Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/v9e6BQrrpkX4J49zO0X4mqGyYf8.roa
File: v9e6BQrrpkX4J49zO0X4mqGyYf8.roa (raw, json)
Hash identifier: BAka5v89zPoK2V8W4Aeck9ZsQ+ba33dD3QTkdH9ixgM=
Subject key identifier: BF:D7:BA:05:0A:EB:A6:45:F8:27:8F:73:3B:45:F8:9A:A1:B2:61:FF
Certificate issuer: /CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Certificate serial: 01942143B5E6282B9D49915AF353F0915A6B
Authority key identifier: 5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/v9e6BQrrpkX4J49zO0X4mqGyYf8.roa
Signing time: Wed 01 Jan 2025 09:47:52 +0000
ROA not before: Wed 01 Jan 2025 09:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41585
IP address blocks: 91.136.128.0/17 maxlen: 21
91.194.254.0/23 maxlen: 23
91.195.50.0/23 maxlen: 23
194.9.124.0/23 maxlen: 23
194.9.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:b5:e6:28:2b:9d:49:91:5a:f3:53:f0:91:5a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5acb3089461e1f5f8984b7742c89bb68f1b88c12
Validity
Not Before: Jan 1 09:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfd7ba050aeba645f8278f733b45f89aa1b261ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:18:b1:38:8b:72:bd:9c:1c:70:b9:da:c1:05:
73:69:5e:85:a1:43:87:69:ad:f4:09:1e:d9:ba:b3:
58:7d:99:1f:50:bf:ea:4b:05:8a:f5:64:ed:a9:2e:
89:56:fb:7c:3d:de:b5:3c:ef:3b:0b:3f:92:01:54:
9f:34:75:28:0a:81:6b:9a:4b:fd:65:86:5a:18:4b:
57:c7:e8:9d:88:45:7b:d5:fe:fc:eb:9b:f6:c5:e4:
d6:d2:d8:28:78:d7:32:58:ae:36:fb:06:c7:e1:ad:
6e:dc:98:d3:30:cc:b0:16:58:76:e0:95:28:4b:08:
5c:5a:6f:e1:18:4b:7f:43:84:76:f3:b3:60:54:87:
c6:49:50:72:97:ff:24:6e:fe:1d:57:8c:81:33:01:
b6:04:91:53:c9:fd:07:9a:32:5b:8a:d7:e5:fe:ef:
d9:f9:97:46:3a:ad:2e:41:dc:27:73:6c:bc:37:9b:
3b:a3:36:c6:7e:f5:ad:f9:e3:a6:48:d1:25:c3:67:
77:71:e7:83:13:ea:96:fd:ef:de:31:34:95:37:dd:
1c:e0:41:20:e0:13:2b:4b:9c:fe:45:24:03:8a:85:
a0:3e:b1:d3:57:e6:c2:cf:32:00:92:67:59:9f:23:
ec:9a:ab:09:cb:0d:16:db:ea:0f:20:3e:4a:8e:34:
7c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D7:BA:05:0A:EB:A6:45:F8:27:8F:73:3B:45:F8:9A:A1:B2:61:FF
X509v3 Authority Key Identifier:
keyid:5A:CB:30:89:46:1E:1F:5F:89:84:B7:74:2C:89:BB:68:F1:B8:8C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WsswiUYeH1-JhLd0LIm7aPG4jBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/v9e6BQrrpkX4J49zO0X4mqGyYf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2053c4-bc4a-416a-8970-ac536b2ab4f8/1/WsswiUYeH1-JhLd0LIm7aPG4jBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.136.128.0/17
91.194.254.0/23
91.195.50.0/23
194.9.124.0-194.9.126.255
Signature Algorithm: sha256WithRSAEncryption
02:c8:98:d1:a0:fb:b0:1f:70:7a:8c:25:6b:82:e6:6d:0b:91:
ad:a0:1a:6d:ee:bd:cf:31:47:c3:03:5b:57:96:65:9c:60:1d:
84:8d:44:aa:55:2e:e3:d8:ab:aa:b9:53:11:88:f4:3b:3e:e4:
fc:be:ab:9d:bc:c0:9e:19:22:3f:62:ae:db:74:0b:97:93:b6:
15:1a:cc:a9:8b:fe:de:0e:49:93:0c:10:05:2a:40:e6:50:b1:
60:c7:ca:e4:4e:aa:47:bb:a6:54:6a:b6:01:36:71:09:d9:0d:
18:99:19:62:fc:2b:e7:9e:6e:20:1a:d6:79:e6:af:0a:09:77:
b3:24:20:3d:72:65:c9:9d:bb:81:9e:3f:4b:d5:38:f2:c8:a4:
dc:4f:c9:24:f2:36:fc:10:18:eb:73:22:f4:47:19:1d:fa:83:
b3:d2:6b:2a:32:36:6f:6c:9e:7e:e2:9a:0e:0f:b7:19:c0:22:
68:27:1c:c3:c0:39:ad:48:1d:1e:fa:8d:b0:2d:ae:34:33:ff:
b2:ff:2e:24:6f:00:4e:b5:ec:0c:f8:05:d9:7b:fd:0a:59:a1:
2b:3b:3f:b0:98:1a:8a:66:46:b6:3f:bf:43:40:d0:9f:a4:65:
15:95:0a:11:4a:f1:fc:d5:9f:78:d2:a4:55:93:39:31:3f:69:
68:e4:27:a5
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZQhQ7XmKCudSZFa81PwkVprMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhY2IzMDg5NDYxZTFmNWY4OTg0Yjc3NDJjODliYjY4ZjFi
ODhjMTIwHhcNMjUwMTAxMDk0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmQ3YmEwNTBhZWJhNjQ1ZjgyNzhmNzMzYjQ1Zjg5YWExYjI2MWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BixOItyvZwccLnawQVzaV6FoUOH
aa30CR7ZurNYfZkfUL/qSwWK9WTtqS6JVvt8Pd61PO87Cz+SAVSfNHUoCoFrmkv9
ZYZaGEtXx+idiEV71f7865v2xeTW0tgoeNcyWK42+wbH4a1u3JjTMMywFlh24JUo
SwhcWm/hGEt/Q4R287NgVIfGSVByl/8kbv4dV4yBMwG2BJFTyf0HmjJbitfl/u/Z
+ZdGOq0uQdwnc2y8N5s7ozbGfvWt+eOmSNElw2d3ceeDE+qW/e/eMTSVN90c4EEg
4BMrS5z+RSQDioWgPrHTV+bCzzIAkmdZnyPsmqsJyw0W2+oPID5KjjR8XQIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFL/XugUK66ZF+CePcztF+JqhsmH/MB8GA1UdIwQY
MBaAFFrLMIlGHh9fiYS3dCyJu2jxuIwSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3Nzd2lVWWVIMS1KaExkMExJbTdhUEc0akJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yMDUzYzQtYmM0YS00MTZhLTg5NzAt
YWM1MzZiMmFiNGY4LzEvdjllNkJRcnJwa1g0SjQ5ek8wWDRtcUd5WWY4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8yMDUzYzQtYmM0YS00MTZhLTg5NzAtYWM1MzZiMmFiNGY4
LzEvV3Nzd2lVWWVIMS1KaExkMExJbTdhUEc0akJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgAwQHW4iAAwQB
W8L+AwQBW8MyMAwDBALCCXwDBADCCX4wDQYJKoZIhvcNAQELBQADggEBAALImNGg
+7AfcHqMJWuC5m0Lka2gGm3uvc8xR8MDW1eWZZxgHYSNRKpVLuPYq6q5UxGI9Ds+
5Py+q528wJ4ZIj9irtt0C5eTthUazKmL/t4OSZMMEAUqQOZQsWDHyuROqke7plRq
tgE2cQnZDRiZGWL8K+eebiAa1nnmrwoJd7MkID1yZcmdu4GeP0vVOPLIpNxPySTy
NvwQGOtzIvRHGR36g7PSayoyNm9snn7img4PtxnAImgnHMPAOa1IHR76jbAtrjQz
/7L/LiRvAE617Az4Bdl7/QpZoSs7P7CYGopmRrY/v0NA0J+kZRWVChFK8fzVn3jS
pFWTOTE/aWjkJ6U=
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:43 2025 by rpki-client on console.sobornost.net