Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/sRj9HIjhF6xAzSk8DsZiSona3z0.roa
File: sRj9HIjhF6xAzSk8DsZiSona3z0.roa (raw, json)
Hash identifier: CKtuOB2HNTtxCaJDk6aobi//RFXR4AYliP1W8tH3cu8=
Subject key identifier: B1:18:FD:1C:88:E1:17:AC:40:CD:29:3C:0E:C6:62:4A:89:DA:DF:3D
Certificate issuer: /CN=39abeb591716e908345d329fffd3700352315b98
Certificate serial: 01941F8C20EA2969DB37D5AB229EACECB9F3
Authority key identifier: 39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/sRj9HIjhF6xAzSk8DsZiSona3z0.roa
Signing time: Wed 01 Jan 2025 01:47:44 +0000
ROA not before: Wed 01 Jan 2025 01:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39957
IP address blocks: 91.199.1.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:20:ea:29:69:db:37:d5:ab:22:9e:ac:ec:b9:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39abeb591716e908345d329fffd3700352315b98
Validity
Not Before: Jan 1 01:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b118fd1c88e117ac40cd293c0ec6624a89dadf3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b0:e4:5e:60:e5:4b:c8:40:03:2e:3b:ff:4a:
b5:e4:d5:7e:56:19:8c:0d:db:5f:ff:86:6d:48:c6:
47:52:48:9a:e7:84:9f:1e:b3:4d:96:07:41:23:71:
83:34:59:38:d7:49:0f:9d:d5:86:25:9d:3e:18:00:
61:44:64:bf:b2:99:6c:0f:0c:9e:3b:2b:c9:97:63:
89:c5:98:eb:4c:6e:ae:09:77:a2:cf:36:f3:ef:70:
97:a5:51:1b:6c:98:02:43:73:f5:a7:5b:f5:12:c7:
0a:61:26:c1:2a:cf:02:75:f3:85:a9:86:1d:47:82:
ce:29:58:f2:ba:9f:dc:52:52:ea:45:6b:22:5a:ab:
59:79:2a:59:fa:f1:bc:8e:de:dd:a5:85:cf:d8:f8:
13:4a:3b:98:9f:72:64:2f:1f:d0:7d:b0:f5:fc:a5:
dc:28:3a:18:55:2e:53:d8:40:90:88:fb:fd:fa:94:
a0:50:59:c2:2e:c6:ed:bd:a4:5e:08:b9:b3:2a:be:
f1:41:6f:95:86:67:33:4f:41:c5:ac:a1:be:f7:bc:
4d:81:35:df:d1:8c:d8:ac:f8:1e:56:4e:a3:76:95:
c8:bf:85:21:11:59:60:82:8f:83:6a:84:86:c2:ad:
e9:30:a7:05:3a:5e:5f:21:c5:c7:a4:8a:42:8d:1d:
53:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:18:FD:1C:88:E1:17:AC:40:CD:29:3C:0E:C6:62:4A:89:DA:DF:3D
X509v3 Authority Key Identifier:
keyid:39:AB:EB:59:17:16:E9:08:34:5D:32:9F:FF:D3:70:03:52:31:5B:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OavrWRcW6Qg0XTKf_9NwA1IxW5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/sRj9HIjhF6xAzSk8DsZiSona3z0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/b08f22-11f6-4ee5-a231-b7cd4490a983/1/OavrWRcW6Qg0XTKf_9NwA1IxW5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.1.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:b1:49:46:38:47:fd:3d:54:9d:8c:6e:a7:e5:26:d9:fa:05:
64:44:3d:94:9e:10:64:a7:d6:79:ac:94:7f:67:58:10:14:55:
b4:b1:7f:8b:34:5d:e4:8f:ed:ea:6f:6e:4e:14:6e:60:6e:ca:
b7:9d:de:3c:09:ee:8d:d4:99:68:95:7d:2c:e0:0f:c8:82:75:
f8:e0:58:3c:78:3d:49:6e:99:55:4e:52:df:50:32:e2:92:aa:
dc:8c:89:c4:2c:d0:b1:bc:16:25:20:fd:1a:5e:c5:f5:6b:f6:
9c:10:b8:51:b5:41:60:db:ca:4b:0b:cf:ce:2b:56:0d:41:a4:
53:04:4d:2d:43:65:4b:83:51:03:c1:53:35:c1:fc:09:6b:43:
e3:22:d3:67:b9:2c:29:b6:31:a1:6b:b7:67:9b:7e:d7:65:c1:
60:0a:90:15:d1:2c:41:f4:b9:f9:3f:e5:27:9e:31:98:d3:6d:
3f:c2:31:fb:03:bc:07:ed:9c:7d:7a:de:7d:f7:9d:ea:a6:6e:
0f:49:59:47:40:dd:60:e8:0b:fe:b4:be:4c:a2:96:7d:43:23:
69:34:8c:7d:77:ff:fb:cd:d0:09:2b:8e:65:9f:5f:4b:00:53:
08:cb:e1:77:21:d9:f2:0e:0c:73:ce:33:dd:34:72:06:2e:30:
84:ef:5e:0b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjCDqKWnbN9WrIp6s7LnzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5YWJlYjU5MTcxNmU5MDgzNDVkMzI5ZmZmZDM3MDAzNTIz
MTViOTgwHhcNMjUwMTAxMDE0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMTE4ZmQxYzg4ZTExN2FjNDBjZDI5M2MwZWM2NjI0YTg5ZGFkZjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAubDkXmDlS8hAAy47/0q15NV+VhmM
Ddtf/4ZtSMZHUkia54SfHrNNlgdBI3GDNFk410kPndWGJZ0+GABhRGS/splsDwye
OyvJl2OJxZjrTG6uCXeizzbz73CXpVEbbJgCQ3P1p1v1EscKYSbBKs8CdfOFqYYd
R4LOKVjyup/cUlLqRWsiWqtZeSpZ+vG8jt7dpYXP2PgTSjuYn3JkLx/QfbD1/KXc
KDoYVS5T2ECQiPv9+pSgUFnCLsbtvaReCLmzKr7xQW+VhmczT0HFrKG+97xNgTXf
0YzYrPgeVk6jdpXIv4UhEVlggo+DaoSGwq3pMKcFOl5fIcXHpIpCjR1T4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLEY/RyI4ResQM0pPA7GYkqJ2t89MB8GA1UdIwQY
MBaAFDmr61kXFukINF0yn//TcANSMVuYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2F2cldSY1c2UWcwWFRLZl85TndBMUl4VzVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9iMDhmMjItMTFmNi00ZWU1LWEyMzEt
YjdjZDQ0OTBhOTgzLzEvc1JqOUhJamhGNnhBelNrOERzWmlTb25hM3owLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9iMDhmMjItMTFmNi00ZWU1LWEyMzEtYjdjZDQ0OTBhOTgz
LzEvT2F2cldSY1c2UWcwWFRLZl85TndBMUl4VzVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8cBMA0G
CSqGSIb3DQEBCwUAA4IBAQCesUlGOEf9PVSdjG6n5SbZ+gVkRD2UnhBkp9Z5rJR/
Z1gQFFW0sX+LNF3kj+3qb25OFG5gbsq3nd48Ce6N1JlolX0s4A/IgnX44Fg8eD1J
bplVTlLfUDLikqrcjInELNCxvBYlIP0aXsX1a/acELhRtUFg28pLC8/OK1YNQaRT
BE0tQ2VLg1EDwVM1wfwJa0PjItNnuSwptjGha7dnm37XZcFgCpAV0SxB9Ln5P+Un
njGY020/wjH7A7wH7Zx9et59953qpm4PSVlHQN1g6Av+tL5MopZ9QyNpNIx9d//7
zdAJK45ln19LAFMIy+F3IdnyDgxzzjPdNHIGLjCE714L
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:08 2025 by rpki-client on console.sobornost.net