Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/8vm_891vteHi79TbQnGkI8cOQqI.roa
File: 8vm_891vteHi79TbQnGkI8cOQqI.roa (raw, json)
Hash identifier: JfWucuJfmWPdMg2hC2g4IUg1QZRP4I3zcWXq8eNKv+E=
Subject key identifier: F2:F9:BF:F3:DD:6F:B5:E1:E2:EF:D4:DB:42:71:A4:23:C7:0E:42:A2
Certificate issuer: /CN=bd1911343226229d203ea326a9d69d4fc346c575
Certificate serial: 019426D97729335BB54B1B565823E01A4A2F
Authority key identifier: BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/8vm_891vteHi79TbQnGkI8cOQqI.roa
Signing time: Thu 02 Jan 2025 11:49:33 +0000
ROA not before: Thu 02 Jan 2025 11:49:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51184
IP address blocks: 91.216.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:77:29:33:5b:b5:4b:1b:56:58:23:e0:1a:4a:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd1911343226229d203ea326a9d69d4fc346c575
Validity
Not Before: Jan 2 11:49:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2f9bff3dd6fb5e1e2efd4db4271a423c70e42a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a7:20:94:76:ed:f2:31:22:00:70:c5:62:4b:
7e:10:2d:9b:45:d6:51:10:2e:df:45:b0:8d:5e:12:
8b:28:29:ad:37:34:a2:30:65:92:37:20:59:a1:23:
20:40:c3:29:37:bc:4f:fd:d7:8d:2b:e8:d4:0c:c5:
47:22:99:99:99:65:b4:d7:88:52:d9:55:3b:47:f8:
4a:cd:5f:49:6e:1b:ef:c1:72:2f:ac:9e:4d:be:91:
ad:9d:78:c6:bf:40:be:4f:db:41:4d:cf:68:f4:2b:
f6:5f:5d:08:60:59:68:1c:e2:17:3b:13:17:36:de:
76:13:0e:76:b5:e7:e7:71:dd:7d:23:da:ae:38:ed:
b6:23:63:3e:4b:71:d2:0b:88:26:ad:94:d0:bd:96:
bd:8e:1b:d5:e1:c9:ef:30:be:73:bb:6c:3a:03:b2:
c9:65:29:17:03:6f:31:bd:c4:c9:58:8c:b0:b6:92:
a4:6d:dd:68:f8:44:f5:e8:70:51:87:f1:af:79:d2:
35:8a:e8:25:24:90:90:e7:18:c0:77:b1:f6:3a:86:
23:05:ba:b7:90:f6:ea:24:cb:ce:e2:90:98:ad:35:
d6:e0:41:a6:4a:6f:8b:65:06:74:26:90:af:cd:2f:
d5:a6:a6:a1:aa:b8:f9:c8:c2:3f:56:8b:0d:6e:a8:
32:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:F9:BF:F3:DD:6F:B5:E1:E2:EF:D4:DB:42:71:A4:23:C7:0E:42:A2
X509v3 Authority Key Identifier:
keyid:BD:19:11:34:32:26:22:9D:20:3E:A3:26:A9:D6:9D:4F:C3:46:C5:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRkRNDImIp0gPqMmqdadT8NGxXU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/8vm_891vteHi79TbQnGkI8cOQqI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/9e7d10-243f-47b5-afc4-356ee9776153/1/vRkRNDImIp0gPqMmqdadT8NGxXU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.8.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:44:09:6c:38:5a:51:1a:6f:40:1d:49:97:5c:14:be:7d:97:
cd:18:20:8e:ff:23:4b:2e:d1:20:a3:b0:1d:80:a5:e5:54:b2:
c1:a3:e0:8d:75:ca:73:fc:fb:9f:be:75:5a:5a:1a:4c:9c:2f:
a5:93:8a:a4:23:09:36:33:60:da:f0:76:26:e6:27:3f:30:f4:
fb:51:e1:21:86:ec:92:78:0d:ae:8a:a7:e7:79:4d:58:8a:ce:
4d:6f:c1:92:b0:a1:dc:b5:61:2d:cf:c0:b3:49:44:5b:14:65:
6e:c0:d4:54:bb:b3:49:2e:49:a7:5e:52:96:26:84:1f:fa:81:
31:8e:bd:1e:61:ef:7f:16:60:94:32:4c:c1:e1:35:9b:77:74:
09:ba:e0:2c:4e:ba:0c:47:e8:52:97:6d:5d:d4:72:70:e3:53:
13:a3:69:7d:69:63:05:c4:6e:76:e7:ae:44:19:d3:4a:ec:38:
af:c1:8a:71:18:c9:74:5e:59:90:39:90:7c:a7:d6:e6:a0:d9:
2e:d3:e5:09:ab:b7:c9:8e:f3:91:aa:48:0a:54:65:3b:9d:26:
0a:91:25:74:f0:ed:6c:83:16:db:a8:07:e7:65:79:5a:c4:a3:
35:f9:c2:8c:54:10:d2:2a:ba:36:7f:07:8c:be:d5:49:3b:af:
c4:07:c8:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2XcpM1u1SxtWWCPgGkovMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMTkxMTM0MzIyNjIyOWQyMDNlYTMyNmE5ZDY5ZDRmYzM0
NmM1NzUwHhcNMjUwMTAyMTE0OTMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmY5YmZmM2RkNmZiNWUxZTJlZmQ0ZGI0MjcxYTQyM2M3MGU0MmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwacglHbt8jEiAHDFYkt+EC2bRdZR
EC7fRbCNXhKLKCmtNzSiMGWSNyBZoSMgQMMpN7xP/deNK+jUDMVHIpmZmWW014hS
2VU7R/hKzV9JbhvvwXIvrJ5NvpGtnXjGv0C+T9tBTc9o9Cv2X10IYFloHOIXOxMX
Nt52Ew52tefncd19I9quOO22I2M+S3HSC4gmrZTQvZa9jhvV4cnvML5zu2w6A7LJ
ZSkXA28xvcTJWIywtpKkbd1o+ET16HBRh/GvedI1iuglJJCQ5xjAd7H2OoYjBbq3
kPbqJMvO4pCYrTXW4EGmSm+LZQZ0JpCvzS/Vpqahqrj5yMI/VosNbqgyZQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPL5v/Pdb7Xh4u/U20JxpCPHDkKiMB8GA1UdIwQY
MBaAFL0ZETQyJiKdID6jJqnWnU/DRsV1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlJrUk5ESW1JcDBnUHFNbXFkYWRUOE5HeFhVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85ZTdkMTAtMjQzZi00N2I1LWFmYzQt
MzU2ZWU5Nzc2MTUzLzEvOHZtXzg5MXZ0ZUhpNzlUYlFuR2tJOGNPUXFJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS85ZTdkMTAtMjQzZi00N2I1LWFmYzQtMzU2ZWU5Nzc2MTUz
LzEvdlJrUk5ESW1JcDBnUHFNbXFkYWRUOE5HeFhVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9gIMA0G
CSqGSIb3DQEBCwUAA4IBAQAORAlsOFpRGm9AHUmXXBS+fZfNGCCO/yNLLtEgo7Ad
gKXlVLLBo+CNdcpz/PufvnVaWhpMnC+lk4qkIwk2M2Da8HYm5ic/MPT7UeEhhuyS
eA2uiqfneU1Yis5Nb8GSsKHctWEtz8CzSURbFGVuwNRUu7NJLkmnXlKWJoQf+oEx
jr0eYe9/FmCUMkzB4TWbd3QJuuAsTroMR+hSl21d1HJw41MTo2l9aWMFxG52565E
GdNK7DivwYpxGMl0XlmQOZB8p9bmoNku0+UJq7fJjvORqkgKVGU7nSYKkSV08O1s
gxbbqAfnZXlaxKM1+cKMVBDSKro2fweMvtVJO6/EB8hs
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:34 2025 by rpki-client on console.sobornost.net