk9eHyISR
JfPpF33qkf9VP1QUhynI/FAaKu6RSb5Fi906miE5Me/6OQt3Urxb+4xji2qVIM7s
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:25:38 2025 by rpki-client