Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/V65aigPklzLMXli-Tma7YMiy9ac.roa
File: V65aigPklzLMXli-Tma7YMiy9ac.roa (raw, json)
Hash identifier: 9I1JxRzOP3IIZw3rQmGtzPQg16sopd8Gd0K1+blUv2k=
Subject key identifier: 57:AE:5A:8A:03:E4:97:32:CC:5E:58:BE:4E:66:BB:60:C8:B2:F5:A7
Certificate issuer: /CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Certificate serial: 0194266A02C131C8D29B442E52AB68804C2D
Authority key identifier: 3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/V65aigPklzLMXli-Tma7YMiy9ac.roa
Signing time: Thu 02 Jan 2025 09:47:49 +0000
ROA not before: Thu 02 Jan 2025 09:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198765
IP address blocks: 91.238.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:02:c1:31:c8:d2:9b:44:2e:52:ab:68:80:4c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ac4446ba99b43891ecf1f7fa2cdb02e14a344f3
Validity
Not Before: Jan 2 09:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=57ae5a8a03e49732cc5e58be4e66bb60c8b2f5a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:06:56:4c:ee:61:79:df:2f:23:b3:ed:e1:0d:
97:07:f2:5c:e3:46:20:d0:e9:50:dd:23:ff:c2:9a:
f2:8d:bd:10:b7:8d:4e:32:eb:9b:37:51:56:0d:fe:
9a:9f:2a:04:40:23:c2:9f:51:69:b3:82:d0:d3:2d:
f7:64:8e:3f:e7:fc:bd:06:22:cc:2c:aa:12:b3:26:
90:50:88:d4:52:46:6c:a9:68:f1:47:43:21:cd:74:
77:9b:17:30:59:29:41:3c:81:7f:f1:31:2d:1f:ec:
20:10:b6:81:f3:00:62:54:12:2b:21:c4:59:70:c2:
ac:19:df:1e:6a:ed:0f:c9:0f:36:7b:24:56:b5:c6:
a9:ac:70:d7:22:94:53:22:6f:21:f8:47:75:35:2f:
3d:63:1e:51:b2:85:7c:6c:5a:54:f4:ac:8d:09:e0:
39:cb:39:91:13:7f:2d:50:ea:a9:9b:b3:a1:55:4c:
0e:28:43:5c:15:14:61:4e:52:7f:94:76:de:f2:e7:
14:bf:a1:cc:03:3a:d9:a3:9b:be:2c:c0:cf:8c:8f:
21:bf:01:4b:c3:e2:d3:fa:85:5d:e9:13:24:b8:30:
b4:55:ba:84:83:c2:ec:3a:ef:7c:65:37:10:56:a1:
c5:09:c2:ff:c4:89:8c:06:22:49:a5:c7:12:15:6c:
87:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:AE:5A:8A:03:E4:97:32:CC:5E:58:BE:4E:66:BB:60:C8:B2:F5:A7
X509v3 Authority Key Identifier:
keyid:3A:C4:44:6B:A9:9B:43:89:1E:CF:1F:7F:A2:CD:B0:2E:14:A3:44:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OsREa6mbQ4kezx9_os2wLhSjRPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/V65aigPklzLMXli-Tma7YMiy9ac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/e5c877-a2ee-4c3f-ad5c-02a7f6df6810/1/OsREa6mbQ4kezx9_os2wLhSjRPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.199.0/24
Signature Algorithm: sha256WithRSAEncryption
83:fa:aa:d3:fa:2c:98:a4:be:30:e2:a3:fe:9d:63:a4:0a:95:
15:1e:67:a7:6f:92:15:63:39:5d:b2:ad:19:9f:a4:cb:52:18:
66:7b:fd:a4:9a:55:c5:df:ba:99:d1:53:4b:62:1f:2a:e7:4e:
a9:b9:34:60:d1:4e:a1:18:7c:d2:3e:2a:63:2d:ed:b5:7a:86:
16:d2:8d:70:60:84:3e:7d:10:8c:de:ac:1b:5d:c1:f8:4e:57:
7b:a3:a4:a5:b5:f5:67:ae:75:3c:e8:f3:6a:b5:da:c9:6e:9b:
a3:3f:11:ab:c8:83:00:14:3b:f2:e0:fe:cc:60:3b:52:31:9a:
24:86:4b:fd:95:af:95:98:ad:37:09:e5:57:53:2c:c4:ba:e0:
47:3f:74:3b:91:d2:ed:91:c4:ec:95:74:4b:e2:85:c4:9f:84:
fd:c9:e4:a9:c9:07:47:fb:b7:1d:d4:1d:dc:74:78:06:e8:9d:
36:ad:6a:66:c8:6a:e9:5d:8c:a5:67:b3:ca:af:74:e8:34:df:
c9:48:22:76:ef:0d:5f:b0:16:66:3d:0a:70:52:93:c3:98:d8:
21:a6:71:55:95:44:3d:60:e9:c1:1f:52:e4:4c:a1:5e:4b:3a:
f3:71:73:05:85:1c:48:8c:86:9e:57:0a:50:37:fc:8c:c7:d4:
53:23:83:af
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmagLBMcjSm0QuUqtogEwtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhYzQ0NDZiYTk5YjQzODkxZWNmMWY3ZmEyY2RiMDJlMTRh
MzQ0ZjMwHhcNMjUwMTAyMDk0NzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1N2FlNWE4YTAzZTQ5NzMyY2M1ZTU4YmU0ZTY2YmI2MGM4YjJmNWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwZWTO5hed8vI7Pt4Q2XB/Jc40Yg
0OlQ3SP/wpryjb0Qt41OMuubN1FWDf6anyoEQCPCn1Fps4LQ0y33ZI4/5/y9BiLM
LKoSsyaQUIjUUkZsqWjxR0MhzXR3mxcwWSlBPIF/8TEtH+wgELaB8wBiVBIrIcRZ
cMKsGd8eau0PyQ82eyRWtcaprHDXIpRTIm8h+Ed1NS89Yx5RsoV8bFpU9KyNCeA5
yzmRE38tUOqpm7OhVUwOKENcFRRhTlJ/lHbe8ucUv6HMAzrZo5u+LMDPjI8hvwFL
w+LT+oVd6RMkuDC0VbqEg8LsOu98ZTcQVqHFCcL/xImMBiJJpccSFWyHzwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFFeuWooD5JcyzF5Yvk5mu2DIsvWnMB8GA1UdIwQY
MBaAFDrERGupm0OJHs8ff6LNsC4Uo0TzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3NSRWE2bWJRNGtleng5X29zMndMaFNqUlBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS9lNWM4NzctYTJlZS00YzNmLWFkNWMt
MDJhN2Y2ZGY2ODEwLzEvVjY1YWlnUGtsekxNWGxpLVRtYTdZTWl5OWFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS9lNWM4NzctYTJlZS00YzNmLWFkNWMtMDJhN2Y2ZGY2ODEw
LzEvT3NSRWE2bWJRNGtleng5X29zMndMaFNqUlBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+7HMA0G
CSqGSIb3DQEBCwUAA4IBAQCD+qrT+iyYpL4w4qP+nWOkCpUVHmenb5IVYzldsq0Z
n6TLUhhme/2kmlXF37qZ0VNLYh8q506puTRg0U6hGHzSPipjLe21eoYW0o1wYIQ+
fRCM3qwbXcH4Tld7o6SltfVnrnU86PNqtdrJbpujPxGryIMAFDvy4P7MYDtSMZok
hkv9la+VmK03CeVXUyzEuuBHP3Q7kdLtkcTslXRL4oXEn4T9yeSpyQdH+7cd1B3c
dHgG6J02rWpmyGrpXYylZ7PKr3ToNN/JSCJ27w1fsBZmPQpwUpPDmNghpnFVlUQ9
YOnBH1LkTKFeSzrzcXMFhRxIjIaeVwpQN/yMx9RTI4Ov
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:00 2025 by rpki-client on console.sobornost.net