Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/cENhA1H3rSSm_FYZV2iuFMXhIy8.roa
File: cENhA1H3rSSm_FYZV2iuFMXhIy8.roa (raw, json)
Hash identifier: +yswKcmFpwrdTNFU6DLnX3ljDYGn4TdURpFu07eBLRo=
Subject key identifier: 70:43:61:03:51:F7:AD:24:A6:FC:56:19:57:68:AE:14:C5:E1:23:2F
Certificate issuer: /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Certificate serial: 01941FFA0002E3B97122F4C729C9ECC478AA
Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/cENhA1H3rSSm_FYZV2iuFMXhIy8.roa
Signing time: Wed 01 Jan 2025 03:47:45 +0000
ROA not before: Wed 01 Jan 2025 03:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200736
IP address blocks: 91.211.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:00:02:e3:b9:71:22:f4:c7:29:c9:ec:c4:78:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Validity
Not Before: Jan 1 03:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7043610351f7ad24a6fc56195768ae14c5e1232f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c8:e4:ee:e8:80:32:08:8a:16:6c:78:7b:74:
a5:cc:29:1f:7d:19:d0:d7:e5:bf:08:3b:0e:35:18:
50:b7:b2:2a:5e:34:02:e6:b4:19:56:9e:64:f0:ea:
47:7d:c5:97:e8:7c:5c:75:43:bf:e3:50:59:06:b6:
cd:cc:8a:fa:0d:8d:42:be:8b:67:9d:3a:32:bd:03:
6b:55:fd:41:33:14:6b:f4:0f:e7:45:a1:15:11:70:
f6:7e:17:6d:01:73:14:93:2c:ce:4c:8c:70:ec:19:
53:d7:3b:f3:ed:bb:7c:7c:2a:00:78:e9:d4:74:89:
32:34:86:a7:9b:c9:68:3b:9e:50:03:ca:7a:e7:bf:
cf:86:28:43:c7:b1:3e:10:4c:98:5b:a1:38:af:59:
45:72:12:bb:3c:aa:cc:76:dd:1d:a6:22:c1:f7:1c:
33:de:ae:d5:5a:cd:62:8d:dd:03:8e:d8:2b:ac:de:
21:1b:63:f7:0d:45:63:8f:cf:11:d1:da:88:03:d5:
29:e9:91:68:39:06:bb:f0:07:72:c9:ba:b5:47:7d:
78:8c:7b:46:15:ad:35:58:52:4d:39:8c:06:3d:48:
b7:81:b6:c2:8b:77:80:44:8e:b2:45:bb:8b:d7:b8:
ed:5a:24:bb:e9:61:6a:96:da:56:1a:cc:b7:5a:87:
1a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:43:61:03:51:F7:AD:24:A6:FC:56:19:57:68:AE:14:C5:E1:23:2F
X509v3 Authority Key Identifier:
keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/cENhA1H3rSSm_FYZV2iuFMXhIy8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.212.0/22
Signature Algorithm: sha256WithRSAEncryption
23:1c:14:ec:af:4b:1c:ca:68:91:02:dc:80:37:bf:b3:77:6c:
3d:dc:eb:98:08:d2:3a:e4:df:71:1d:bf:1b:90:46:9c:9b:b0:
4c:57:4d:47:84:0a:7a:2a:a8:00:1d:19:fc:1e:57:cf:e5:d6:
ed:b9:37:e2:d1:ea:c2:4e:44:2d:46:3d:6c:47:4d:19:13:56:
c8:ea:11:3e:15:82:c9:e6:de:6f:bc:0e:6b:a6:ca:5e:6d:6a:
b9:e3:c2:ff:ec:2d:6f:34:39:0f:b7:32:73:fc:a7:b0:08:f9:
12:9d:42:6e:9c:f2:76:d2:a9:19:cb:29:8b:4a:46:8a:19:ca:
b1:29:fb:da:1c:8d:a4:f2:40:3d:19:bf:ea:64:ae:bb:84:b7:
2f:50:7b:fe:e0:bd:0f:e6:a6:e3:82:5b:4e:6a:a3:6a:ba:2f:
60:12:8a:92:1d:fe:b5:ba:cb:e5:19:ce:bf:10:f3:95:1f:95:
36:65:03:75:28:9e:d5:ee:21:ad:9a:04:10:9c:32:c3:7b:5d:
b5:17:f0:1b:de:05:21:99:76:0c:aa:41:55:01:6e:8b:9e:24:
8d:96:d4:5d:bb:8b:e5:92:00:f0:77:d6:06:95:c8:40:31:06:
4c:aa:7e:9e:ad:7a:4a:e3:14:73:5f:c1:0f:d6:ab:92:eb:00:
87:8f:75:1a
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAZQf+gAC47lxIvTHKcnsxHiqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhYTZlNWU4NjAyM2M5YjMxNGVlNjUxMjkxZmFmZThjNmRk
NjlhODMwHhcNMjUwMTAxMDM0NzQ1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MDQzNjEwMzUxZjdhZDI0YTZmYzU2MTk1NzY4YWUxNGM1ZTEyMzJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Mjk7uiAMgiKFmx4e3SlzCkffRnQ
1+W/CDsONRhQt7IqXjQC5rQZVp5k8OpHfcWX6HxcdUO/41BZBrbNzIr6DY1Cvotn
nToyvQNrVf1BMxRr9A/nRaEVEXD2fhdtAXMUkyzOTIxw7BlT1zvz7bt8fCoAeOnU
dIkyNIanm8loO55QA8p657/PhihDx7E+EEyYW6E4r1lFchK7PKrMdt0dpiLB9xwz
3q7VWs1ijd0DjtgrrN4hG2P3DUVjj88R0dqIA9Up6ZFoOQa78Adyybq1R314jHtG
Fa01WFJNOYwGPUi3gbbCi3eARI6yRbuL17jtWiS76WFqltpWGsy3WocafQIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFHBDYQNR960kpvxWGVdorhTF4SMvMB8GA1UdIwQY
MBaAFPqm5ehgI8mzFO5lEpH6/oxt1pqDMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1xYmw2R0FqeWJNVTdtVVNrZnItakczV21vTS5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDAvYzA0ZDk5LWRlNDQtNDBhYi1hMmMw
LTA4Mjc5NDU1Zjk0MS8xL2NFTmhBMUgzclNTbV9GWVpWMml1Rk1YaEl5OC5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDAvYzA0ZDk5LWRlNDQtNDBhYi1hMmMwLTA4Mjc5NDU1Zjk0
MS8xLzEtcWJsNkdBanliTVU3bVVTa2ZyLWpHM1dtb00uY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJb09Qw
DQYJKoZIhvcNAQELBQADggEBACMcFOyvSxzKaJEC3IA3v7N3bD3c65gI0jrk33Ed
vxuQRpybsExXTUeECnoqqAAdGfweV8/l1u25N+LR6sJORC1GPWxHTRkTVsjqET4V
gsnm3m+8Dmumyl5tarnjwv/sLW80OQ+3MnP8p7AI+RKdQm6c8nbSqRnLKYtKRooZ
yrEp+9ocjaTyQD0Zv+pkrruEty9Qe/7gvQ/mpuOCW05qo2q6L2ASipId/rW6y+UZ
zr8Q85UflTZlA3UontXuIa2aBBCcMsN7XbUX8BveBSGZdgyqQVUBboueJI2W1F27
i+WSAPB31gaVyEAxBkyqfp6tekrjFHNfwQ/Wq5LrAIePdRo=
-----END CERTIFICATE-----
Generated at Wed Jan 22 17:20:53 2025 by rpki-client on console.sobornost.net