Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/BeC5QJuMDbRE8GuHOX_CKwW3B7g.roa
File: BeC5QJuMDbRE8GuHOX_CKwW3B7g.roa (raw, json)
Hash identifier: BxPZcAzxmd/lQ2uQDz+xSFW1WceTv3DHzpgbSlO4sAs=
Subject key identifier: 05:E0:B9:40:9B:8C:0D:B4:44:F0:6B:87:39:7F:C2:2B:05:B7:07:B8
Certificate issuer: /CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Certificate serial: 0182C9EC436B3B9CE5588AAB1132274FF1B9
Authority key identifier: FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/BeC5QJuMDbRE8GuHOX_CKwW3B7g.roa
Signing time: Tue 23 Aug 2022 08:58:00 +0000
ROA not before: Tue 23 Aug 2022 08:58:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209181
IP address blocks: 91.188.252.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:c9:ec:43:6b:3b:9c:e5:58:8a:ab:11:32:27:4f:f1:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Validity
Not Before: Aug 23 08:58:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=05e0b9409b8c0db444f06b87397fc22b05b707b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:54:f3:40:11:0f:a3:b2:1e:52:e4:94:0d:95:
4f:33:06:28:d5:ee:ba:25:75:78:49:6e:1f:f8:01:
82:3e:b7:fd:e4:9c:98:a8:35:d1:bd:b5:1d:dc:81:
8d:03:0a:88:a0:22:66:93:eb:42:c8:42:da:0d:af:
f7:5d:50:40:d4:92:9d:10:5a:2e:05:b6:89:d2:21:
ce:95:73:f8:38:f6:ab:6e:30:4b:98:d4:a3:fa:a7:
45:ee:30:5e:4f:77:71:ab:a3:76:bf:ab:e3:95:48:
c9:73:7f:e9:eb:83:7a:ce:cf:50:0d:87:86:6a:23:
b0:42:45:df:d7:4c:a7:a1:84:7b:46:c0:ad:b1:45:
4e:8b:b2:94:ea:76:fb:01:48:9c:c5:3b:ca:7b:22:
78:a7:d4:40:68:b1:46:0b:df:46:d5:d4:a6:0a:1e:
50:22:76:06:f0:07:54:67:4b:9a:35:4f:3b:a3:27:
eb:0d:75:8d:9b:85:27:0e:3c:25:57:f5:c5:4b:6f:
a8:46:27:ad:b8:10:58:ff:ac:fa:f7:1d:16:a2:57:
ed:e7:2b:30:7d:3e:6c:c7:61:5c:27:3f:65:4a:f0:
e9:19:8e:c2:f4:64:4a:24:e9:4a:5f:27:ce:52:99:
d9:94:1b:de:d9:00:99:22:91:0e:6f:b6:aa:d2:ce:
23:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:E0:B9:40:9B:8C:0D:B4:44:F0:6B:87:39:7F:C2:2B:05:B7:07:B8
X509v3 Authority Key Identifier:
keyid:FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/BeC5QJuMDbRE8GuHOX_CKwW3B7g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/_zbtM3WmqJXK3Ung7NQplFSzuJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.252.0/24
Signature Algorithm: sha256WithRSAEncryption
67:5b:31:c3:ed:db:00:14:91:30:86:a1:bd:0f:6d:cd:e4:f4:
4b:e5:c1:9f:f8:40:80:13:04:aa:cc:43:72:3a:98:9f:7e:90:
ae:51:80:96:8a:0b:75:56:f5:22:7d:dd:76:a6:35:15:84:19:
e8:b2:07:f1:f5:66:29:f3:fc:3c:cd:97:a1:09:71:81:76:35:
ce:ba:e8:dc:5e:ef:49:53:bc:b6:8c:97:4b:5b:47:b3:cf:d7:
f7:4c:23:e3:20:97:6c:93:81:c6:bf:bf:5a:9c:cb:c4:0f:18:
7b:1a:ed:90:58:e1:b6:7f:bf:b0:20:7a:e3:5a:45:78:81:f9:
cb:87:15:a2:ae:16:59:db:18:1b:c0:df:89:8a:c4:55:36:af:
0e:b6:d8:f8:47:3d:a6:25:22:63:f9:4a:33:e9:a7:a4:55:70:
23:bb:50:a3:40:fb:5e:2a:d1:95:99:b9:3e:54:6e:94:c1:aa:
9d:f9:8b:b7:14:09:06:8f:c4:06:53:db:b8:8a:e2:06:67:99:
87:65:90:13:31:19:f7:ec:0a:4c:6b:be:8a:40:c0:cf:ed:04:
59:96:05:2b:6e:84:3c:26:28:a1:ac:36:b0:cb:44:5e:28:88:
67:86:9d:5b:d0:cb:68:37:c1:67:8b:52:02:fa:4b:3c:9a:37:
44:d5:97:6b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYLJ7ENrO5zlWIqrETInT/G5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMzZlZDMzNzVhNmE4OTVjYWRkNDllMGVjZDQyOTk0NTRi
M2I4OWMwHhcNMjIwODIzMDg1ODAwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWUwYjk0MDliOGMwZGI0NDRmMDZiODczOTdmYzIyYjA1YjcwN2I4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFTzQBEPo7IeUuSUDZVPMwYo1e66
JXV4SW4f+AGCPrf95JyYqDXRvbUd3IGNAwqIoCJmk+tCyELaDa/3XVBA1JKdEFou
BbaJ0iHOlXP4OParbjBLmNSj+qdF7jBeT3dxq6N2v6vjlUjJc3/p64N6zs9QDYeG
aiOwQkXf10ynoYR7RsCtsUVOi7KU6nb7AUicxTvKeyJ4p9RAaLFGC99G1dSmCh5Q
InYG8AdUZ0uaNU87oyfrDXWNm4UnDjwlV/XFS2+oRietuBBY/6z69x0Wolft5ysw
fT5sx2FcJz9lSvDpGY7C9GRKJOlKXyfOUpnZlBve2QCZIpEOb7aq0s4jpQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAXguUCbjA20RPBrhzl/wisFtwe4MB8GA1UdIwQY
MBaAFP827TN1pqiVyt1J4OzUKZRUs7icMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3pidE0zV21xSlhLM1VuZzdOUXBsRlN6dUp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zYmM4NDAtODMyOS00Mzg5LWEzNGIt
ZWMxOTBiMWNlYWNhLzEvQmVDNVFKdU1EYlJFOEd1SE9YX0NLd1czQjdnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zYmM4NDAtODMyOS00Mzg5LWEzNGItZWMxOTBiMWNlYWNh
LzEvX3pidE0zV21xSlhLM1VuZzdOUXBsRlN6dUp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7z8MA0G
CSqGSIb3DQEBCwUAA4IBAQBnWzHD7dsAFJEwhqG9D23N5PRL5cGf+ECAEwSqzENy
OpiffpCuUYCWigt1VvUifd12pjUVhBnosgfx9WYp8/w8zZehCXGBdjXOuujcXu9J
U7y2jJdLW0ezz9f3TCPjIJdsk4HGv79anMvEDxh7Gu2QWOG2f7+wIHrjWkV4gfnL
hxWirhZZ2xgbwN+JisRVNq8Ottj4Rz2mJSJj+Uoz6aekVXAju1CjQPteKtGVmbk+
VG6Uwaqd+Yu3FAkGj8QGU9u4iuIGZ5mHZZATMRn37ApMa76KQMDP7QRZlgUrboQ8
JiihrDawy0ReKIhnhp1b0MtoN8Fni1IC+ks8mjdE1Zdr
-----END CERTIFICATE-----
Generated at Thu Apr 17 23:54:03 2025 by rpki-client