Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/U-C_QIdjSS2CxZqX_VqB58Wna2Q.roa
File: U-C_QIdjSS2CxZqX_VqB58Wna2Q.roa (raw, json)
Hash identifier: tlMVAQy36XhcBIfAalgFtSzA9HQF3c8fYb/9USiG0pA=
Subject key identifier: 53:E0:BF:40:87:63:49:2D:82:C5:9A:97:FD:5A:81:E7:C5:A7:6B:64
Certificate issuer: /CN=c3e0e9f57c3b083cb68a98630f8a661584468e3d
Certificate serial: 019459ED9B239DE9A1A2F0D362C3DE82DB21
Authority key identifier: C3:E0:E9:F5:7C:3B:08:3C:B6:8A:98:63:0F:8A:66:15:84:46:8E:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/U-C_QIdjSS2CxZqX_VqB58Wna2Q.roa
Signing time: Sun 12 Jan 2025 09:52:11 +0000
ROA not before: Sun 12 Jan 2025 09:52:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8851
IP address blocks: 91.235.214.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:59:ed:9b:23:9d:e9:a1:a2:f0:d3:62:c3:de:82:db:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3e0e9f57c3b083cb68a98630f8a661584468e3d
Validity
Not Before: Jan 12 09:52:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53e0bf408763492d82c59a97fd5a81e7c5a76b64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:51:44:8c:e2:c3:96:5f:20:41:11:7e:94:ca:
01:b1:39:fc:89:07:9f:f5:9e:8d:67:68:49:e8:1e:
ff:bb:24:77:d3:6b:b9:83:90:b2:5e:60:b7:53:73:
bd:ce:95:df:e3:50:e8:03:03:d6:fa:29:03:ba:0f:
75:ba:f9:e7:98:ee:11:24:97:d9:1f:b2:b5:d1:bf:
cf:f3:14:0c:b6:32:0c:c2:e7:06:e0:7f:e1:88:a6:
51:17:f6:f5:4e:2d:10:37:8b:ba:cc:3a:34:6a:f2:
4e:ac:44:c9:48:42:1a:1a:8e:e1:b2:e1:e7:40:58:
17:71:b1:88:57:9b:16:19:8b:ba:d1:7d:78:b4:c1:
d3:fc:e5:b9:41:66:d4:6a:ba:2b:18:d6:c2:ab:9c:
f0:05:dd:74:c5:d9:a7:d9:aa:7c:16:da:2a:d4:f3:
05:b1:32:84:02:0f:f9:a5:9d:51:cb:6e:e6:0a:5b:
0e:3e:5c:a4:ce:16:1f:cc:02:75:a9:cb:e1:19:02:
1b:1b:2e:b8:70:3e:58:9d:cc:cf:23:0f:b1:52:48:
0c:ea:91:ce:dc:57:6f:19:97:75:3c:38:20:f6:0d:
11:61:80:88:af:4f:75:46:7a:a1:2c:79:20:9a:74:
2f:4d:ec:56:9f:3c:24:62:34:92:55:92:39:e0:38:
8b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E0:BF:40:87:63:49:2D:82:C5:9A:97:FD:5A:81:E7:C5:A7:6B:64
X509v3 Authority Key Identifier:
keyid:C3:E0:E9:F5:7C:3B:08:3C:B6:8A:98:63:0F:8A:66:15:84:46:8E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/U-C_QIdjSS2CxZqX_VqB58Wna2Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/a5b999-f1c7-4b0e-a3de-5383aa626726/1/w-Dp9Xw7CDy2iphjD4pmFYRGjj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.214.0/24
Signature Algorithm: sha256WithRSAEncryption
53:60:75:dc:2d:b6:15:82:b7:33:d4:6d:77:9f:a3:e6:ce:9e:
c7:0a:3b:70:fe:14:93:4f:4e:28:a8:60:44:85:e5:f5:c6:f1:
4c:d9:9e:43:c6:4a:cd:c9:51:84:06:79:56:6c:85:1f:55:d8:
23:af:20:98:7f:50:49:3a:fa:c8:4d:f1:d4:b8:9e:8f:37:93:
47:79:41:29:4b:cc:a0:85:ba:5b:94:10:2c:23:28:73:20:c3:
46:f4:03:e8:d1:9f:ca:a6:16:bf:eb:06:e6:ac:78:7e:d9:40:
01:46:d0:55:02:76:ac:7d:9b:c8:56:82:64:3e:4f:d4:fd:f7:
9c:b8:67:76:34:93:4a:24:14:1e:44:1f:1d:6d:04:6c:a6:18:
df:39:0f:a9:32:26:41:fc:f6:30:c7:97:ce:88:ea:b8:a5:77:
dc:92:6e:b6:77:05:e7:98:d6:0a:c1:5a:33:66:80:36:99:8b:
01:a6:b4:90:47:7f:83:e4:ba:2c:28:c6:73:3e:99:6e:1e:fe:
f0:c5:e8:db:ec:30:48:d3:cb:e1:e4:4c:2a:0c:34:cf:88:a9:
0a:c7:7a:73:73:8a:5d:ed:4c:39:33:bc:7f:ff:11:2d:27:9d:
91:f5:b9:9a:f6:8d:00:36:e0:2a:d6:84:23:f3:db:e6:19:27:
f3:55:f2:cb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZRZ7ZsjnemhovDTYsPegtshMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzZTBlOWY1N2MzYjA4M2NiNjhhOTg2MzBmOGE2NjE1ODQ0
NjhlM2QwHhcNMjUwMTEyMDk1MjExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1M2UwYmY0MDg3NjM0OTJkODJjNTlhOTdmZDVhODFlN2M1YTc2YjY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlFEjOLDll8gQRF+lMoBsTn8iQef
9Z6NZ2hJ6B7/uyR302u5g5CyXmC3U3O9zpXf41DoAwPW+ikDug91uvnnmO4RJJfZ
H7K10b/P8xQMtjIMwucG4H/hiKZRF/b1Ti0QN4u6zDo0avJOrETJSEIaGo7hsuHn
QFgXcbGIV5sWGYu60X14tMHT/OW5QWbUarorGNbCq5zwBd10xdmn2ap8Ftoq1PMF
sTKEAg/5pZ1Ry27mClsOPlykzhYfzAJ1qcvhGQIbGy64cD5YnczPIw+xUkgM6pHO
3FdvGZd1PDgg9g0RYYCIr091RnqhLHkgmnQvTexWnzwkYjSSVZI54DiL5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFPgv0CHY0ktgsWal/1agefFp2tkMB8GA1UdIwQY
MBaAFMPg6fV8Owg8toqYYw+KZhWERo49MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdy1EcDlYdzdDRHkyaXBoakQ0cG1GWVJHamowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS9hNWI5OTktZjFjNy00YjBlLWEzZGUt
NTM4M2FhNjI2NzI2LzEvVS1DX1FJZGpTUzJDeFpxWF9WcUI1OFduYTJRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS9hNWI5OTktZjFjNy00YjBlLWEzZGUtNTM4M2FhNjI2NzI2
LzEvdy1EcDlYdzdDRHkyaXBoakQ0cG1GWVJHamowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+vWMA0G
CSqGSIb3DQEBCwUAA4IBAQBTYHXcLbYVgrcz1G13n6Pmzp7HCjtw/hSTT04oqGBE
heX1xvFM2Z5DxkrNyVGEBnlWbIUfVdgjryCYf1BJOvrITfHUuJ6PN5NHeUEpS8yg
hbpblBAsIyhzIMNG9APo0Z/Kpha/6wbmrHh+2UABRtBVAnasfZvIVoJkPk/U/fec
uGd2NJNKJBQeRB8dbQRsphjfOQ+pMiZB/PYwx5fOiOq4pXfckm62dwXnmNYKwVoz
ZoA2mYsBprSQR3+D5LosKMZzPpluHv7wxejb7DBI08vh5EwqDDTPiKkKx3pzc4pd
7Uw5M7x//xEtJ52R9bma9o0ANuAq1oQj89vmGSfzVfLL
-----END CERTIFICATE-----
Generated at Thu Jan 23 16:13:53 2025 by rpki-client on console.sobornost.net