Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/0-S0caM4DR4ddy8NQYyHeY2JzX0.roa
File: 0-S0caM4DR4ddy8NQYyHeY2JzX0.roa (raw, json)
Hash identifier: /vrppbRszh+yaIQdTBuQrEDGWZbZ52MrKVtnrFn2a/A=
Subject key identifier: D3:E4:B4:71:A3:38:0D:1E:1D:77:2F:0D:41:8C:87:79:8D:89:CD:7D
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 018BD320B2EF5CA99F0905A50E9F2E89A2F9
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/0-S0caM4DR4ddy8NQYyHeY2JzX0.roa
Signing time: Wed 15 Nov 2023 13:16:57 +0000
ROA not before: Wed 15 Nov 2023 13:16:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 19905
IP address blocks: 91.209.254.0/24 maxlen: 24
185.156.84.0/24 maxlen: 24
185.156.85.0/24 maxlen: 24
91.221.58.0/24 maxlen: 24
91.221.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:d3:20:b2:ef:5c:a9:9f:09:05:a5:0e:9f:2e:89:a2:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Nov 15 13:16:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3e4b471a3380d1e1d772f0d418c87798d89cd7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:aa:a8:2d:bc:76:d0:3b:20:d0:74:30:5e:c6:
cd:84:2e:69:d1:e8:83:46:52:48:7c:00:09:76:00:
c0:bc:fa:1f:30:f0:aa:cf:ef:b2:30:e5:5f:10:06:
d7:90:83:42:57:44:5a:ef:e2:04:32:39:4d:c8:b7:
c7:f5:68:a9:ee:f1:41:2b:3c:99:86:7b:4f:48:88:
c6:a4:79:a4:ba:d7:f9:33:e1:15:4a:c4:45:b6:20:
45:d3:b5:87:a3:2a:a2:40:a4:58:11:d7:ef:c8:4f:
71:d8:c4:ee:15:91:46:f8:64:59:bf:c9:0b:80:1c:
17:7a:81:3f:63:d0:26:62:e0:97:6d:c2:b8:87:c6:
55:77:6b:e4:8d:50:1b:5c:71:9e:fe:96:03:bd:20:
bd:37:11:e6:04:b0:d3:32:de:b1:68:22:3d:c3:56:
ea:86:3d:de:ac:cd:a0:bf:6b:6f:ad:45:8b:47:f5:
71:86:7f:8a:b2:ea:2c:4d:85:85:77:1e:1f:43:55:
ad:47:8b:fe:05:6b:57:98:8d:16:c0:2c:2d:b2:1a:
a5:5a:a7:23:b0:4f:fa:12:93:cd:96:06:71:a8:ad:
5b:b5:df:2f:2b:0c:26:dc:e8:ed:76:c1:c2:c5:d8:
e2:58:99:9e:af:e6:16:5c:37:32:78:03:bc:50:4b:
c3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:E4:B4:71:A3:38:0D:1E:1D:77:2F:0D:41:8C:87:79:8D:89:CD:7D
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/0-S0caM4DR4ddy8NQYyHeY2JzX0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.254.0/24
91.221.58.0/23
185.156.84.0/23
Signature Algorithm: sha256WithRSAEncryption
12:92:43:ef:fd:e9:63:22:65:04:06:aa:58:8b:d7:0d:43:e1:
fc:ab:53:65:c3:e2:63:9d:58:cc:54:a3:84:a7:49:a7:fc:e7:
3d:da:d6:6b:d9:a0:23:04:d9:bc:c6:ac:03:f4:f2:e4:26:05:
31:27:07:39:5c:19:07:97:0f:15:96:65:3d:8d:ae:c2:03:d0:
31:de:e4:f6:bf:fc:95:ca:81:f2:1b:b4:43:f6:1c:9d:e7:dc:
87:2b:66:18:6e:a8:0f:e3:76:e6:c5:61:b4:4f:56:2b:2e:da:
0b:2a:8e:04:87:e3:66:8f:d4:9e:ef:bf:b6:28:59:d2:90:98:
09:73:8e:f1:87:6a:8e:1c:d6:ab:fe:cc:ad:77:6f:31:57:02:
c9:15:ba:71:dd:d7:ae:67:fd:57:e1:e3:48:51:12:ed:45:5a:
2b:2c:87:f3:6c:76:49:d7:22:84:b8:28:b7:6c:fa:54:1a:11:
fd:90:1c:0c:d6:93:4b:ff:0b:c3:2f:e7:0a:23:07:78:c4:72:
8e:6c:5d:31:3d:ae:39:f9:dd:8c:49:78:68:69:f5:f2:b1:d9:
a4:e9:a6:6f:e1:a0:e9:6a:1f:8d:7e:dc:a9:01:eb:2d:e9:98:
1a:74:2a:9f:e2:d0:c6:1b:ad:27:ab:47:4e:ad:15:44:f1:47:
1b:97:41:02
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYvTILLvXKmfCQWlDp8uiaL5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkZmYxYjBjZTlmNDg2YTY3ZTYzZDNmMGQwZTY4OGEyNGY3
MDBjN2MwHhcNMjMxMTE1MTMxNjU3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkM2U0YjQ3MWEzMzgwZDFlMWQ3NzJmMGQ0MThjODc3OThkODljZDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKqoLbx20Dsg0HQwXsbNhC5p0eiD
RlJIfAAJdgDAvPofMPCqz++yMOVfEAbXkINCV0Ra7+IEMjlNyLfH9Wip7vFBKzyZ
hntPSIjGpHmkutf5M+EVSsRFtiBF07WHoyqiQKRYEdfvyE9x2MTuFZFG+GRZv8kL
gBwXeoE/Y9AmYuCXbcK4h8ZVd2vkjVAbXHGe/pYDvSC9NxHmBLDTMt6xaCI9w1bq
hj3erM2gv2tvrUWLR/Vxhn+KsuosTYWFdx4fQ1WtR4v+BWtXmI0WwCwtshqlWqcj
sE/6EpPNlgZxqK1btd8vKwwm3OjtdsHCxdjiWJmer+YWXDcyeAO8UEvD9QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNPktHGjOA0eHXcvDUGMh3mNic19MB8GA1UdIwQY
MBaAFI3/Gwzp9IamfmPT8NDmiKJPcAx8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi80YWY2NGEtNTdmOC00NjQzLTg3YmEt
ZDg3YjcwMjZhM2ZmLzEvMC1TMGNhTTREUjRkZHk4TlFZeUhlWTJKelgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi80YWY2NGEtNTdmOC00NjQzLTg3YmEtZDg3YjcwMjZhM2Zm
LzEvamY4YkRPbjBocVotWTlQdzBPYUlvazl3REh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAW9H+AwQB
W906AwQBuZxUMA0GCSqGSIb3DQEBCwUAA4IBAQASkkPv/eljImUEBqpYi9cNQ+H8
q1Nlw+JjnVjMVKOEp0mn/Oc92tZr2aAjBNm8xqwD9PLkJgUxJwc5XBkHlw8VlmU9
ja7CA9Ax3uT2v/yVyoHyG7RD9hyd59yHK2YYbqgP43bmxWG0T1YrLtoLKo4Eh+Nm
j9Se77+2KFnSkJgJc47xh2qOHNar/sytd28xVwLJFbpx3deuZ/1X4eNIURLtRVor
LIfzbHZJ1yKEuCi3bPpUGhH9kBwM1pNL/wvDL+cKIwd4xHKObF0xPa45+d2MSXho
afXysdmk6aZv4aDpah+NftypAest6ZgadCqf4tDGG60nq0dOrRVE8Ucbl0EC
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:00:12 2025 by rpki-client