Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/phe4BIzSkDqRiDjxV7qzEa9cQ3E.roa
File: phe4BIzSkDqRiDjxV7qzEa9cQ3E.roa (raw, json)
Hash identifier: lOuYqfI/JdtbMzhaaY3DDMSYIo7gNqo59EF/9d3CiZQ=
Subject key identifier: A6:17:B8:04:8C:D2:90:3A:91:88:38:F1:57:BA:B3:11:AF:5C:43:71
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0194258FB578BB3C98CA03DD06F8CC4855B0
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/phe4BIzSkDqRiDjxV7qzEa9cQ3E.roa
Signing time: Thu 02 Jan 2025 05:49:22 +0000
ROA not before: Thu 02 Jan 2025 05:49:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 400040
IP address blocks: 91.244.196.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:b5:78:bb:3c:98:ca:03:dd:06:f8:cc:48:55:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 2 05:49:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a617b8048cd2903a918838f157bab311af5c4371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:34:c1:66:3e:84:25:04:44:52:80:8c:e8:0c:
d5:15:a4:1f:89:22:2d:e0:27:db:84:9a:04:f5:85:
64:cb:67:35:41:01:15:71:b9:7d:69:e9:99:7b:c3:
05:84:b1:ea:b4:17:81:3b:04:2e:02:80:a0:db:b1:
00:c3:6d:dd:4e:48:19:5c:a2:48:76:b2:de:08:7a:
ab:f9:db:c9:11:1a:b9:26:db:12:31:9f:7c:e8:44:
96:c9:ce:87:41:d9:5a:88:db:3c:f5:a3:75:8e:8f:
18:87:57:b7:cf:ca:ca:fe:0e:ff:f0:2d:82:ae:3d:
3b:52:6e:8d:fb:d7:6a:d8:7e:2b:fe:86:e7:17:a2:
ac:36:56:1f:28:14:ca:fe:cf:93:61:24:2d:d5:eb:
ec:78:31:78:a8:fc:40:0b:b0:38:0a:85:6b:a4:ae:
2e:1f:9b:a6:0d:14:5b:f6:0a:97:0b:87:cd:9f:c3:
3f:fe:e9:c8:8e:42:2e:50:2a:bf:e7:ac:8c:c4:4a:
fc:18:88:a0:71:8d:2e:83:4e:0f:47:56:3e:30:d0:
e9:d3:de:f0:42:08:66:e4:c6:93:a3:f1:72:54:73:
cf:5e:0e:52:f2:7c:fa:ef:5e:7b:e8:96:09:4b:08:
77:74:3a:24:8e:0c:0d:43:d9:db:fe:fe:fc:50:d0:
e1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:17:B8:04:8C:D2:90:3A:91:88:38:F1:57:BA:B3:11:AF:5C:43:71
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/phe4BIzSkDqRiDjxV7qzEa9cQ3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.196.0/24
Signature Algorithm: sha256WithRSAEncryption
91:a3:87:b8:e5:b4:89:3d:1e:f9:3d:8e:72:7a:bc:e0:6b:2f:
22:87:83:7f:55:e1:2e:a0:db:06:65:77:f0:e1:31:4a:66:69:
f3:ce:a9:45:50:e2:b6:5a:8e:b3:d2:64:fd:ce:30:0c:10:f4:
72:77:0f:b0:3e:80:e6:3f:d7:03:05:c9:b2:4d:6b:7d:4a:31:
e4:f5:e4:1f:7d:b0:33:11:0e:d4:e2:84:65:7f:fe:c9:bf:b8:
96:19:60:95:c2:9b:e6:41:ab:59:d3:f9:17:69:71:c2:c2:ac:
13:f2:26:41:7b:01:8a:f7:aa:2e:4a:77:4c:37:b3:d7:3f:e4:
5d:e2:e2:07:d3:29:e1:83:88:ef:9f:f8:66:cd:8f:c2:6b:15:
be:7a:e5:a1:51:b4:46:4f:c7:a2:98:5a:1a:8d:c0:54:40:44:
c5:47:b3:66:25:fc:ac:69:a8:2d:31:df:e2:bc:67:e6:b8:af:
92:3f:46:79:40:9b:fb:09:6f:9a:ac:0c:11:e4:b4:84:d4:e1:
38:d2:62:9b:ba:a0:1f:6e:19:69:72:96:65:d3:0e:64:71:41:
fa:47:48:6d:35:af:a5:22:b8:4b:69:d5:43:7e:91:fc:9d:76:
5c:8f:a7:84:02:d4:89:5d:38:2a:58:28:79:ce:c1:18:f2:b4:
01:82:91:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj7V4uzyYygPdBvjMSFWwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjUwMTAyMDU0OTIyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNjE3YjgwNDhjZDI5MDNhOTE4ODM4ZjE1N2JhYjMxMWFmNWM0MzcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6DTBZj6EJQREUoCM6AzVFaQfiSIt
4CfbhJoE9YVky2c1QQEVcbl9aemZe8MFhLHqtBeBOwQuAoCg27EAw23dTkgZXKJI
drLeCHqr+dvJERq5JtsSMZ986ESWyc6HQdlaiNs89aN1jo8Yh1e3z8rK/g7/8C2C
rj07Um6N+9dq2H4r/obnF6KsNlYfKBTK/s+TYSQt1evseDF4qPxAC7A4CoVrpK4u
H5umDRRb9gqXC4fNn8M//unIjkIuUCq/56yMxEr8GIigcY0ug04PR1Y+MNDp097w
Qghm5MaTo/FyVHPPXg5S8nz671576JYJSwh3dDokjgwNQ9nb/v78UNDhRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKYXuASM0pA6kYg48Ve6sxGvXENxMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvcGhlNEJJelNrRHFSaURqeFY3cXpFYTljUTNFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/TEMA0G
CSqGSIb3DQEBCwUAA4IBAQCRo4e45bSJPR75PY5yerzgay8ih4N/VeEuoNsGZXfw
4TFKZmnzzqlFUOK2Wo6z0mT9zjAMEPRydw+wPoDmP9cDBcmyTWt9SjHk9eQffbAz
EQ7U4oRlf/7Jv7iWGWCVwpvmQatZ0/kXaXHCwqwT8iZBewGK96ouSndMN7PXP+Rd
4uIH0ynhg4jvn/hmzY/CaxW+euWhUbRGT8eimFoajcBUQETFR7NmJfysaagtMd/i
vGfmuK+SP0Z5QJv7CW+arAwR5LSE1OE40mKbuqAfbhlpcpZl0w5kcUH6R0htNa+l
IrhLadVDfpH8nXZcj6eEAtSJXTgqWCh5zsEY8rQBgpEF
-----END CERTIFICATE-----
Generated at Tue Jan 21 15:04:05 2025 by rpki-client on console.sobornost.net