Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/FwAUcIE-PlUBJk-lyofvjIK4_Vk.roa
File: FwAUcIE-PlUBJk-lyofvjIK4_Vk.roa (raw, json)
Hash identifier: 7pDJDV3PAprmagYY0WEztJ7b9H5DGoPcWbYIPWhc9l8=
Subject key identifier: 17:00:14:70:81:3E:3E:55:01:26:4F:A5:CA:87:EF:8C:82:B8:FD:59
Certificate issuer: /CN=cdba6d5704fd290d0e073376eda688717564d196
Certificate serial: 01942520BF513C7198C18650DBDDE44DA5AB
Authority key identifier: CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/FwAUcIE-PlUBJk-lyofvjIK4_Vk.roa
Signing time: Thu 02 Jan 2025 03:48:10 +0000
ROA not before: Thu 02 Jan 2025 03:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207114
IP address blocks: 91.207.249.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:bf:51:3c:71:98:c1:86:50:db:dd:e4:4d:a5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cdba6d5704fd290d0e073376eda688717564d196
Validity
Not Before: Jan 2 03:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17001470813e3e5501264fa5ca87ef8c82b8fd59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:40:47:7f:79:47:49:cb:60:c3:77:cf:fd:70:
d5:45:51:a2:a5:fd:2e:0f:ac:66:e1:a5:38:b7:de:
08:82:01:33:f7:b5:08:73:5a:8c:e9:dc:3d:18:40:
9f:26:de:18:4e:70:df:4e:32:98:f9:a7:e9:ae:a5:
53:c1:91:88:da:e8:72:1f:18:a1:e4:77:3a:5d:88:
63:01:a6:0f:bd:12:40:aa:97:6a:3e:a3:6f:61:13:
61:56:5e:95:1b:99:11:cd:2f:b5:73:aa:d0:0e:84:
8b:e7:36:63:f0:bf:46:02:38:c3:68:5d:f8:08:cd:
cd:3b:b8:34:39:a3:b1:a1:8e:88:55:c8:5e:3c:12:
5c:f6:2b:b1:5a:d4:ae:9a:2b:eb:17:02:9c:81:82:
f4:82:7c:36:60:93:55:7b:a6:78:ba:6a:1b:a9:24:
a5:43:69:55:79:1c:cd:d0:fe:39:34:c7:7a:2f:c4:
a9:c9:b9:64:e3:f1:ff:1f:7c:17:03:21:02:92:3a:
40:13:12:95:7f:37:0f:33:60:0b:02:7a:3e:8e:8d:
24:25:d8:d5:65:d1:81:89:4d:20:94:4c:c2:cf:78:
78:47:5e:a1:b5:b3:fb:0d:24:d4:b1:88:63:78:f2:
e7:46:9d:e5:5f:0f:8a:35:3b:4c:ec:2d:91:b0:a1:
b9:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:00:14:70:81:3E:3E:55:01:26:4F:A5:CA:87:EF:8C:82:B8:FD:59
X509v3 Authority Key Identifier:
keyid:CD:BA:6D:57:04:FD:29:0D:0E:07:33:76:ED:A6:88:71:75:64:D1:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zbptVwT9KQ0OBzN27aaIcXVk0ZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/FwAUcIE-PlUBJk-lyofvjIK4_Vk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/d3280b-53f7-4394-8559-a461169f1dc2/1/zbptVwT9KQ0OBzN27aaIcXVk0ZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.249.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:03:f3:8c:0a:e5:b6:12:48:c9:5d:54:fa:bd:3f:58:04:80:
1d:1b:00:de:1c:52:77:53:5b:3e:7f:bc:b8:4b:eb:d2:1b:b0:
98:f6:5a:d6:df:0c:39:0c:64:90:a1:07:e4:01:fd:34:ea:0e:
cb:d3:96:32:3a:ed:6e:16:87:a1:66:df:09:3a:8c:ea:92:01:
a5:2f:dd:4f:03:e7:1c:06:d5:c6:dd:e5:15:36:d3:8a:72:70:
1d:8e:01:f9:18:9d:a8:a0:be:00:59:0e:45:2e:00:cd:68:41:
ff:0b:45:88:a9:07:25:00:55:70:b0:ef:85:9e:82:3d:2e:27:
a0:be:29:86:12:58:e4:cd:0b:d3:c4:93:35:1d:a1:18:f3:94:
37:b7:42:cc:99:18:75:ef:6b:e9:4e:29:e2:77:17:35:99:46:
24:2f:ad:e9:32:69:cd:00:9c:99:2f:ed:2b:ed:f1:ae:2d:a8:
df:f2:19:ba:2f:db:64:d9:4c:2a:92:3f:71:f5:f1:c1:d8:0d:
6e:17:ae:11:dd:c2:c3:94:1b:7e:82:9f:f4:1c:08:ab:19:3f:
ab:0a:76:eb:a9:8b:3a:a2:a9:7b:d8:9a:02:66:92:dd:8c:4c:
48:1b:3f:d2:3a:bb:71:34:88:84:cd:56:dc:23:3e:71:2f:51:
6e:4a:21:be
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIL9RPHGYwYZQ293kTaWrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNkYmE2ZDU3MDRmZDI5MGQwZTA3MzM3NmVkYTY4ODcxNzU2
NGQxOTYwHhcNMjUwMTAyMDM0ODEwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzAwMTQ3MDgxM2UzZTU1MDEyNjRmYTVjYTg3ZWY4YzgyYjhmZDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkBHf3lHSctgw3fP/XDVRVGipf0u
D6xm4aU4t94IggEz97UIc1qM6dw9GECfJt4YTnDfTjKY+afprqVTwZGI2uhyHxih
5Hc6XYhjAaYPvRJAqpdqPqNvYRNhVl6VG5kRzS+1c6rQDoSL5zZj8L9GAjjDaF34
CM3NO7g0OaOxoY6IVchePBJc9iuxWtSumivrFwKcgYL0gnw2YJNVe6Z4umobqSSl
Q2lVeRzN0P45NMd6L8Spyblk4/H/H3wXAyECkjpAExKVfzcPM2ALAno+jo0kJdjV
ZdGBiU0glEzCz3h4R16htbP7DSTUsYhjePLnRp3lXw+KNTtM7C2RsKG5ewIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBcAFHCBPj5VASZPpcqH74yCuP1ZMB8GA1UdIwQY
MBaAFM26bVcE/SkNDgczdu2miHF1ZNGWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvemJwdFZ3VDlLUTBPQnpOMjdhYUljWFZrMFpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9kMzI4MGItNTNmNy00Mzk0LTg1NTkt
YTQ2MTE2OWYxZGMyLzEvRndBVWNJRS1QbFVCSmstbHlvZnZqSUs0X1ZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9kMzI4MGItNTNmNy00Mzk0LTg1NTktYTQ2MTE2OWYxZGMy
LzEvemJwdFZ3VDlLUTBPQnpOMjdhYUljWFZrMFpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8/5MA0G
CSqGSIb3DQEBCwUAA4IBAQCwA/OMCuW2EkjJXVT6vT9YBIAdGwDeHFJ3U1s+f7y4
S+vSG7CY9lrW3ww5DGSQoQfkAf006g7L05YyOu1uFoehZt8JOozqkgGlL91PA+cc
BtXG3eUVNtOKcnAdjgH5GJ2ooL4AWQ5FLgDNaEH/C0WIqQclAFVwsO+FnoI9Lieg
vimGEljkzQvTxJM1HaEY85Q3t0LMmRh172vpTinidxc1mUYkL63pMmnNAJyZL+0r
7fGuLajf8hm6L9tk2Uwqkj9x9fHB2A1uF64R3cLDlBt+gp/0HAirGT+rCnbrqYs6
oql72JoCZpLdjExIGz/SOrtxNIiEzVbcIz5xL1FuSiG+
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:16 2025 by rpki-client on console.sobornost.net