Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/3b59d5-602d-4351-96bc-a108649d51e2/1/yiSfs72_nEyzYSAodCILSS2FNUg.roa
File: yiSfs72_nEyzYSAodCILSS2FNUg.roa (raw, json)
Hash identifier: S9gHpNvUCJD2H4bcxuT5WWB4Uck7rHXNRIxCLUlb2hE=
Subject key identifier: CA:24:9F:B3:BD:BF:9C:4C:B3:61:20:28:74:22:0B:49:2D:85:35:48
Certificate issuer: /CN=5061754f7689169f6a15065095472672ba2b4589
Certificate serial: 019425FDA06EF23843B645EF901E2CFC961E
Authority key identifier: 50:61:75:4F:76:89:16:9F:6A:15:06:50:95:47:26:72:BA:2B:45:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UGF1T3aJFp9qFQZQlUcmcrorRYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/3b59d5-602d-4351-96bc-a108649d51e2/1/yiSfs72_nEyzYSAodCILSS2FNUg.roa
Signing time: Thu 02 Jan 2025 07:49:26 +0000
ROA not before: Thu 02 Jan 2025 07:49:26 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57058
IP address blocks: 91.230.106.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:a0:6e:f2:38:43:b6:45:ef:90:1e:2c:fc:96:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5061754f7689169f6a15065095472672ba2b4589
Validity
Not Before: Jan 2 07:49:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ca249fb3bdbf9c4cb361202874220b492d853548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d3:6f:ee:20:60:b0:6b:29:0b:83:38:c7:9b:
a3:31:db:6f:f3:36:8d:8b:40:b1:59:bc:09:f4:52:
bf:48:80:53:90:fd:a5:02:5b:bc:f1:7d:20:a7:eb:
09:f0:99:1b:a4:ea:81:d0:01:19:aa:84:71:74:b4:
3f:7e:dc:c2:5e:7f:4a:be:cd:c2:22:2e:f2:5b:e2:
dd:c5:66:c6:30:c6:6f:be:f4:65:ec:ea:4a:7d:b4:
9d:cd:f2:0d:8d:c0:60:4a:57:e4:e1:c1:7b:ba:e9:
d6:71:9a:db:4c:f9:a6:14:5e:f4:39:fe:aa:53:ca:
ad:8a:ab:46:b8:61:df:d5:95:21:5c:54:f2:21:22:
68:c8:fe:80:6b:6d:5a:13:b1:41:ea:f7:96:02:4b:
d6:23:d8:77:5d:32:bb:97:51:28:c5:45:37:e7:b1:
6f:3d:01:6e:41:7b:f4:65:b8:b4:a2:07:63:3e:ba:
84:29:dd:c3:91:7e:5f:1b:7c:f2:c2:fc:a9:f0:92:
37:d4:23:12:bd:9a:5a:71:cd:d4:2f:72:a7:d9:0d:
65:8e:25:44:10:4f:f6:69:29:58:7a:a3:6c:6d:72:
e9:d0:9e:b6:85:a7:b2:f0:9e:0f:f6:87:51:bf:51:
82:81:4f:8c:85:e4:bb:00:b6:d4:13:2e:60:9a:a9:
47:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:24:9F:B3:BD:BF:9C:4C:B3:61:20:28:74:22:0B:49:2D:85:35:48
X509v3 Authority Key Identifier:
keyid:50:61:75:4F:76:89:16:9F:6A:15:06:50:95:47:26:72:BA:2B:45:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UGF1T3aJFp9qFQZQlUcmcrorRYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3b59d5-602d-4351-96bc-a108649d51e2/1/yiSfs72_nEyzYSAodCILSS2FNUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/3b59d5-602d-4351-96bc-a108649d51e2/1/UGF1T3aJFp9qFQZQlUcmcrorRYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.106.0/24
Signature Algorithm: sha256WithRSAEncryption
74:88:b8:55:fc:d8:dd:70:55:90:ec:ac:81:13:52:8a:db:17:
96:e6:29:d7:46:b3:65:18:c6:7c:6d:71:5b:51:a0:38:95:7d:
c8:15:87:68:47:45:14:dc:82:d0:63:91:fa:ce:6a:92:f9:12:
bc:fc:b1:4b:1b:a0:99:94:f6:a6:94:3b:3d:8d:93:47:64:fb:
56:66:0a:b4:8b:16:b6:cf:b1:2a:b6:61:89:92:fe:15:fc:1d:
46:e3:e8:ad:83:59:d9:f2:82:1f:77:17:db:8e:e8:a0:8c:ca:
7c:f3:ce:3c:6c:ee:6a:f5:83:ec:87:e5:e9:b3:3b:2b:74:86:
e3:2d:a9:3d:05:ef:80:64:ca:ac:ff:06:a3:e2:1d:8b:f7:50:
5b:88:db:22:22:40:6f:03:86:44:c6:45:78:cf:a4:f3:a7:c5:
bc:fb:1c:5b:60:11:38:ce:85:79:57:28:d0:75:0c:11:56:94:
59:d5:e4:4c:8c:c0:4a:3a:54:62:aa:82:00:f2:e2:e7:1b:7e:
05:51:96:78:b8:bf:1c:05:eb:e5:4d:6b:d8:36:32:3e:50:6e:
28:9c:ab:9a:53:4b:06:9b:60:34:49:05:39:fe:8a:4d:57:23:
70:1b:39:ed:02:6d:14:26:e3:9e:71:45:9b:97:36:cc:46:ec:
1e:91:c3:60
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/aBu8jhDtkXvkB4s/JYeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNjE3NTRmNzY4OTE2OWY2YTE1MDY1MDk1NDcyNjcyYmEy
YjQ1ODkwHhcNMjUwMTAyMDc0OTI2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYTI0OWZiM2JkYmY5YzRjYjM2MTIwMjg3NDIyMGI0OTJkODUzNTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmNNv7iBgsGspC4M4x5ujMdtv8zaN
i0CxWbwJ9FK/SIBTkP2lAlu88X0gp+sJ8JkbpOqB0AEZqoRxdLQ/ftzCXn9Kvs3C
Ii7yW+LdxWbGMMZvvvRl7OpKfbSdzfINjcBgSlfk4cF7uunWcZrbTPmmFF70Of6q
U8qtiqtGuGHf1ZUhXFTyISJoyP6Aa21aE7FB6veWAkvWI9h3XTK7l1EoxUU357Fv
PQFuQXv0Zbi0ogdjPrqEKd3DkX5fG3zywvyp8JI31CMSvZpacc3UL3Kn2Q1ljiVE
EE/2aSlYeqNsbXLp0J62haey8J4P9odRv1GCgU+MheS7ALbUEy5gmqlH4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMokn7O9v5xMs2EgKHQiC0kthTVIMB8GA1UdIwQY
MBaAFFBhdU92iRafahUGUJVHJnK6K0WJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUdGMVQzYUpGcDlxRlFaUWxVY21jcm9yUllrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi8zYjU5ZDUtNjAyZC00MzUxLTk2YmMt
YTEwODY0OWQ1MWUyLzEveWlTZnM3Ml9uRXl6WVNBb2RDSUxTUzJGTlVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi8zYjU5ZDUtNjAyZC00MzUxLTk2YmMtYTEwODY0OWQ1MWUy
LzEvVUdGMVQzYUpGcDlxRlFaUWxVY21jcm9yUllrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+ZqMA0G
CSqGSIb3DQEBCwUAA4IBAQB0iLhV/NjdcFWQ7KyBE1KK2xeW5inXRrNlGMZ8bXFb
UaA4lX3IFYdoR0UU3ILQY5H6zmqS+RK8/LFLG6CZlPamlDs9jZNHZPtWZgq0ixa2
z7EqtmGJkv4V/B1G4+itg1nZ8oIfdxfbjuigjMp88848bO5q9YPsh+XpszsrdIbj
Lak9Be+AZMqs/waj4h2L91BbiNsiIkBvA4ZExkV4z6Tzp8W8+xxbYBE4zoV5VyjQ
dQwRVpRZ1eRMjMBKOlRiqoIA8uLnG34FUZZ4uL8cBevlTWvYNjI+UG4onKuaU0sG
m2A0SQU5/opNVyNwGzntAm0UJuOecUWblzbMRuwekcNg
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:25 2025 by rpki-client on console.sobornost.net