Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/BdUWQfeU6Dd3ui-CflFlA-XkoYo.roa
File: BdUWQfeU6Dd3ui-CflFlA-XkoYo.roa (raw, json)
Hash identifier: ooQU4Ho0ybPL99Ep+vo4svb61ieYsfRUfMtTThTSOn0=
Subject key identifier: 05:D5:16:41:F7:94:E8:37:77:BA:2F:82:7E:51:65:03:E5:E4:A1:8A
Certificate issuer: /CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Certificate serial: 019421B1F4DA80C274DDFE728FBA633177B5
Authority key identifier: EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/BdUWQfeU6Dd3ui-CflFlA-XkoYo.roa
Signing time: Wed 01 Jan 2025 11:48:18 +0000
ROA not before: Wed 01 Jan 2025 11:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197928
IP address blocks: 91.229.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:f4:da:80:c2:74:dd:fe:72:8f:ba:63:31:77:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb4c5acd6fa1e6a91129ac424057a877558e8052
Validity
Not Before: Jan 1 11:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=05d51641f794e83777ba2f827e516503e5e4a18a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:50:dd:3b:e7:f9:29:07:3d:86:10:2a:82:f1:
c7:0f:23:3d:85:d0:5d:3d:cd:60:05:80:d8:3a:b6:
08:c8:ad:54:53:18:b1:74:a3:50:81:8b:0a:c6:b9:
b1:49:09:8e:bc:ea:ea:52:43:8c:2e:68:57:1a:bb:
4f:67:39:7f:c2:a5:6b:91:ca:84:b9:61:b2:31:ef:
c6:ac:1f:b0:51:18:0c:5d:2a:be:55:a7:7e:f2:b1:
59:c6:cf:83:ea:64:96:8b:39:a3:aa:16:b8:6c:30:
66:23:9e:eb:b6:d3:ba:e6:e5:0b:c2:42:79:79:af:
2e:da:60:8a:0e:ef:2f:b3:f9:a1:07:ef:c8:2c:5d:
87:98:27:09:3b:1b:8a:6d:5d:4c:56:88:ca:26:6b:
17:25:27:10:a3:ce:45:4c:7d:50:2c:f3:f7:1e:2c:
63:f6:95:ca:b1:f8:f3:a7:39:72:4a:62:4a:46:b6:
75:4d:fb:d7:d1:df:99:79:42:e7:87:24:be:ee:a2:
33:ee:07:2d:33:54:e6:68:5d:fb:73:1e:5f:36:9b:
85:85:fa:7f:a2:84:aa:0b:eb:62:16:d8:90:12:18:
6e:dc:90:91:ea:30:0c:80:f0:ce:f9:94:3d:c7:2b:
99:2e:e1:fd:9f:b5:5c:17:80:d6:cb:f4:cb:5a:ab:
ad:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:D5:16:41:F7:94:E8:37:77:BA:2F:82:7E:51:65:03:E5:E4:A1:8A
X509v3 Authority Key Identifier:
keyid:EB:4C:5A:CD:6F:A1:E6:A9:11:29:AC:42:40:57:A8:77:55:8E:80:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/60xazW-h5qkRKaxCQFeod1WOgFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/BdUWQfeU6Dd3ui-CflFlA-XkoYo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/62d33d-9df4-417e-aa30-dcbdf71ff347/1/60xazW-h5qkRKaxCQFeod1WOgFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.238.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:65:cb:ad:e2:60:05:a3:38:7c:12:7f:de:ca:84:82:a6:6d:
4c:e9:3a:f2:53:12:e8:6f:98:9d:8f:97:6c:fe:c7:c7:31:b7:
01:50:5c:ac:9e:86:a7:78:b9:c1:ad:ef:86:99:31:9b:1c:d2:
06:00:e8:05:ac:7c:4a:e4:12:4c:07:fb:a7:f5:1b:47:3e:1f:
6c:54:96:0b:c7:e0:88:93:f3:25:bb:99:e6:0e:2d:bd:b5:66:
33:0a:e1:28:4f:25:e0:31:cb:eb:01:fe:d8:09:dd:f9:63:eb:
49:c8:e9:59:c4:f5:ef:0d:1d:b2:2d:3d:ca:18:c6:91:7f:70:
a0:cb:33:86:c1:f3:d0:5c:7b:5c:f6:d7:60:ad:1f:7a:e5:4b:
70:9a:33:bf:fc:1f:fc:3d:a9:75:c6:19:4a:8b:ce:e7:cf:67:
1e:86:58:07:15:a7:f0:7d:3a:3e:6d:17:89:23:d7:57:e4:bc:
09:19:e6:9b:d2:e7:03:51:bd:24:79:d5:15:8a:9d:6c:e0:86:
66:01:8c:93:39:ae:e7:96:27:01:fe:fa:73:ff:df:67:0b:60:
c9:a5:70:62:10:54:ef:c6:8a:9d:55:b0:df:50:4d:b4:bb:c5:
3d:58:6c:97:03:8d:18:0a:21:88:c2:83:3f:78:75:23:0e:c0:
1e:ee:c8:54
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsfTagMJ03f5yj7pjMXe1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViNGM1YWNkNmZhMWU2YTkxMTI5YWM0MjQwNTdhODc3NTU4
ZTgwNTIwHhcNMjUwMTAxMTE0ODE4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNWQ1MTY0MWY3OTRlODM3NzdiYTJmODI3ZTUxNjUwM2U1ZTRhMThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFDdO+f5KQc9hhAqgvHHDyM9hdBd
Pc1gBYDYOrYIyK1UUxixdKNQgYsKxrmxSQmOvOrqUkOMLmhXGrtPZzl/wqVrkcqE
uWGyMe/GrB+wURgMXSq+Vad+8rFZxs+D6mSWizmjqha4bDBmI57rttO65uULwkJ5
ea8u2mCKDu8vs/mhB+/ILF2HmCcJOxuKbV1MVojKJmsXJScQo85FTH1QLPP3Hixj
9pXKsfjzpzlySmJKRrZ1TfvX0d+ZeULnhyS+7qIz7gctM1TmaF37cx5fNpuFhfp/
ooSqC+tiFtiQEhhu3JCR6jAMgPDO+ZQ9xyuZLuH9n7VcF4DWy/TLWqutTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAXVFkH3lOg3d7ovgn5RZQPl5KGKMB8GA1UdIwQY
MBaAFOtMWs1voeapESmsQkBXqHdVjoBSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMi82MmQzM2QtOWRmNC00MTdlLWFhMzAt
ZGNiZGY3MWZmMzQ3LzEvQmRVV1FmZVU2RGQzdWktQ2ZsRmxBLVhrb1lvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMi82MmQzM2QtOWRmNC00MTdlLWFhMzAtZGNiZGY3MWZmMzQ3
LzEvNjB4YXpXLWg1cWtSS2F4Q1FGZW9kMVdPZ0ZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+XuMA0G
CSqGSIb3DQEBCwUAA4IBAQBvZcut4mAFozh8En/eyoSCpm1M6TryUxLob5idj5ds
/sfHMbcBUFysnoaneLnBre+GmTGbHNIGAOgFrHxK5BJMB/un9RtHPh9sVJYLx+CI
k/Mlu5nmDi29tWYzCuEoTyXgMcvrAf7YCd35Y+tJyOlZxPXvDR2yLT3KGMaRf3Cg
yzOGwfPQXHtc9tdgrR965UtwmjO//B/8Pal1xhlKi87nz2cehlgHFafwfTo+bReJ
I9dX5LwJGeab0ucDUb0kedUVip1s4IZmAYyTOa7nlicB/vpz/99nC2DJpXBiEFTv
xoqdVbDfUE20u8U9WGyXA40YCiGIwoM/eHUjDsAe7shU
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:34 2025 by rpki-client on console.sobornost.net