Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/s00N6hW6L--i71YE3ZHEvxi0_Kc.roa
File: s00N6hW6L--i71YE3ZHEvxi0_Kc.roa (raw, json)
Hash identifier: XG+OrgRZcNPrP7V5QMdswK7GDBHHfoBcFSN/3uR8oa0=
Subject key identifier: B3:4D:0D:EA:15:BA:2F:EF:A2:EF:56:04:DD:91:C4:BF:18:B4:FC:A7
Certificate issuer: /CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Certificate serial: 0194266BDCD2A34124F7DBA39798D2C589B1
Authority key identifier: 60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/s00N6hW6L--i71YE3ZHEvxi0_Kc.roa
Signing time: Thu 02 Jan 2025 09:49:50 +0000
ROA not before: Thu 02 Jan 2025 09:49:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51903
IP address blocks: 91.221.124.0/23 maxlen: 23
194.106.218.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:dc:d2:a3:41:24:f7:db:a3:97:98:d2:c5:89:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607d7b0e5fe6d69b4d797dec3d112c47b8a19224
Validity
Not Before: Jan 2 09:49:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b34d0dea15ba2fefa2ef5604dd91c4bf18b4fca7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b9:cc:5b:ab:8a:0e:e8:da:f1:e6:22:ec:e0:
40:16:82:be:7c:15:4c:f2:d3:6b:f1:52:e7:d4:da:
2f:c4:76:21:de:5c:fe:d0:f7:97:cb:7d:4f:56:f4:
d2:96:82:c0:d1:e7:84:d1:64:f1:56:9b:e1:63:49:
70:0c:2b:62:59:00:4b:e0:93:af:03:e3:f1:00:5f:
c3:2d:31:a0:c3:f3:3d:de:42:22:f6:3c:8a:15:6e:
55:ed:49:03:af:ee:47:90:31:68:ee:9a:38:0b:20:
8c:1b:07:7d:c7:af:6f:e7:aa:2e:93:8c:1e:21:ec:
4e:2a:04:b4:14:d2:54:30:d9:a0:3b:45:6c:1c:b7:
e6:5e:ca:20:2d:42:80:55:07:a4:25:95:ef:e3:33:
07:19:73:3f:a7:2b:0e:75:ac:f0:03:98:5c:cd:95:
d1:1e:c7:00:2e:89:4b:6a:39:3b:48:e2:ab:5c:d3:
ef:57:c2:40:ff:c6:83:57:05:51:07:3f:33:a2:4b:
04:68:dc:43:fa:78:da:78:73:64:c0:a5:7e:f5:86:
18:d7:3e:55:77:a6:5f:ef:32:25:87:6c:6e:97:17:
5e:fa:fb:94:19:3f:1e:57:cc:06:8b:6f:1c:1a:a5:
44:ea:26:b3:a5:c9:5b:3a:31:6d:bc:2e:ec:41:9a:
27:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:4D:0D:EA:15:BA:2F:EF:A2:EF:56:04:DD:91:C4:BF:18:B4:FC:A7
X509v3 Authority Key Identifier:
keyid:60:7D:7B:0E:5F:E6:D6:9B:4D:79:7D:EC:3D:11:2C:47:B8:A1:92:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YH17Dl_m1ptNeX3sPREsR7ihkiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/s00N6hW6L--i71YE3ZHEvxi0_Kc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8ec60b-9cc1-4e5e-9f2e-ae05ae1291f2/1/YH17Dl_m1ptNeX3sPREsR7ihkiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.221.124.0/23
194.106.218.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:ff:dd:d3:82:f8:56:38:21:55:e7:da:a3:d8:b3:6a:74:49:
b8:f8:fa:3b:44:3c:2a:aa:6b:89:57:51:98:69:cc:5a:0e:a9:
71:e0:17:24:6c:55:95:d6:8b:5a:0a:3b:65:c6:25:fb:75:bd:
61:e0:a0:ff:2f:e2:b6:a0:e6:f4:99:bc:29:01:13:81:fc:04:
8b:29:8c:92:07:f6:b2:be:45:e2:60:c9:ba:0a:ee:67:f1:22:
2a:56:39:43:a2:41:2d:9b:1a:8c:c4:ec:c7:8e:5b:71:36:d2:
47:a5:74:3d:9d:60:eb:4a:58:96:e0:e6:f3:61:68:62:6e:e3:
09:e4:01:8b:75:e8:3a:c3:28:db:2f:fb:fb:97:c9:3c:d0:25:
f9:49:ac:30:22:72:14:41:b3:28:3c:98:e7:3d:d0:1d:08:e4:
30:41:aa:c5:00:5b:47:75:73:42:ab:a8:f4:dd:13:d0:35:c6:
71:b2:5a:8c:82:e3:4f:34:ee:b8:d7:56:d8:b3:18:fb:e4:5b:
36:a8:ab:b0:f1:20:b7:11:ac:1e:ca:4c:40:88:23:57:30:87:
ed:d0:60:1f:24:95:78:69:32:e1:f8:14:1f:1f:d9:48:e8:0c:
8b:55:ee:a4:c9:9e:43:ce:be:0c:c3:d5:63:3a:17:8b:3a:67:
35:02:1d:01
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQma9zSo0Ek99ujl5jSxYmxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwN2Q3YjBlNWZlNmQ2OWI0ZDc5N2RlYzNkMTEyYzQ3Yjhh
MTkyMjQwHhcNMjUwMTAyMDk0OTUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiMzRkMGRlYTE1YmEyZmVmYTJlZjU2MDRkZDkxYzRiZjE4YjRmY2E3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LnMW6uKDuja8eYi7OBAFoK+fBVM
8tNr8VLn1NovxHYh3lz+0PeXy31PVvTSloLA0eeE0WTxVpvhY0lwDCtiWQBL4JOv
A+PxAF/DLTGgw/M93kIi9jyKFW5V7UkDr+5HkDFo7po4CyCMGwd9x69v56ouk4we
IexOKgS0FNJUMNmgO0VsHLfmXsogLUKAVQekJZXv4zMHGXM/pysOdazwA5hczZXR
HscALolLajk7SOKrXNPvV8JA/8aDVwVRBz8zoksEaNxD+njaeHNkwKV+9YYY1z5V
d6Zf7zIlh2xulxde+vuUGT8eV8wGi28cGqVE6iazpclbOjFtvC7sQZonZQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLNNDeoVui/vou9WBN2RxL8YtPynMB8GA1UdIwQY
MBaAFGB9ew5f5tabTXl97D0RLEe4oZIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWUgxN0RsX20xcHROZVgzc1BSRXNSN2loa2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ZWM2MGItOWNjMS00ZTVlLTlmMmUt
YWUwNWFlMTI5MWYyLzEvczAwTjZoVzZMLS1pNzFZRTNaSEV2eGkwX0tjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS84ZWM2MGItOWNjMS00ZTVlLTlmMmUtYWUwNWFlMTI5MWYy
LzEvWUgxN0RsX20xcHROZVgzc1BSRXNSN2loa2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBW918AwQB
wmraMA0GCSqGSIb3DQEBCwUAA4IBAQCK/93TgvhWOCFV59qj2LNqdEm4+Po7RDwq
qmuJV1GYacxaDqlx4BckbFWV1otaCjtlxiX7db1h4KD/L+K2oOb0mbwpAROB/ASL
KYySB/ayvkXiYMm6Cu5n8SIqVjlDokEtmxqMxOzHjltxNtJHpXQ9nWDrSliW4Obz
YWhibuMJ5AGLdeg6wyjbL/v7l8k80CX5SawwInIUQbMoPJjnPdAdCOQwQarFAFtH
dXNCq6j03RPQNcZxslqMguNPNO6411bYsxj75Fs2qKuw8SC3EaweykxAiCNXMIft
0GAfJJV4aTLh+BQfH9lI6AyLVe6kyZ5Dzr4Mw9VjOheLOmc1Ah0B
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:00 2025 by rpki-client on console.sobornost.net