Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/DljJr8JzJiVrlFsa4a_Y6aDbzLA.roa
File: DljJr8JzJiVrlFsa4a_Y6aDbzLA.roa (raw, json)
Hash identifier: h/O87BR6bvL7AJdknAhnONrNppB3GhoL2ZES3kI48+0=
Subject key identifier: 0E:58:C9:AF:C2:73:26:25:6B:94:5B:1A:E1:AF:D8:E9:A0:DB:CC:B0
Certificate issuer: /CN=c13f17541732f57abff1294c71b533eb56746fd6
Certificate serial: 019427478FBE846BE57AA728C49D7DAD15AD
Authority key identifier: C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/DljJr8JzJiVrlFsa4a_Y6aDbzLA.roa
Signing time: Thu 02 Jan 2025 13:49:48 +0000
ROA not before: Thu 02 Jan 2025 13:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42473
IP address blocks: 91.208.217.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:8f:be:84:6b:e5:7a:a7:28:c4:9d:7d:ad:15:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c13f17541732f57abff1294c71b533eb56746fd6
Validity
Not Before: Jan 2 13:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0e58c9afc27326256b945b1ae1afd8e9a0dbccb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:af:31:7f:8e:d5:5f:ec:58:1d:89:3a:7f:eb:
ee:fa:51:1e:53:be:5c:5d:6a:38:bb:21:08:08:7a:
78:2c:0b:97:86:dc:1d:ed:1b:0a:20:e8:e4:cb:ca:
57:87:27:01:d4:f5:ad:7d:7c:dc:ab:82:bf:b4:ef:
f7:86:0c:e7:1c:b2:0d:08:1a:16:5e:d2:ef:ac:30:
c7:1d:3a:e5:f7:43:37:94:25:f9:0e:67:8e:9e:44:
5d:49:96:92:f5:e1:3e:c9:ee:40:8a:b3:28:c4:8d:
26:e9:5f:70:b6:df:f5:7c:eb:21:5a:cf:71:d3:0b:
31:70:a2:c6:53:54:27:69:84:00:4a:ed:d5:ae:cf:
2e:1d:c5:fb:36:37:21:87:43:ec:ff:0c:a6:3d:32:
c0:af:61:2a:42:eb:ed:e2:95:f3:e5:6d:a0:6e:e6:
3e:ee:89:c2:dd:a1:aa:32:e0:1d:fe:a4:a1:bc:65:
95:dc:bc:fa:21:20:a7:70:80:6f:17:76:c4:0d:60:
9c:a2:be:0c:47:70:29:7e:c9:27:33:bc:29:70:8b:
d4:c7:cd:10:12:17:f4:0b:60:9f:30:3e:36:6e:fd:
0f:01:92:cc:24:03:c3:9a:f7:e4:d8:b2:b0:8e:09:
3c:8c:4c:13:a9:bf:c6:38:dc:65:99:74:b5:2e:84:
3a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:58:C9:AF:C2:73:26:25:6B:94:5B:1A:E1:AF:D8:E9:A0:DB:CC:B0
X509v3 Authority Key Identifier:
keyid:C1:3F:17:54:17:32:F5:7A:BF:F1:29:4C:71:B5:33:EB:56:74:6F:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/DljJr8JzJiVrlFsa4a_Y6aDbzLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/88a55d-5163-433e-b478-d8a1c3295e89/1/wT8XVBcy9Xq_8SlMcbUz61Z0b9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.217.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:23:50:50:71:4f:0d:4b:5d:53:32:38:81:c3:5f:a0:84:53:
4a:09:5e:66:76:ca:5e:82:64:9c:ef:07:99:55:04:f9:af:d2:
36:ef:d5:7b:43:46:29:37:97:a6:e4:09:82:96:31:e4:d0:09:
7b:86:2b:1c:8d:3f:c9:9c:c4:da:d6:a7:98:a7:bd:0a:a0:90:
a9:f4:e4:7d:6e:11:32:de:e4:b9:2c:64:bc:f0:98:e7:0f:74:
f9:e0:38:b9:b3:d2:b3:74:33:3d:9c:6b:d7:2c:2e:f8:e7:82:
c5:2c:ec:25:27:1c:a9:71:67:75:40:ad:26:16:62:4d:52:7e:
d8:14:23:d2:63:08:29:0a:30:73:fb:68:89:e6:9c:09:8c:0c:
09:1d:7e:2c:d7:09:46:6f:6d:d8:27:95:2d:4e:c7:77:cc:fa:
ad:4e:d3:a0:48:8d:5c:e8:4b:79:91:fd:c5:8c:6b:4c:52:f0:
ce:9b:ac:9f:df:04:5c:3e:ba:8c:12:7e:d9:a3:f9:ee:89:13:
fa:5a:11:ab:85:b2:51:63:cf:cf:96:b0:4a:c1:89:09:73:71:
a3:e3:7f:6e:ad:c2:a8:a2:6a:a7:ba:a8:85:77:b6:ea:70:5d:
6f:52:30:3b:28:25:06:e9:67:c3:d5:d1:a7:37:07:fc:94:6c:
75:a4:77:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR4++hGvleqcoxJ19rRWtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMxM2YxNzU0MTczMmY1N2FiZmYxMjk0YzcxYjUzM2ViNTY3
NDZmZDYwHhcNMjUwMTAyMTM0OTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZTU4YzlhZmMyNzMyNjI1NmI5NDViMWFlMWFmZDhlOWEwZGJjY2IwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz68xf47VX+xYHYk6f+vu+lEeU75c
XWo4uyEICHp4LAuXhtwd7RsKIOjky8pXhycB1PWtfXzcq4K/tO/3hgznHLINCBoW
XtLvrDDHHTrl90M3lCX5DmeOnkRdSZaS9eE+ye5AirMoxI0m6V9wtt/1fOshWs9x
0wsxcKLGU1QnaYQASu3Vrs8uHcX7Njchh0Ps/wymPTLAr2EqQuvt4pXz5W2gbuY+
7onC3aGqMuAd/qShvGWV3Lz6ISCncIBvF3bEDWCcor4MR3ApfsknM7wpcIvUx80Q
Ehf0C2CfMD42bv0PAZLMJAPDmvfk2LKwjgk8jEwTqb/GONxlmXS1LoQ6ewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFA5Yya/CcyYla5RbGuGv2Omg28ywMB8GA1UdIwQY
MBaAFME/F1QXMvV6v/EpTHG1M+tWdG/WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvd1Q4WFZCY3k5WHFfOFNsTWNiVXo2MVowYjlZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS84OGE1NWQtNTE2My00MzNlLWI0Nzgt
ZDhhMWMzMjk1ZTg5LzEvRGxqSnI4SnpKaVZybEZzYTRhX1k2YURiekxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS84OGE1NWQtNTE2My00MzNlLWI0NzgtZDhhMWMzMjk1ZTg5
LzEvd1Q4WFZCY3k5WHFfOFNsTWNiVXo2MVowYjlZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9DZMA0G
CSqGSIb3DQEBCwUAA4IBAQBrI1BQcU8NS11TMjiBw1+ghFNKCV5mdspegmSc7weZ
VQT5r9I279V7Q0YpN5em5AmCljHk0Al7hiscjT/JnMTa1qeYp70KoJCp9OR9bhEy
3uS5LGS88JjnD3T54Di5s9KzdDM9nGvXLC7454LFLOwlJxypcWd1QK0mFmJNUn7Y
FCPSYwgpCjBz+2iJ5pwJjAwJHX4s1wlGb23YJ5UtTsd3zPqtTtOgSI1c6Et5kf3F
jGtMUvDOm6yf3wRcPrqMEn7Zo/nuiRP6WhGrhbJRY8/PlrBKwYkJc3Gj439urcKo
omqnuqiFd7bqcF1vUjA7KCUG6WfD1dGnNwf8lGx1pHc9
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:27:45 2025 by rpki-client