Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/F2xZ9QgRce67ga9Jmar4OMuLjGo.roa
File: F2xZ9QgRce67ga9Jmar4OMuLjGo.roa (raw, json)
Hash identifier: bnt8ZsENPOXky7xH9NrByc19Ki/WFnxkHvhWkRdi1JQ=
Subject key identifier: 17:6C:59:F5:08:11:71:EE:BB:81:AF:49:99:AA:F8:38:CB:8B:8C:6A
Certificate issuer: /CN=e979403cd68c98df738e31062903a0b322600b59
Certificate serial: 01951905FE4E11AB4CC883E74B94F2C4695E
Authority key identifier: E9:79:40:3C:D6:8C:98:DF:73:8E:31:06:29:03:A0:B3:22:60:0B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/F2xZ9QgRce67ga9Jmar4OMuLjGo.roa
Signing time: Tue 18 Feb 2025 12:26:17 +0000
ROA not before: Tue 18 Feb 2025 12:26:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44153
IP address blocks: 91.199.38.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:19:05:fe:4e:11:ab:4c:c8:83:e7:4b:94:f2:c4:69:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e979403cd68c98df738e31062903a0b322600b59
Validity
Not Before: Feb 18 12:26:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=176c59f5081171eebb81af4999aaf838cb8b8c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a5:88:90:72:96:c3:fe:e4:ba:a2:19:af:13:
67:55:d6:82:95:ca:1f:3e:11:5a:6e:15:aa:6a:15:
a5:0e:c9:d1:2c:b6:a1:98:81:e8:74:17:d7:85:f4:
7a:68:58:03:fb:e7:63:35:2e:7a:de:83:7f:1c:16:
3a:2b:55:bd:f6:1f:6f:87:27:de:8f:91:8d:42:18:
69:55:00:48:f1:64:6b:6c:4b:1c:11:3c:78:4c:97:
5d:41:7d:ba:1e:5e:7f:07:e8:da:73:b7:07:32:05:
65:29:1f:da:6b:7a:7a:b9:60:b3:48:2b:4f:93:68:
3b:29:1d:dc:0c:67:8f:3f:19:80:65:4a:f6:59:b8:
23:ff:73:74:bb:c7:63:7d:b8:3d:61:e7:45:b5:a2:
86:af:45:19:91:8c:2d:d3:9a:bf:45:f1:78:70:ce:
34:68:14:55:a7:90:42:f9:ae:46:05:7c:8f:81:26:
61:53:e0:30:20:e2:c4:e8:a7:42:15:1c:98:96:ae:
61:7f:86:b2:1e:c5:b1:86:7c:b5:ae:17:f8:02:d4:
5f:ee:fa:9b:17:7b:45:fa:ab:ea:84:f2:d2:aa:49:
35:52:24:14:2a:08:33:37:b3:fe:72:fc:a9:66:db:
51:da:38:8e:70:73:29:63:b0:e7:8a:33:03:3d:83:
04:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:6C:59:F5:08:11:71:EE:BB:81:AF:49:99:AA:F8:38:CB:8B:8C:6A
X509v3 Authority Key Identifier:
keyid:E9:79:40:3C:D6:8C:98:DF:73:8E:31:06:29:03:A0:B3:22:60:0B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XlAPNaMmN9zjjEGKQOgsyJgC1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/F2xZ9QgRce67ga9Jmar4OMuLjGo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/303a8f-367f-4cfa-9a78-e81621b61d65/1/6XlAPNaMmN9zjjEGKQOgsyJgC1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.38.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:c3:ea:85:f7:e3:26:13:f8:50:4a:74:c8:10:fd:bd:43:40:
e6:cc:75:f5:e6:db:b3:09:c8:89:db:f1:f1:75:ef:aa:44:1c:
13:f9:7a:87:5e:8c:96:95:47:4f:4f:de:09:05:2c:24:25:ab:
4d:c4:e7:40:7b:a1:fe:25:dd:af:ae:11:37:04:f7:9b:20:2c:
b5:25:11:ea:26:91:d8:64:17:23:c9:b4:3e:d4:91:3b:a5:38:
7e:1c:b4:94:a0:ae:0d:71:c5:68:f0:32:e1:82:c4:99:9a:5e:
e6:c1:f8:46:10:a7:d2:18:00:55:19:ad:c3:e3:6c:0c:d2:58:
47:ef:6d:7d:5e:df:e8:55:98:38:a3:f8:d5:0b:68:f7:4b:de:
a7:8f:9c:e1:03:1d:ed:15:04:c3:6f:f3:61:9f:b6:bf:08:74:
de:22:2d:8c:ad:d8:dd:c0:66:32:24:14:38:e2:aa:11:3d:23:
d8:14:8e:54:95:f9:2b:d2:43:b9:11:17:04:a3:ab:c6:45:c4:
08:dc:84:d7:37:ba:82:2c:3c:c5:ba:14:2e:91:4a:60:9f:9a:
7b:cb:16:74:39:16:7e:41:98:69:a0:a8:b2:63:07:39:88:45:
b2:5c:14:92:9a:71:f7:33:69:d0:17:c5:93:3a:01:52:b0:8e:
76:dc:a7:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZUZBf5OEatMyIPnS5TyxGleMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5Nzk0MDNjZDY4Yzk4ZGY3MzhlMzEwNjI5MDNhMGIzMjI2
MDBiNTkwHhcNMjUwMjE4MTIyNjE3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNzZjNTlmNTA4MTE3MWVlYmI4MWFmNDk5OWFhZjgzOGNiOGI4YzZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6WIkHKWw/7kuqIZrxNnVdaClcof
PhFabhWqahWlDsnRLLahmIHodBfXhfR6aFgD++djNS563oN/HBY6K1W99h9vhyfe
j5GNQhhpVQBI8WRrbEscETx4TJddQX26Hl5/B+jac7cHMgVlKR/aa3p6uWCzSCtP
k2g7KR3cDGePPxmAZUr2Wbgj/3N0u8djfbg9YedFtaKGr0UZkYwt05q/RfF4cM40
aBRVp5BC+a5GBXyPgSZhU+AwIOLE6KdCFRyYlq5hf4ayHsWxhny1rhf4AtRf7vqb
F3tF+qvqhPLSqkk1UiQUKggzN7P+cvypZttR2jiOcHMpY7DnijMDPYMENwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBdsWfUIEXHuu4GvSZmq+DjLi4xqMB8GA1UdIwQY
MBaAFOl5QDzWjJjfc44xBikDoLMiYAtZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS8zMDNhOGYtMzY3Zi00Y2ZhLTlhNzgt
ZTgxNjIxYjYxZDY1LzEvRjJ4WjlRZ1JjZTY3Z2E5Sm1hcjRPTXVMakdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS8zMDNhOGYtMzY3Zi00Y2ZhLTlhNzgtZTgxNjIxYjYxZDY1
LzEvNlhsQVBOYU1tTjl6ampFR0tRT2dzeUpnQzFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8cmMA0G
CSqGSIb3DQEBCwUAA4IBAQBew+qF9+MmE/hQSnTIEP29Q0DmzHX15tuzCciJ2/Hx
de+qRBwT+XqHXoyWlUdPT94JBSwkJatNxOdAe6H+Jd2vrhE3BPebICy1JRHqJpHY
ZBcjybQ+1JE7pTh+HLSUoK4NccVo8DLhgsSZml7mwfhGEKfSGABVGa3D42wM0lhH
7219Xt/oVZg4o/jVC2j3S96nj5zhAx3tFQTDb/Nhn7a/CHTeIi2MrdjdwGYyJBQ4
4qoRPSPYFI5Ulfkr0kO5ERcEo6vGRcQI3ITXN7qCLDzFuhQukUpgn5p7yxZ0ORZ+
QZhpoKiyYwc5iEWyXBSSmnH3M2nQF8WTOgFSsI523Ker
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:43 2025 by rpki-client on console.sobornost.net