Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/Z9H2rikLSuyuU-ikn9teDCmjdUc.roa
File: Z9H2rikLSuyuU-ikn9teDCmjdUc.roa (raw, json)
Hash identifier: cRtnYLPeRJbchnmn6bYlPaowZvCX5uRJgotf5z/cank=
Subject key identifier: 67:D1:F6:AE:29:0B:4A:EC:AE:53:E8:A4:9F:DB:5E:0C:29:A3:75:47
Certificate issuer: /CN=1e00a55f9d7b75396b4bfa13e78960a5a12f4ef5
Certificate serial: 019426D94824C0FA36E326794C3B50316685
Authority key identifier: 1E:00:A5:5F:9D:7B:75:39:6B:4B:FA:13:E7:89:60:A5:A1:2F:4E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/Z9H2rikLSuyuU-ikn9teDCmjdUc.roa
Signing time: Thu 02 Jan 2025 11:49:21 +0000
ROA not before: Thu 02 Jan 2025 11:49:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50673
IP address blocks: 91.200.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:48:24:c0:fa:36:e3:26:79:4c:3b:50:31:66:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e00a55f9d7b75396b4bfa13e78960a5a12f4ef5
Validity
Not Before: Jan 2 11:49:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=67d1f6ae290b4aecae53e8a49fdb5e0c29a37547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:92:a4:8b:16:af:8a:70:e3:12:a6:97:93:
bd:69:73:df:d4:4e:58:da:3f:86:32:aa:2c:61:49:
8d:f4:34:bb:47:fe:b1:de:c9:4b:21:f8:c2:1c:e4:
f0:9a:1e:ec:93:cb:7b:aa:65:7c:d3:ae:18:fe:50:
2a:7a:e5:54:3e:ab:24:f6:da:6f:2d:fb:e6:50:03:
13:13:85:0a:7e:3d:6c:02:65:8e:a0:56:de:e6:bc:
1e:e7:4d:20:a6:da:81:fd:a3:b3:2f:8c:2b:38:ce:
70:24:4a:52:7b:d8:8f:73:33:ce:57:c8:3e:f3:62:
ae:67:df:e7:bb:36:78:42:03:a3:39:9e:d7:a9:2d:
e7:ff:b6:52:b4:dd:3f:9e:fb:0c:dd:0b:26:ae:69:
bb:bb:ed:72:50:c3:46:fd:48:19:28:02:b4:2c:49:
17:2e:83:fc:a3:a9:67:11:24:90:16:93:02:90:c3:
72:66:e9:eb:4d:1a:ea:2c:be:db:76:bc:49:5e:76:
d7:63:92:c8:e0:41:8e:00:17:6f:21:6d:21:1f:17:
89:22:5f:e5:d8:df:62:86:33:a3:94:c8:45:8c:80:
a8:e4:19:fc:31:d3:9e:43:11:4d:62:72:7f:ee:bb:
55:3c:2e:d9:59:8a:a2:8d:07:a4:86:ab:7c:f7:83:
31:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D1:F6:AE:29:0B:4A:EC:AE:53:E8:A4:9F:DB:5E:0C:29:A3:75:47
X509v3 Authority Key Identifier:
keyid:1E:00:A5:5F:9D:7B:75:39:6B:4B:FA:13:E7:89:60:A5:A1:2F:4E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HgClX517dTlrS_oT54lgpaEvTvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/Z9H2rikLSuyuU-ikn9teDCmjdUc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/681526-863d-4698-b125-cf7edf3f5eac/1/HgClX517dTlrS_oT54lgpaEvTvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.147.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:07:18:10:99:a7:91:f2:55:ad:1c:f3:bb:79:f7:6a:7e:f8:
92:9e:c0:10:17:62:ac:6a:eb:68:7c:36:80:5e:c8:53:46:1d:
21:75:33:ea:15:0d:11:20:bf:fe:7f:8b:af:33:a6:ef:49:40:
77:d9:d8:18:7a:5a:88:bf:a0:43:5b:7e:b8:c7:d7:5c:db:ce:
05:01:54:24:4c:a7:39:53:e8:92:68:9b:8b:49:17:ec:52:28:
f5:b3:49:01:f8:99:9d:c2:5e:46:aa:3f:a1:fd:7b:0d:ee:9d:
70:65:3d:4f:7a:58:cd:16:78:8a:d0:53:1e:86:87:27:1f:78:
f9:5f:d2:69:ce:6b:d5:66:c6:07:43:58:5c:da:41:7f:16:e6:
f8:2a:27:f8:98:40:f4:9b:83:21:24:2c:ee:6a:ac:c5:80:7f:
a8:77:2d:63:be:dd:35:74:61:23:54:41:81:3b:d6:4d:c7:1a:
76:89:bd:fe:fd:e5:98:b3:8f:7a:64:f4:3a:91:58:d3:5d:ea:
b1:57:e8:7b:20:6f:b0:4a:8a:27:81:6f:ea:27:13:e0:5d:78:
12:89:a7:e7:3d:99:30:5d:ba:2a:cc:ec:66:31:b6:1f:76:64:
ac:26:56:2f:21:68:ce:ba:7e:cb:a1:c7:dc:20:6a:3b:10:28:
cc:f4:ef:3d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2UgkwPo24yZ5TDtQMWaFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFlMDBhNTVmOWQ3Yjc1Mzk2YjRiZmExM2U3ODk2MGE1YTEy
ZjRlZjUwHhcNMjUwMTAyMTE0OTIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2N2QxZjZhZTI5MGI0YWVjYWU1M2U4YTQ5ZmRiNWUwYzI5YTM3NTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+SSpIsWr4pw4xKml5O9aXPf1E5Y
2j+GMqosYUmN9DS7R/6x3slLIfjCHOTwmh7sk8t7qmV8064Y/lAqeuVUPqsk9tpv
LfvmUAMTE4UKfj1sAmWOoFbe5rwe500gptqB/aOzL4wrOM5wJEpSe9iPczPOV8g+
82KuZ9/nuzZ4QgOjOZ7XqS3n/7ZStN0/nvsM3Qsmrmm7u+1yUMNG/UgZKAK0LEkX
LoP8o6lnESSQFpMCkMNyZunrTRrqLL7bdrxJXnbXY5LI4EGOABdvIW0hHxeJIl/l
2N9ihjOjlMhFjICo5Bn8MdOeQxFNYnJ/7rtVPC7ZWYqijQekhqt894MxcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFGfR9q4pC0rsrlPopJ/bXgwpo3VHMB8GA1UdIwQY
MBaAFB4ApV+de3U5a0v6E+eJYKWhL071MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSGdDbFg1MTdkVGxyU19vVDU0bGdwYUV2VHZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS82ODE1MjYtODYzZC00Njk4LWIxMjUt
Y2Y3ZWRmM2Y1ZWFjLzEvWjlIMnJpa0xTdXl1VS1pa245dGVEQ21qZFVjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS82ODE1MjYtODYzZC00Njk4LWIxMjUtY2Y3ZWRmM2Y1ZWFj
LzEvSGdDbFg1MTdkVGxyU19vVDU0bGdwYUV2VHZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8iTMA0G
CSqGSIb3DQEBCwUAA4IBAQBeBxgQmaeR8lWtHPO7efdqfviSnsAQF2KsautofDaA
XshTRh0hdTPqFQ0RIL/+f4uvM6bvSUB32dgYelqIv6BDW364x9dc284FAVQkTKc5
U+iSaJuLSRfsUij1s0kB+Jmdwl5Gqj+h/XsN7p1wZT1PeljNFniK0FMehocnH3j5
X9JpzmvVZsYHQ1hc2kF/Fub4Kif4mED0m4MhJCzuaqzFgH+ody1jvt01dGEjVEGB
O9ZNxxp2ib3+/eWYs496ZPQ6kVjTXeqxV+h7IG+wSoongW/qJxPgXXgSiafnPZkw
XboqzOxmMbYfdmSsJlYvIWjOun7LocfcIGo7ECjM9O89
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:12 2025 by rpki-client on console.sobornost.net