Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/JXlTdhSRTj5ed6JsXH8jc65Ou3M.roa
File: JXlTdhSRTj5ed6JsXH8jc65Ou3M.roa (raw, json)
Hash identifier: ddm9bvtQw1cVvC7zNZuu5Y38UnapRIQ8ZhO6Ib5Ks0o=
Subject key identifier: 25:79:53:76:14:91:4E:3E:5E:77:A2:6C:5C:7F:23:73:AE:4E:BB:73
Certificate issuer: /CN=9426d309d0db02df1d7e04bbb39313bd1df13358
Certificate serial: 01942745BA911E1E0D52694ADAABE30C0AD2
Authority key identifier: 94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/JXlTdhSRTj5ed6JsXH8jc65Ou3M.roa
Signing time: Thu 02 Jan 2025 13:47:48 +0000
ROA not before: Thu 02 Jan 2025 13:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42934
IP address blocks: 91.209.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:45:ba:91:1e:1e:0d:52:69:4a:da:ab:e3:0c:0a:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9426d309d0db02df1d7e04bbb39313bd1df13358
Validity
Not Before: Jan 2 13:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2579537614914e3e5e77a26c5c7f2373ae4ebb73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:14:f3:1f:02:46:e0:ca:6c:1b:ce:35:9b:ce:
80:a8:53:bf:d6:6b:62:90:e8:58:4e:6c:91:b9:f3:
c4:03:65:8f:9c:be:92:ff:10:09:f1:a5:e9:4c:87:
2c:2d:45:99:d8:5f:4f:4b:0f:75:0f:d5:1c:9d:4d:
91:c5:73:28:22:ea:0c:ae:14:75:c7:3e:6f:23:2a:
ee:25:97:ef:c5:13:47:02:97:ad:11:b2:58:79:1b:
1b:2c:4b:96:7b:30:c4:ec:e2:38:c0:ba:a3:eb:f2:
35:1d:81:b9:a7:15:2a:4d:3a:8d:6a:eb:12:ca:79:
f9:c5:d3:7f:6d:02:c3:f3:9a:5f:97:02:d8:2c:7c:
c8:cf:97:7e:27:43:57:af:9a:f5:95:45:20:da:89:
ac:53:47:e2:46:dc:00:b7:ea:bd:db:0c:ff:10:97:
38:9c:34:e3:01:cd:38:f0:2f:8b:86:c4:09:79:ec:
32:3c:a5:3a:65:28:61:11:b7:a0:ba:5b:26:f3:cc:
ff:3e:23:ea:35:80:29:ba:36:b1:11:10:3d:d8:c5:
b6:33:b7:38:e9:b1:b7:a6:bc:93:51:4e:bf:0e:3e:
4c:f1:5e:2f:4f:8d:0a:fa:3e:e0:8b:cd:64:84:ce:
f0:f0:f2:43:e8:1b:36:9a:c2:79:3b:2c:6a:22:40:
ac:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:79:53:76:14:91:4E:3E:5E:77:A2:6C:5C:7F:23:73:AE:4E:BB:73
X509v3 Authority Key Identifier:
keyid:94:26:D3:09:D0:DB:02:DF:1D:7E:04:BB:B3:93:13:BD:1D:F1:33:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lCbTCdDbAt8dfgS7s5MTvR3xM1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/JXlTdhSRTj5ed6JsXH8jc65Ou3M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/91431a-b50d-4d50-a6d6-f17f095dd3af/1/lCbTCdDbAt8dfgS7s5MTvR3xM1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.255.0/24
Signature Algorithm: sha256WithRSAEncryption
22:70:ca:b1:51:e9:38:06:8e:33:a6:77:05:db:a7:7c:80:a5:
d6:fa:0c:80:1b:4f:1e:0d:d3:7a:55:55:f5:24:a0:13:76:12:
b2:d1:ab:0b:7f:21:3c:55:b1:9a:bc:9d:9c:cb:46:31:1e:5e:
2d:dd:21:ce:10:b8:c5:0f:b7:b2:f4:0a:af:5f:5f:78:ea:c4:
d6:57:58:8d:34:ae:c8:0a:68:cd:d0:d6:71:66:51:bf:ca:01:
35:30:e0:d8:93:11:5a:54:f8:d0:56:0b:58:7a:cb:e0:2f:9a:
d9:1e:df:fb:d0:16:39:da:cb:14:a6:5c:4f:6d:f8:fd:9a:50:
70:83:95:86:61:0e:d5:32:66:96:32:98:1d:8b:30:42:79:9a:
bd:61:f1:36:ee:b1:d9:32:b6:59:6f:dd:30:da:35:b8:f7:09:
87:91:33:36:f6:71:13:01:0f:ee:b6:47:ff:b2:59:8f:06:dc:
0a:b2:7c:24:f2:b7:60:42:71:13:10:5e:71:8d:a5:8d:38:03:
bd:12:69:7e:3b:fe:9e:1f:c8:32:aa:bb:d5:f4:a6:92:3e:f7:
e3:7a:3a:0c:0d:44:83:56:e5:60:2d:a4:91:00:d1:54:60:e7:
64:1c:36:23:41:3e:8b:1c:5d:70:1b:66:ff:ad:19:bf:46:65:
54:de:aa:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnRbqRHh4NUmlK2qvjDArSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MjZkMzA5ZDBkYjAyZGYxZDdlMDRiYmIzOTMxM2JkMWRm
MTMzNTgwHhcNMjUwMTAyMTM0NzQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNTc5NTM3NjE0OTE0ZTNlNWU3N2EyNmM1YzdmMjM3M2FlNGViYjczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBTzHwJG4MpsG841m86AqFO/1mti
kOhYTmyRufPEA2WPnL6S/xAJ8aXpTIcsLUWZ2F9PSw91D9UcnU2RxXMoIuoMrhR1
xz5vIyruJZfvxRNHApetEbJYeRsbLEuWezDE7OI4wLqj6/I1HYG5pxUqTTqNausS
ynn5xdN/bQLD85pflwLYLHzIz5d+J0NXr5r1lUUg2omsU0fiRtwAt+q92wz/EJc4
nDTjAc048C+LhsQJeewyPKU6ZShhEbegulsm88z/PiPqNYApujaxERA92MW2M7c4
6bG3pryTUU6/Dj5M8V4vT40K+j7gi81khM7w8PJD6Bs2msJ5OyxqIkCsNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCV5U3YUkU4+XneibFx/I3OuTrtzMB8GA1UdIwQY
MBaAFJQm0wnQ2wLfHX4Eu7OTE70d8TNYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbENiVENkRGJBdDhkZmdTN3M1TVR2UjN4TTFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi85MTQzMWEtYjUwZC00ZDUwLWE2ZDYt
ZjE3ZjA5NWRkM2FmLzEvSlhsVGRoU1JUajVlZDZKc1hIOGpjNjVPdTNNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi85MTQzMWEtYjUwZC00ZDUwLWE2ZDYtZjE3ZjA5NWRkM2Fm
LzEvbENiVENkRGJBdDhkZmdTN3M1TVR2UjN4TTFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9H/MA0G
CSqGSIb3DQEBCwUAA4IBAQAicMqxUek4Bo4zpncF26d8gKXW+gyAG08eDdN6VVX1
JKATdhKy0asLfyE8VbGavJ2cy0YxHl4t3SHOELjFD7ey9AqvX1946sTWV1iNNK7I
CmjN0NZxZlG/ygE1MODYkxFaVPjQVgtYesvgL5rZHt/70BY52ssUplxPbfj9mlBw
g5WGYQ7VMmaWMpgdizBCeZq9YfE27rHZMrZZb90w2jW49wmHkTM29nETAQ/utkf/
slmPBtwKsnwk8rdgQnETEF5xjaWNOAO9Eml+O/6eH8gyqrvV9KaSPvfjejoMDUSD
VuVgLaSRANFUYOdkHDYjQT6LHF1wG2b/rRm/RmVU3qqk
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:29:24 2025 by rpki-client on console.sobornost.net