Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/J8hzJTM2uz7yXJSlk16QOqdb0iI.roa
File: J8hzJTM2uz7yXJSlk16QOqdb0iI.roa (raw, json)
Hash identifier: sPVr5eHmre5tC1ZjjWRY6ekKAEsqs3UiVYcFX3QHcj0=
Subject key identifier: 27:C8:73:25:33:36:BB:3E:F2:5C:94:A5:93:5E:90:3A:A7:5B:D2:22
Certificate issuer: /CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Certificate serial: 01942444C01E1D0C63DDDCE0AF6F2447B8BA
Authority key identifier: DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/J8hzJTM2uz7yXJSlk16QOqdb0iI.roa
Signing time: Wed 01 Jan 2025 23:47:52 +0000
ROA not before: Wed 01 Jan 2025 23:47:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57630
IP address blocks: 91.237.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:c0:1e:1d:0c:63:dd:dc:e0:af:6f:24:47:b8:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7ba2a2f0bfa3a76f5c991a47cd9868c6d1ebbe
Validity
Not Before: Jan 1 23:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27c873253336bb3ef25c94a5935e903aa75bd222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3e:d0:b9:43:6b:ae:09:a4:b2:4d:34:f6:d0:
24:f8:20:1e:f6:ae:e1:2c:09:3b:ea:bb:e9:13:c3:
f1:fc:a5:62:15:5f:4e:1e:ca:9e:90:36:d4:d1:1d:
36:25:55:c9:3b:2b:8d:5f:f9:d9:7f:b7:9f:b4:24:
85:22:af:f0:7f:c0:2d:5f:c1:87:3d:5a:f8:73:2e:
71:46:40:8c:00:64:4e:57:01:30:f4:18:0b:0b:b5:
59:0c:93:ae:fb:55:da:b7:fa:ef:56:d9:fa:eb:93:
44:b0:42:6f:0c:d7:0c:ca:c1:f4:ea:3c:26:18:6d:
e0:33:dc:7f:29:7c:84:19:a2:6e:cb:7b:f4:89:86:
4f:59:13:93:14:32:61:14:cc:dd:53:38:81:2f:ca:
3d:65:c7:af:3a:c8:ef:8b:3c:95:e3:86:8f:28:6c:
a8:3c:3b:a9:da:4b:b4:dc:a3:dd:46:85:d8:09:cb:
9f:b7:2a:94:58:c6:f1:97:a9:fd:4e:33:05:75:4b:
5c:95:a2:82:2a:14:5b:77:17:37:b5:71:20:30:2e:
c1:90:e5:68:2a:0d:31:a8:57:49:4e:ca:f2:93:9d:
1b:49:7d:b7:77:50:02:d3:94:c9:11:0f:45:cd:bc:
9b:0b:5f:2b:dc:7d:40:c6:b2:06:04:dc:9a:f5:14:
64:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C8:73:25:33:36:BB:3E:F2:5C:94:A5:93:5E:90:3A:A7:5B:D2:22
X509v3 Authority Key Identifier:
keyid:DB:7B:A2:A2:F0:BF:A3:A7:6F:5C:99:1A:47:CD:98:68:C6:D1:EB:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/23uiovC_o6dvXJkaR82YaMbR674.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/J8hzJTM2uz7yXJSlk16QOqdb0iI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/617a9f-3fb2-4cbb-99fa-f22eb65fcc72/1/23uiovC_o6dvXJkaR82YaMbR674.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.106.0/24
Signature Algorithm: sha256WithRSAEncryption
40:63:b1:60:5a:52:c9:26:b7:7d:54:37:17:9c:55:97:98:55:
fb:c6:1c:c1:c8:08:03:c9:f9:a3:b9:47:d1:6a:77:69:f7:ab:
44:75:0b:f4:ad:f7:3c:db:32:c4:5a:f8:df:a1:f9:13:2c:aa:
f3:df:0f:1e:a4:b8:e8:4c:5e:d0:b3:64:06:87:24:64:7c:b0:
79:4d:2a:d5:8d:14:7b:9d:05:05:19:b0:ae:45:4e:80:4f:25:
1e:45:69:71:6b:a8:a8:d7:ec:69:90:ff:4e:9f:50:1e:68:e5:
98:9c:27:42:a9:1c:ab:82:80:44:78:1a:be:57:89:09:e5:c1:
34:14:9b:4f:a0:e1:fd:fa:de:16:e5:47:5f:20:bb:34:bc:e1:
d1:f5:1f:31:45:2b:dc:7d:ae:e4:c7:f4:c7:4e:cc:66:58:79:
88:bd:fd:43:65:d7:d3:ee:61:ce:74:b8:5e:a3:4d:93:f0:55:
a3:ef:d1:62:29:a7:40:2f:45:ac:9d:34:74:77:ca:f3:9e:b2:
94:b0:9d:d2:f6:2f:40:db:04:4f:ff:d5:39:ca:8b:8c:43:6c:
f2:c6:be:a4:ef:25:61:72:69:38:06:fb:31:68:68:54:d1:ff:
7e:38:0c:ce:ef:2c:70:45:cd:d8:0d:5a:4f:94:bd:e1:85:e8:
63:65:1c:9c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkRMAeHQxj3dzgr28kR7i6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiN2JhMmEyZjBiZmEzYTc2ZjVjOTkxYTQ3Y2Q5ODY4YzZk
MWViYmUwHhcNMjUwMTAxMjM0NzUyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyN2M4NzMyNTMzMzZiYjNlZjI1Yzk0YTU5MzVlOTAzYWE3NWJkMjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT7QuUNrrgmksk009tAk+CAe9q7h
LAk76rvpE8Px/KViFV9OHsqekDbU0R02JVXJOyuNX/nZf7eftCSFIq/wf8AtX8GH
PVr4cy5xRkCMAGROVwEw9BgLC7VZDJOu+1Xat/rvVtn665NEsEJvDNcMysH06jwm
GG3gM9x/KXyEGaJuy3v0iYZPWROTFDJhFMzdUziBL8o9ZcevOsjvizyV44aPKGyo
PDup2ku03KPdRoXYCcuftyqUWMbxl6n9TjMFdUtclaKCKhRbdxc3tXEgMC7BkOVo
Kg0xqFdJTsryk50bSX23d1AC05TJEQ9FzbybC18r3H1AxrIGBNya9RRk0QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCfIcyUzNrs+8lyUpZNekDqnW9IiMB8GA1UdIwQY
MBaAFNt7oqLwv6Onb1yZGkfNmGjG0eu+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC82MTdhOWYtM2ZiMi00Y2JiLTk5ZmEt
ZjIyZWI2NWZjYzcyLzEvSjhoekpUTTJ1ejd5WEpTbGsxNlFPcWRiMGlJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC82MTdhOWYtM2ZiMi00Y2JiLTk5ZmEtZjIyZWI2NWZjYzcy
LzEvMjN1aW92Q19vNmR2WEprYVI4MllhTWJSNjc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+1qMA0G
CSqGSIb3DQEBCwUAA4IBAQBAY7FgWlLJJrd9VDcXnFWXmFX7xhzByAgDyfmjuUfR
andp96tEdQv0rfc82zLEWvjfofkTLKrz3w8epLjoTF7Qs2QGhyRkfLB5TSrVjRR7
nQUFGbCuRU6ATyUeRWlxa6io1+xpkP9On1AeaOWYnCdCqRyrgoBEeBq+V4kJ5cE0
FJtPoOH9+t4W5UdfILs0vOHR9R8xRSvcfa7kx/THTsxmWHmIvf1DZdfT7mHOdLhe
o02T8FWj79FiKadAL0WsnTR0d8rznrKUsJ3S9i9A2wRP/9U5youMQ2zyxr6k7yVh
cmk4BvsxaGhU0f9+OAzO7yxwRc3YDVpPlL3hhehjZRyc
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:06 2025 by rpki-client on console.sobornost.net