Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/0mezxsUX4q6nwfHNel9WWB_Brao.roa
File: 0mezxsUX4q6nwfHNel9WWB_Brao.roa (raw, json)
Hash identifier: cM9upUcEP9+yZQjw/tmDzQZgWLtHsK18dVAiOO9hG6U=
Subject key identifier: D2:67:B3:C6:C5:17:E2:AE:A7:C1:F1:CD:7A:5F:56:58:1F:C1:AD:AA
Certificate issuer: /CN=bd350606914333f7bfc2c0d1f8d3c3e4b72a302d
Certificate serial: 019424454741D6EA0429F43F0492F10A67DE
Authority key identifier: BD:35:06:06:91:43:33:F7:BF:C2:C0:D1:F8:D3:C3:E4:B7:2A:30:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/0mezxsUX4q6nwfHNel9WWB_Brao.roa
Signing time: Wed 01 Jan 2025 23:48:27 +0000
ROA not before: Wed 01 Jan 2025 23:48:27 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211251
IP address blocks: 91.142.132.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:47:41:d6:ea:04:29:f4:3f:04:92:f1:0a:67:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd350606914333f7bfc2c0d1f8d3c3e4b72a302d
Validity
Not Before: Jan 1 23:48:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d267b3c6c517e2aea7c1f1cd7a5f56581fc1adaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:0e:1b:35:43:88:5e:3b:30:aa:44:5e:e6:
21:49:9e:84:9d:61:21:a6:01:29:a1:1f:1e:b3:2a:
7d:ae:b5:8e:5f:a5:1c:a0:97:2e:23:7b:99:0a:22:
a0:38:5f:05:6f:e2:37:c0:c8:45:1f:27:5c:b3:a2:
21:93:76:55:52:b1:ea:0c:dd:dd:e3:25:e4:17:76:
40:a6:5c:3f:20:02:26:7c:63:e0:60:81:63:66:19:
24:b4:62:8a:f1:14:ca:70:47:19:30:92:b8:7f:f9:
23:f0:8f:d4:4c:39:cb:e1:87:28:8b:0d:65:5d:b6:
25:b3:e3:3e:85:47:14:c2:64:f1:19:05:88:45:91:
dc:2a:6c:a7:de:ec:85:7b:89:84:f5:ed:af:50:a7:
ef:86:02:e4:99:bd:3e:90:57:d0:11:df:7b:b0:fa:
65:ce:64:fc:fa:93:06:0b:34:39:2d:1f:e7:e3:1c:
23:8f:6e:9f:d6:58:a7:a0:c5:78:32:54:e9:3c:cd:
dc:3b:f8:d9:c5:b5:4f:ff:d5:a5:b1:8a:22:fe:d8:
53:44:c9:cf:fc:26:0c:2f:9a:55:a4:b1:2a:75:15:
e2:ee:8d:1b:74:2a:3f:a9:4c:dd:99:e9:51:c1:85:
a1:19:9b:d8:37:3f:48:45:1d:8c:dd:0c:c0:e6:11:
df:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:67:B3:C6:C5:17:E2:AE:A7:C1:F1:CD:7A:5F:56:58:1F:C1:AD:AA
X509v3 Authority Key Identifier:
keyid:BD:35:06:06:91:43:33:F7:BF:C2:C0:D1:F8:D3:C3:E4:B7:2A:30:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/0mezxsUX4q6nwfHNel9WWB_Brao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.132.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:84:49:9e:08:ee:66:7d:fd:0b:5f:2b:3c:df:21:5a:d7:a8:
73:f0:97:19:f5:90:a9:45:90:68:2a:a4:b2:ab:64:aa:08:97:
79:13:70:d6:5c:08:24:3c:7d:c7:b5:11:2f:df:58:72:f2:2c:
4a:1a:de:3d:28:f9:2a:c6:c0:e0:54:36:01:52:ba:82:11:d6:
f0:c8:dd:d7:a6:d5:1b:76:b9:fa:61:14:b4:90:a4:29:d2:61:
f6:3b:70:89:b0:66:c9:a6:db:b1:52:c3:4c:37:f8:ec:d8:1e:
47:b9:ef:39:29:84:ee:c1:f7:97:60:57:00:bd:c3:85:16:bf:
be:4a:55:39:bc:fa:d3:68:47:45:1e:4a:68:96:ae:f2:cf:16:
3b:71:3f:35:23:85:df:bf:29:6b:86:49:76:5f:0a:5e:c7:2c:
a0:6b:a4:ab:5e:3c:5a:0d:21:3b:b4:f7:15:63:e6:76:3a:03:
fa:6f:9b:07:ee:8b:d2:a5:c7:6f:0b:87:20:99:74:c8:ae:21:
0c:dc:ad:5d:dc:81:06:84:66:85:22:87:34:eb:04:97:10:ee:
78:c0:dc:d4:9c:97:c4:a9:fb:be:57:1e:5c:6f:e0:43:99:0c:
a0:76:c5:45:54:1b:16:49:89:b7:05:ac:d1:d2:af:39:e4:84:
43:2e:4a:10
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRUdB1uoEKfQ/BJLxCmfeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMzUwNjA2OTE0MzMzZjdiZmMyYzBkMWY4ZDNjM2U0Yjcy
YTMwMmQwHhcNMjUwMTAxMjM0ODI3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjY3YjNjNmM1MTdlMmFlYTdjMWYxY2Q3YTVmNTY1ODFmYzFhZGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvg4OGzVDiF47MKpEXuYhSZ6EnWEh
pgEpoR8esyp9rrWOX6UcoJcuI3uZCiKgOF8Fb+I3wMhFHydcs6Ihk3ZVUrHqDN3d
4yXkF3ZAplw/IAImfGPgYIFjZhkktGKK8RTKcEcZMJK4f/kj8I/UTDnL4Ycoiw1l
XbYls+M+hUcUwmTxGQWIRZHcKmyn3uyFe4mE9e2vUKfvhgLkmb0+kFfQEd97sPpl
zmT8+pMGCzQ5LR/n4xwjj26f1linoMV4MlTpPM3cO/jZxbVP/9WlsYoi/thTRMnP
/CYML5pVpLEqdRXi7o0bdCo/qUzdmelRwYWhGZvYNz9IRR2M3QzA5hHfKwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNJns8bFF+Kup8HxzXpfVlgfwa2qMB8GA1UdIwQY
MBaAFL01BgaRQzP3v8LA0fjTw+S3KjAtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlRVR0JwRkRNX2Vfd3NEUi1OUEQ1TGNxTUMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9mMGM5ZDctMTY4Zi00ZTEwLWI1YTEt
Y2RjOGY5YmJjMzcyLzEvMG1lenhzVVg0cTZud2ZITmVsOVdXQl9CcmFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9mMGM5ZDctMTY4Zi00ZTEwLWI1YTEtY2RjOGY5YmJjMzcy
LzEvdlRVR0JwRkRNX2Vfd3NEUi1OUEQ1TGNxTUMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW46EMA0G
CSqGSIb3DQEBCwUAA4IBAQCchEmeCO5mff0LXys83yFa16hz8JcZ9ZCpRZBoKqSy
q2SqCJd5E3DWXAgkPH3HtREv31hy8ixKGt49KPkqxsDgVDYBUrqCEdbwyN3XptUb
drn6YRS0kKQp0mH2O3CJsGbJptuxUsNMN/js2B5Hue85KYTuwfeXYFcAvcOFFr++
SlU5vPrTaEdFHkpolq7yzxY7cT81I4Xfvylrhkl2Xwpexyyga6SrXjxaDSE7tPcV
Y+Z2OgP6b5sH7ovSpcdvC4cgmXTIriEM3K1d3IEGhGaFIoc06wSXEO54wNzUnJfE
qfu+Vx5cb+BDmQygdsVFVBsWSYm3BazR0q855IRDLkoQ
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:50 2025 by rpki-client on console.sobornost.net