Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/k4GHX5CM9ME-YpJS46totU42u_s.roa
File: k4GHX5CM9ME-YpJS46totU42u_s.roa (raw, json)
Hash identifier: 17BXAFjVIDmItCUWC+3KOwfQrh8Ih46jiKww9JPT2jM=
Subject key identifier: 93:81:87:5F:90:8C:F4:C1:3E:62:92:52:E3:AB:68:B5:4E:36:BB:FB
Certificate issuer: /CN=17f57430b1048a923a89d6cfa2a3cb3bfc2f1258
Certificate serial: 0194252180985DE35B9B2096A7D878FB23DA
Authority key identifier: 17:F5:74:30:B1:04:8A:92:3A:89:D6:CF:A2:A3:CB:3B:FC:2F:12:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F_V0MLEEipI6idbPoqPLO_wvElg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/k4GHX5CM9ME-YpJS46totU42u_s.roa
Signing time: Thu 02 Jan 2025 03:49:00 +0000
ROA not before: Thu 02 Jan 2025 03:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44662
IP address blocks: 91.235.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:80:98:5d:e3:5b:9b:20:96:a7:d8:78:fb:23:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17f57430b1048a923a89d6cfa2a3cb3bfc2f1258
Validity
Not Before: Jan 2 03:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9381875f908cf4c13e629252e3ab68b54e36bbfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:38:13:93:46:7e:de:46:6e:a9:2e:40:78:03:
ff:a3:1c:5a:e4:ff:91:47:01:69:ae:d3:16:12:b2:
73:e1:79:68:92:d5:93:65:5c:85:0a:04:9e:1b:c8:
66:47:cd:c7:da:e0:43:cf:e7:24:ee:98:2d:f0:8a:
e1:40:48:78:2b:af:20:42:b5:58:9e:e1:22:25:d8:
fa:36:e8:2d:f0:21:8f:37:54:8f:c1:60:e7:90:63:
19:d6:a2:f8:8d:69:34:5b:b2:73:b6:49:99:79:92:
a5:d0:4e:3a:04:e6:52:c4:d7:bb:ff:dd:cd:8f:9b:
bc:a8:ec:b1:4f:4f:a7:54:01:ba:b7:28:35:8e:15:
63:44:58:c7:12:fa:00:b9:80:b2:de:88:47:c9:2b:
04:72:b6:d2:38:5e:93:0e:15:eb:7a:53:47:ff:e1:
8b:0c:1b:a0:a0:c5:07:f0:2b:85:c2:06:a0:63:4d:
05:5f:4d:6b:bf:5f:f0:94:a0:f7:2a:60:0e:44:b7:
50:d1:50:55:e0:31:a5:7b:71:e8:78:77:28:f9:98:
9b:30:3f:f7:6e:e5:6f:3c:8c:a3:eb:93:97:90:8c:
b6:a2:3f:70:22:93:78:48:27:91:a7:0c:1f:0f:f7:
b3:ca:1c:54:a4:2a:0a:c1:c7:2f:50:e8:97:3f:e0:
61:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:81:87:5F:90:8C:F4:C1:3E:62:92:52:E3:AB:68:B5:4E:36:BB:FB
X509v3 Authority Key Identifier:
keyid:17:F5:74:30:B1:04:8A:92:3A:89:D6:CF:A2:A3:CB:3B:FC:2F:12:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F_V0MLEEipI6idbPoqPLO_wvElg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/k4GHX5CM9ME-YpJS46totU42u_s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/127268-6cf5-4694-ae11-e09408ae4666/1/F_V0MLEEipI6idbPoqPLO_wvElg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.233.0/24
Signature Algorithm: sha256WithRSAEncryption
80:86:cd:19:71:1b:c6:eb:f9:8a:ed:bd:ab:29:39:30:a9:a1:
e4:2a:db:3d:4e:23:55:e7:e4:0c:95:58:31:ee:77:5d:bb:da:
0f:85:b0:d5:60:6e:a8:2e:8e:48:ae:6e:67:86:ea:2a:82:15:
bc:cd:9b:9c:85:d0:f2:6c:1e:93:12:ec:9d:a0:0e:60:21:ad:
97:b6:de:ce:25:f3:d4:4e:87:55:17:76:a0:da:e0:6e:15:f6:
da:c6:6a:30:11:0c:53:5b:0a:e3:da:50:d3:32:71:c2:13:c3:
36:0c:bf:b1:58:30:1e:0b:25:83:0f:41:ca:5c:cd:eb:6e:4f:
cb:5a:2a:b4:8f:5a:0e:14:de:1b:43:46:aa:1f:a4:d2:d1:0a:
cd:fb:8b:30:97:60:d4:96:36:ae:92:28:26:93:a3:f4:6d:c7:
f8:ca:de:41:23:77:0c:b8:a9:42:2a:89:8b:1f:e4:dc:3a:b8:
8c:13:b7:3a:33:94:a9:56:ff:bf:08:ed:7f:21:f6:11:00:c9:
7d:cf:fc:d6:0a:b7:2c:a6:9b:75:27:a8:16:1a:8a:33:4a:78:
62:c5:fe:5d:61:ef:ee:d6:60:06:e1:7c:a4:63:f5:f9:10:e0:
f0:30:b3:b2:12:24:6c:f0:5d:ef:cf:28:cf:98:87:6f:1a:77:
c4:d2:a8:8b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlIYCYXeNbmyCWp9h4+yPaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3ZjU3NDMwYjEwNDhhOTIzYTg5ZDZjZmEyYTNjYjNiZmMy
ZjEyNTgwHhcNMjUwMTAyMDM0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MzgxODc1ZjkwOGNmNGMxM2U2MjkyNTJlM2FiNjhiNTRlMzZiYmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+TgTk0Z+3kZuqS5AeAP/oxxa5P+R
RwFprtMWErJz4XloktWTZVyFCgSeG8hmR83H2uBDz+ck7pgt8IrhQEh4K68gQrVY
nuEiJdj6Nugt8CGPN1SPwWDnkGMZ1qL4jWk0W7JztkmZeZKl0E46BOZSxNe7/93N
j5u8qOyxT0+nVAG6tyg1jhVjRFjHEvoAuYCy3ohHySsEcrbSOF6TDhXrelNH/+GL
DBugoMUH8CuFwgagY00FX01rv1/wlKD3KmAORLdQ0VBV4DGle3HoeHco+ZibMD/3
buVvPIyj65OXkIy2oj9wIpN4SCeRpwwfD/ezyhxUpCoKwccvUOiXP+BhIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJOBh1+QjPTBPmKSUuOraLVONrv7MB8GA1UdIwQY
MBaAFBf1dDCxBIqSOonWz6Kjyzv8LxJYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRl9WME1MRUVpcEk2aWRiUG9xUExPX3d2RWxnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8xMjcyNjgtNmNmNS00Njk0LWFlMTEt
ZTA5NDA4YWU0NjY2LzEvazRHSFg1Q005TUUtWXBKUzQ2dG90VTQydV9zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8xMjcyNjgtNmNmNS00Njk0LWFlMTEtZTA5NDA4YWU0NjY2
LzEvRl9WME1MRUVpcEk2aWRiUG9xUExPX3d2RWxnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+vpMA0G
CSqGSIb3DQEBCwUAA4IBAQCAhs0ZcRvG6/mK7b2rKTkwqaHkKts9TiNV5+QMlVgx
7nddu9oPhbDVYG6oLo5Irm5nhuoqghW8zZuchdDybB6TEuydoA5gIa2Xtt7OJfPU
TodVF3ag2uBuFfbaxmowEQxTWwrj2lDTMnHCE8M2DL+xWDAeCyWDD0HKXM3rbk/L
Wiq0j1oOFN4bQ0aqH6TS0QrN+4swl2DUljaukigmk6P0bcf4yt5BI3cMuKlCKomL
H+TcOriME7c6M5SpVv+/CO1/IfYRAMl9z/zWCrcsppt1J6gWGoozSnhixf5dYe/u
1mAG4XykY/X5EODwMLOyEiRs8F3vzyjPmIdvGnfE0qiL
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:47 2025 by rpki-client on console.sobornost.net