Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/64hfXKK79DNnwBiHMNhcan7gApw.roa
File: 64hfXKK79DNnwBiHMNhcan7gApw.roa (raw, json)
Hash identifier: 1pILT2yG6cl/7OeMa23s3WaOano0QbCAXRD1Tm3/Qkg=
Subject key identifier: EB:88:5F:5C:A2:BB:F4:33:67:C0:18:87:30:D8:5C:6A:7E:E0:02:9C
Certificate issuer: /CN=18969bc62955113c0d04999eec91bdda9d2fa3a5
Certificate serial: 0194221FDD717608E5EB97942588EAA64872
Authority key identifier: 18:96:9B:C6:29:55:11:3C:0D:04:99:9E:EC:91:BD:DA:9D:2F:A3:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GJabxilVETwNBJme7JG92p0vo6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/64hfXKK79DNnwBiHMNhcan7gApw.roa
Signing time: Wed 01 Jan 2025 13:48:21 +0000
ROA not before: Wed 01 Jan 2025 13:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47577
IP address blocks: 91.208.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:dd:71:76:08:e5:eb:97:94:25:88:ea:a6:48:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18969bc62955113c0d04999eec91bdda9d2fa3a5
Validity
Not Before: Jan 1 13:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb885f5ca2bbf43367c0188730d85c6a7ee0029c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:05:53:c5:c0:b3:7a:01:73:b1:ab:62:1d:81:
eb:fa:4d:cf:52:b7:ed:cb:22:a4:f1:6f:ec:ab:82:
a3:c4:58:68:47:06:12:c8:96:8b:15:1f:6e:b2:29:
c3:70:1b:77:d2:12:a5:a5:d1:76:62:68:86:24:c1:
ef:83:a2:d7:08:f3:48:9b:81:e0:d6:c8:26:f7:e4:
1e:56:8b:b6:01:10:02:91:c6:a8:44:57:96:37:98:
f8:75:6d:b7:a0:4e:ca:d7:d7:72:39:6b:59:04:54:
ae:f2:db:2f:87:c7:71:12:76:6a:c7:f0:88:53:d2:
17:0f:d2:ff:6c:60:20:0e:dd:b4:7f:d1:6f:0d:af:
bd:c2:84:45:27:55:46:e3:6f:7c:75:de:9c:74:59:
47:78:dd:63:c8:e1:63:c0:f4:28:2f:45:49:95:b3:
45:c1:5a:12:66:19:c5:69:c4:eb:ca:b8:fb:7b:34:
40:1c:a9:36:1e:fe:c2:a5:57:c9:d3:7d:b0:01:d9:
55:de:6e:f9:0b:ee:77:b1:39:3b:e3:d1:2e:05:07:
c7:83:71:a4:cb:4c:57:f8:32:78:bb:94:4d:18:33:
fe:9c:47:65:c4:e6:51:2a:25:86:96:d0:b4:c2:88:
56:2c:2b:b8:eb:0c:b7:3c:ec:a8:af:9f:86:5a:76:
77:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:88:5F:5C:A2:BB:F4:33:67:C0:18:87:30:D8:5C:6A:7E:E0:02:9C
X509v3 Authority Key Identifier:
keyid:18:96:9B:C6:29:55:11:3C:0D:04:99:9E:EC:91:BD:DA:9D:2F:A3:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GJabxilVETwNBJme7JG92p0vo6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/64hfXKK79DNnwBiHMNhcan7gApw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/533a8e-94fd-4b20-afb6-b3641ccdd4bb/1/GJabxilVETwNBJme7JG92p0vo6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.42.0/24
Signature Algorithm: sha256WithRSAEncryption
43:66:63:28:32:d8:f1:a1:97:7d:a7:39:c3:f6:56:1c:36:3c:
ea:a3:6b:ec:ff:66:d9:f3:3c:c4:ca:2c:c5:2e:2e:81:0d:29:
fb:e8:cd:28:c7:fe:20:6b:4a:1c:b8:d1:cd:fa:c9:f3:ce:67:
c1:cc:5f:7a:9a:9d:a1:e4:ac:70:8a:be:a5:88:a0:9d:dc:49:
e1:32:37:7b:5c:cd:ff:db:db:85:bb:28:af:7b:d8:21:6f:f1:
96:f6:1d:78:be:15:f4:19:7e:43:09:50:5b:79:42:5a:74:3a:
e1:08:9a:e2:45:00:1f:f7:d0:45:e6:94:6f:9e:e8:12:86:87:
ac:2b:e0:46:78:a2:4b:a9:bb:02:f9:89:c7:71:a7:5e:ef:2a:
b7:d0:c0:f3:8b:31:d9:f5:29:be:23:b8:f7:f2:81:2e:1a:4b:
5c:34:9e:0e:02:18:58:0c:4a:14:54:2e:37:5b:3d:27:2d:f1:
fd:77:ea:73:1f:81:14:fa:1a:3a:43:65:fb:e3:f5:48:52:7c:
e4:a2:6c:0f:8d:53:94:a1:82:85:b1:a7:c9:84:26:15:9e:04:
f0:13:1b:28:f9:d3:6e:6d:5d:ab:af:a2:43:2b:31:48:29:83:
3e:f6:72:b9:43:47:96:0e:01:5a:c4:20:66:a8:f5:c9:3e:2f:
23:52:c7:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH91xdgjl65eUJYjqpkhyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE4OTY5YmM2Mjk1NTExM2MwZDA0OTk5ZWVjOTFiZGRhOWQy
ZmEzYTUwHhcNMjUwMTAxMTM0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjg4NWY1Y2EyYmJmNDMzNjdjMDE4ODczMGQ4NWM2YTdlZTAwMjljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwVTxcCzegFzsatiHYHr+k3PUrft
yyKk8W/sq4KjxFhoRwYSyJaLFR9usinDcBt30hKlpdF2YmiGJMHvg6LXCPNIm4Hg
1sgm9+QeVou2ARACkcaoRFeWN5j4dW23oE7K19dyOWtZBFSu8tsvh8dxEnZqx/CI
U9IXD9L/bGAgDt20f9FvDa+9woRFJ1VG4298dd6cdFlHeN1jyOFjwPQoL0VJlbNF
wVoSZhnFacTryrj7ezRAHKk2Hv7CpVfJ032wAdlV3m75C+53sTk749EuBQfHg3Gk
y0xX+DJ4u5RNGDP+nEdlxOZRKiWGltC0wohWLCu46wy3POyor5+GWnZ33QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOuIX1yiu/QzZ8AYhzDYXGp+4AKcMB8GA1UdIwQY
MBaAFBiWm8YpVRE8DQSZnuyRvdqdL6OlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR0phYnhpbFZFVHdOQkptZTdKRzkycDB2bzZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi81MzNhOGUtOTRmZC00YjIwLWFmYjYt
YjM2NDFjY2RkNGJiLzEvNjRoZlhLSzc5RE5ud0JpSE1OaGNhbjdnQXB3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi81MzNhOGUtOTRmZC00YjIwLWFmYjYtYjM2NDFjY2RkNGJi
LzEvR0phYnhpbFZFVHdOQkptZTdKRzkycDB2bzZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9AqMA0G
CSqGSIb3DQEBCwUAA4IBAQBDZmMoMtjxoZd9pznD9lYcNjzqo2vs/2bZ8zzEyizF
Li6BDSn76M0ox/4ga0ocuNHN+snzzmfBzF96mp2h5Kxwir6liKCd3EnhMjd7XM3/
29uFuyive9ghb/GW9h14vhX0GX5DCVBbeUJadDrhCJriRQAf99BF5pRvnugShoes
K+BGeKJLqbsC+YnHcade7yq30MDzizHZ9Sm+I7j38oEuGktcNJ4OAhhYDEoUVC43
Wz0nLfH9d+pzH4EU+ho6Q2X74/VIUnzkomwPjVOUoYKFsafJhCYVngTwExso+dNu
bV2rr6JDKzFIKYM+9nK5Q0eWDgFaxCBmqPXJPi8jUsf0
-----END CERTIFICATE-----
Generated at Thu Jan 23 16:06:44 2025 by rpki-client on console.sobornost.net