Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/1-ojoRJbswRkkiGkqXab5Mi6LHY.roa
File: 1-ojoRJbswRkkiGkqXab5Mi6LHY.roa (raw, json)
Hash identifier: 60oY4GGKsVQvbVXZplutdFLjGZggdXVeIQnzzP1SLeY=
Subject key identifier: D7:EA:23:A1:12:5B:B3:04:64:92:21:A4:A9:76:9B:E4:C8:BA:2C:76
Certificate issuer: /CN=038af86795417a3584d616375209a72efee2462b
Certificate serial: 01942826632D0F01E230AEA03064F976C973
Authority key identifier: 03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/1-ojoRJbswRkkiGkqXab5Mi6LHY.roa
Signing time: Thu 02 Jan 2025 17:53:11 +0000
ROA not before: Thu 02 Jan 2025 17:53:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5400
IP address blocks: 91.142.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:63:2d:0f:01:e2:30:ae:a0:30:64:f9:76:c9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=038af86795417a3584d616375209a72efee2462b
Validity
Not Before: Jan 2 17:53:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7ea23a1125bb304649221a4a9769be4c8ba2c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b6:ac:12:2d:a2:1a:c7:93:b3:7b:39:56:ff:
25:76:c7:b2:d9:5b:d0:f1:be:4f:51:6b:3f:4f:ca:
46:00:17:f0:77:e3:3b:93:0d:6d:98:3b:12:3b:a0:
56:73:6b:a8:40:9e:d4:e9:22:10:e8:f3:11:f3:f1:
5d:04:0e:a8:b7:8d:2a:c2:3b:a3:30:2d:a8:79:71:
be:02:2d:b1:23:ed:d0:c5:f3:3e:63:f5:f1:c8:f5:
ee:6f:82:c2:91:4a:bd:d8:d3:9c:f4:00:5f:f8:f8:
b4:b5:10:c8:f8:6c:ac:53:de:0d:70:19:39:4a:82:
5c:d7:05:36:f7:ed:65:30:dc:28:57:9d:49:1a:29:
ec:7f:d5:2a:62:35:cf:38:26:35:64:89:a2:74:74:
03:e7:a5:16:6e:e9:85:44:f8:fd:53:8c:dd:d2:bd:
a3:52:b5:64:65:29:fa:4a:e4:7a:f0:e4:6e:ee:cc:
76:08:2b:a4:91:be:95:9e:0a:4f:43:40:69:30:03:
e2:1c:57:59:42:c0:61:c4:9f:cc:5c:e2:a9:64:23:
87:b6:94:77:d1:6c:d9:6a:af:b6:92:08:51:78:40:
5e:d3:b6:93:28:a1:34:4f:58:9e:98:a0:5e:92:fb:
ca:ad:4d:75:af:c0:c6:f2:90:80:84:e2:f4:c0:c2:
cd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:EA:23:A1:12:5B:B3:04:64:92:21:A4:A9:76:9B:E4:C8:BA:2C:76
X509v3 Authority Key Identifier:
keyid:03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/1-ojoRJbswRkkiGkqXab5Mi6LHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.128.0/24
Signature Algorithm: sha256WithRSAEncryption
66:ad:ee:59:88:8d:73:47:eb:7a:6d:9f:bd:50:60:d9:0d:56:
56:2f:11:1e:9e:7d:02:f0:fc:93:91:a4:22:1b:86:94:c0:06:
3b:49:99:24:4c:ef:2d:d3:d2:9a:b6:3a:ad:a7:34:50:58:4f:
95:75:bc:21:2a:81:cb:34:fb:55:31:4d:a7:b1:32:07:b0:67:
8d:c6:95:98:46:e1:0c:d3:60:21:4b:24:51:ca:cb:7f:40:7c:
22:42:60:b5:3b:ad:64:bb:36:0d:4a:f5:66:8e:4d:b7:e1:27:
48:f5:11:d6:b4:a7:ef:05:a9:9d:77:98:46:a6:fa:4a:63:f5:
87:64:ae:e8:bb:b5:f8:be:5e:93:1e:a4:5c:75:65:9e:e4:d3:
ba:3f:f4:7b:5a:2e:9b:32:8d:d4:73:e8:c7:c4:2b:1a:df:55:
0b:cb:66:b4:88:48:ad:0c:2f:2b:f4:c5:49:b0:24:1c:4a:63:
b8:98:f8:a7:96:5b:2a:8d:98:db:68:19:d5:e1:c0:7a:4d:0a:
98:84:51:15:3b:5a:39:03:cd:ac:f5:ff:83:21:f8:2b:af:59:
1c:67:c6:8b:41:06:e3:71:44:b6:2c:05:c8:b1:dc:4c:c2:b3:
50:60:7a:59:51:47:ca:d2:da:6e:72:b1:c8:31:27:c8:86:86:
ff:d4:94:7c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQoJmMtDwHiMK6gMGT5dslzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzOGFmODY3OTU0MTdhMzU4NGQ2MTYzNzUyMDlhNzJlZmVl
MjQ2MmIwHhcNMjUwMTAyMTc1MzExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkN2VhMjNhMTEyNWJiMzA0NjQ5MjIxYTRhOTc2OWJlNGM4YmEyYzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7asEi2iGseTs3s5Vv8ldsey2VvQ
8b5PUWs/T8pGABfwd+M7kw1tmDsSO6BWc2uoQJ7U6SIQ6PMR8/FdBA6ot40qwjuj
MC2oeXG+Ai2xI+3QxfM+Y/XxyPXub4LCkUq92NOc9ABf+Pi0tRDI+GysU94NcBk5
SoJc1wU29+1lMNwoV51JGinsf9UqYjXPOCY1ZImidHQD56UWbumFRPj9U4zd0r2j
UrVkZSn6SuR68ORu7sx2CCukkb6VngpPQ0BpMAPiHFdZQsBhxJ/MXOKpZCOHtpR3
0WzZaq+2kghReEBe07aTKKE0T1iemKBekvvKrU11r8DG8pCAhOL0wMLNAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNfqI6ESW7MEZJIhpKl2m+TIuix2MB8GA1UdIwQY
MBaAFAOK+GeVQXo1hNYWN1IJpy7+4kYrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTRyNFo1VkJlaldFMWhZM1VnbW5MdjdpUmlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi81N2U0MTktNDJmNC00ZDhjLWI2YjQt
NDMxZjI3YTYyZWQ4LzEvMS1vam9SSmJzd1Jra2lHa3FYYWI1TWk2TEhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi81N2U0MTktNDJmNC00ZDhjLWI2YjQtNDMxZjI3YTYyZWQ4
LzEvQTRyNFo1VkJlaldFMWhZM1VnbW5MdjdpUmlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW46AMA0G
CSqGSIb3DQEBCwUAA4IBAQBmre5ZiI1zR+t6bZ+9UGDZDVZWLxEenn0C8PyTkaQi
G4aUwAY7SZkkTO8t09KatjqtpzRQWE+VdbwhKoHLNPtVMU2nsTIHsGeNxpWYRuEM
02AhSyRRyst/QHwiQmC1O61kuzYNSvVmjk234SdI9RHWtKfvBamdd5hGpvpKY/WH
ZK7ou7X4vl6THqRcdWWe5NO6P/R7Wi6bMo3Uc+jHxCsa31ULy2a0iEitDC8r9MVJ
sCQcSmO4mPinllsqjZjbaBnV4cB6TQqYhFEVO1o5A82s9f+DIfgrr1kcZ8aLQQbj
cUS2LAXIsdxMwrNQYHpZUUfK0tpucrHIMSfIhob/1JR8
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:02 2025 by rpki-client on console.sobornost.net