Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/tTPbt6JJWLb5VxzVAcnDbpvzGbg.roa
File: tTPbt6JJWLb5VxzVAcnDbpvzGbg.roa (raw, json)
Hash identifier: gi56UwxLmRiVavAaG5bLPkTuSOT+thHKhmYLBb5UIUg=
Subject key identifier: B5:33:DB:B7:A2:49:58:B6:F9:57:1C:D5:01:C9:C3:6E:9B:F3:19:B8
Certificate issuer: /CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Certificate serial: 0185710C23F64A5877A2BF67D28732373378
Authority key identifier: FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/tTPbt6JJWLb5VxzVAcnDbpvzGbg.roa
Signing time: Mon 02 Jan 2023 05:54:58 +0000
ROA not before: Mon 02 Jan 2023 05:54:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15440
IP address blocks: 91.188.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:23:f6:4a:58:77:a2:bf:67:d2:87:32:37:33:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff36ed3375a6a895cadd49e0ecd4299454b3b89c
Validity
Not Before: Jan 2 05:54:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b533dbb7a24958b6f9571cd501c9c36e9bf319b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e7:9c:81:69:9d:4d:56:ce:8e:a4:8a:31:98:
ac:95:39:fd:cf:a7:d4:f4:1d:7f:0a:39:19:4c:3b:
e1:58:4f:26:7b:dc:e6:85:07:77:66:ac:70:74:05:
b1:e3:8b:b1:77:12:86:7a:63:d7:23:b2:70:56:51:
cc:c0:37:db:77:0f:a0:a2:3f:65:4c:29:16:f8:c8:
ca:b5:3a:fc:af:23:08:1d:91:e5:d7:ab:05:c7:33:
47:46:dc:de:5e:9f:33:01:aa:70:d9:ca:8b:f3:d4:
70:94:ad:99:5e:0f:a4:e9:b5:d6:21:c6:04:52:f7:
df:2a:b7:86:dd:62:2d:e9:53:47:80:5e:36:07:49:
3a:08:e9:b9:25:f0:dc:8f:7f:54:d9:01:c3:10:89:
97:b6:4c:24:c4:88:fc:a2:46:a7:d1:78:ed:24:84:
8c:0c:69:53:3c:40:8b:93:ef:25:85:e1:b8:45:a1:
b1:a1:bc:b7:e8:1d:ac:6d:cd:c1:2c:7a:ad:5f:cb:
00:73:af:14:46:f3:24:47:f2:79:f3:c2:ef:59:41:
ca:6b:9d:b6:b2:bd:fd:cb:c0:1e:bd:e8:49:45:9f:
65:4c:b3:0e:1b:30:66:75:4e:0d:8e:55:6d:7f:e0:
f1:35:ec:e6:8f:49:ee:27:81:21:e6:0c:50:44:7a:
1a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:33:DB:B7:A2:49:58:B6:F9:57:1C:D5:01:C9:C3:6E:9B:F3:19:B8
X509v3 Authority Key Identifier:
keyid:FF:36:ED:33:75:A6:A8:95:CA:DD:49:E0:EC:D4:29:94:54:B3:B8:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_zbtM3WmqJXK3Ung7NQplFSzuJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/tTPbt6JJWLb5VxzVAcnDbpvzGbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3bc840-8329-4389-a34b-ec190b1ceaca/1/_zbtM3WmqJXK3Ung7NQplFSzuJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.254.0/24
Signature Algorithm: sha256WithRSAEncryption
42:77:6d:82:ea:d6:fc:dc:cb:38:b9:42:c6:3a:3b:a7:6e:dd:
1c:9b:2d:e5:c8:e3:96:fe:70:1b:8e:49:b6:36:ca:50:5a:3c:
cf:bb:64:90:0d:4a:e6:30:f0:5e:e5:03:e0:92:c5:c5:a7:4c:
3e:94:88:9f:19:8c:d7:02:43:4d:bc:a3:70:de:50:8a:50:29:
cc:e3:f7:65:4e:e1:6f:26:ac:6e:ce:cb:ec:1d:12:3c:f1:56:
85:40:22:54:ee:f8:f1:db:02:c4:04:36:46:04:c7:26:72:21:
7e:2a:38:09:ea:9d:c7:c3:b4:46:33:a7:e0:58:df:78:24:67:
9a:a8:25:2b:6f:7f:61:9b:8e:2c:cd:08:6f:e7:54:3a:a9:22:
02:c2:ed:b4:c4:35:d9:b6:ec:8e:e3:a0:b6:09:79:c0:9a:27:
7a:df:fe:1e:08:2e:57:87:31:84:c4:b0:c5:fe:84:d8:0c:7d:
d5:47:3b:7c:84:81:16:48:ab:da:49:0c:97:20:b7:01:b9:5b:
09:34:b0:0b:1a:de:27:a0:8e:57:c6:3e:7a:ee:4a:a8:c6:f4:
38:30:94:1b:42:7f:e6:f6:d3:b0:b8:25:71:c3:c0:6e:32:c7:
d7:1c:80:6c:38:99:24:e4:de:90:fe:9f:e2:27:c5:dd:0e:13:
7b:c5:dd:68
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVxDCP2Slh3or9n0ocyNzN4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmMzZlZDMzNzVhNmE4OTVjYWRkNDllMGVjZDQyOTk0NTRi
M2I4OWMwHhcNMjMwMTAyMDU1NDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTMzZGJiN2EyNDk1OGI2Zjk1NzFjZDUwMWM5YzM2ZTliZjMxOWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uecgWmdTVbOjqSKMZislTn9z6fU
9B1/CjkZTDvhWE8me9zmhQd3ZqxwdAWx44uxdxKGemPXI7JwVlHMwDfbdw+goj9l
TCkW+MjKtTr8ryMIHZHl16sFxzNHRtzeXp8zAapw2cqL89RwlK2ZXg+k6bXWIcYE
UvffKreG3WIt6VNHgF42B0k6COm5JfDcj39U2QHDEImXtkwkxIj8okan0XjtJISM
DGlTPECLk+8lheG4RaGxoby36B2sbc3BLHqtX8sAc68URvMkR/J588LvWUHKa522
sr39y8AevehJRZ9lTLMOGzBmdU4NjlVtf+DxNezmj0nuJ4Eh5gxQRHoaBQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLUz27eiSVi2+Vcc1QHJw26b8xm4MB8GA1UdIwQY
MBaAFP827TN1pqiVyt1J4OzUKZRUs7icMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3pidE0zV21xSlhLM1VuZzdOUXBsRlN6dUp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zYmM4NDAtODMyOS00Mzg5LWEzNGIt
ZWMxOTBiMWNlYWNhLzEvdFRQYnQ2SkpXTGI1Vnh6VkFjbkRicHZ6R2JnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zYmM4NDAtODMyOS00Mzg5LWEzNGItZWMxOTBiMWNlYWNh
LzEvX3pidE0zV21xSlhLM1VuZzdOUXBsRlN6dUp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7z+MA0G
CSqGSIb3DQEBCwUAA4IBAQBCd22C6tb83Ms4uULGOjunbt0cmy3lyOOW/nAbjkm2
NspQWjzPu2SQDUrmMPBe5QPgksXFp0w+lIifGYzXAkNNvKNw3lCKUCnM4/dlTuFv
JqxuzsvsHRI88VaFQCJU7vjx2wLEBDZGBMcmciF+KjgJ6p3Hw7RGM6fgWN94JGea
qCUrb39hm44szQhv51Q6qSICwu20xDXZtuyO46C2CXnAmid63/4eCC5XhzGExLDF
/oTYDH3VRzt8hIEWSKvaSQyXILcBuVsJNLALGt4noI5Xxj567kqoxvQ4MJQbQn/m
9tOwuCVxw8BuMsfXHIBsOJkk5N6Q/p/iJ8XdDhN7xd1o
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:25:11 2025 by rpki-client