Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/7yi59puiWkIeEaYK8KBYKDR-rpo.roa
File: 7yi59puiWkIeEaYK8KBYKDR-rpo.roa (raw, json)
Hash identifier: KNlMvuBi1t2lnTe35OCJi3EadwQprB/heYmGKWj9YxE=
Subject key identifier: EF:28:B9:F6:9B:A2:5A:42:1E:11:A6:0A:F0:A0:58:28:34:7E:AE:9A
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 0194D7B1E2324C4CB20BBDA2C54C10FA97FF
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/7yi59puiWkIeEaYK8KBYKDR-rpo.roa
Signing time: Wed 05 Feb 2025 19:59:06 +0000
ROA not before: Wed 05 Feb 2025 19:59:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213499
IP address blocks: 91.241.47.0/24 maxlen: 24
193.19.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d7:b1:e2:32:4c:4c:b2:0b:bd:a2:c5:4c:10:fa:97:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Feb 5 19:59:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef28b9f69ba25a421e11a60af0a05828347eae9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:12:8d:2c:90:c3:fd:6c:33:43:1f:5c:8b:8a:
29:68:0a:a7:6c:ed:df:fc:ed:48:4d:aa:29:a6:1c:
5c:26:43:a1:ab:91:15:b3:9b:bc:df:28:62:83:31:
21:23:ca:aa:77:5d:2f:39:48:98:e5:cf:4c:d1:36:
fd:49:f5:72:f4:72:f7:44:d0:50:a5:21:2b:09:2f:
e0:6c:7a:ff:f6:c2:66:4f:38:a1:79:77:8a:86:3f:
5f:f9:dc:70:f8:d6:92:3b:5a:71:62:59:e3:4c:8b:
11:32:5e:28:7c:93:05:0f:54:f0:28:35:d7:ad:cd:
f9:dc:31:d7:e1:c2:cb:52:aa:fa:58:03:51:60:b1:
de:fe:9c:da:c9:79:e3:a9:52:7a:24:76:e1:ee:5b:
ae:d6:4e:f7:40:5b:8b:a6:84:4f:36:27:cc:1a:45:
ad:c4:bb:d2:f0:c6:87:e3:2f:ff:24:3d:70:a3:8c:
da:b3:df:42:93:e9:38:85:4a:d4:09:54:44:11:5e:
36:a5:e5:2e:c9:91:2b:f0:46:39:8b:5e:e3:0e:59:
1a:38:4e:77:28:da:21:12:8b:ba:fe:39:01:df:55:
f8:14:88:00:ff:3f:1b:a4:c9:28:eb:07:85:b7:aa:
1f:ab:57:6e:3a:dc:52:f1:13:12:c5:75:5f:3a:e9:
63:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:28:B9:F6:9B:A2:5A:42:1E:11:A6:0A:F0:A0:58:28:34:7E:AE:9A
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/7yi59puiWkIeEaYK8KBYKDR-rpo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.47.0/24
193.19.110.0/24
Signature Algorithm: sha256WithRSAEncryption
03:58:2a:2e:5b:88:70:53:66:da:23:30:3a:05:f1:0f:38:66:
77:4a:80:5b:18:f1:86:0c:64:98:df:76:e2:c3:83:0e:e8:46:
19:84:82:6b:31:90:77:ee:e0:1d:a6:1c:8e:f0:ac:94:d6:98:
4f:f6:51:3e:27:63:b4:95:c5:b2:ea:83:20:c9:9b:fb:34:fe:
e5:4a:93:c1:50:5f:33:3d:31:d3:37:e9:23:f8:73:8d:fc:f1:
56:1c:b2:4a:5e:a7:b4:53:29:a6:6d:15:4b:56:c3:98:b6:f1:
f4:c5:3c:6d:a3:a7:0d:80:62:8a:4a:20:c6:70:e1:6a:24:d2:
c8:f0:31:1c:66:9a:e0:5f:be:1d:ab:e2:74:9e:8d:a2:75:59:
5f:3e:6e:77:b8:88:d2:68:43:5a:5d:5b:08:bf:df:40:b8:7b:
9c:c8:64:ec:6c:10:0c:c3:ba:1a:93:67:19:af:f5:8c:34:b4:
b9:a3:0f:e1:12:01:7e:6c:62:be:ca:ba:60:d4:56:37:6a:29:
08:f0:55:28:36:df:0b:7e:c0:73:11:cb:49:e6:40:6c:40:0a:
f0:86:5c:0c:97:b1:08:f5:c1:87:9d:08:5b:04:4f:79:62:ee:
46:19:55:57:36:cd:91:e8:06:62:ad:84:d0:08:b5:9c:b2:ef:
d3:dc:31:6a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZTXseIyTEyyC72ixUwQ+pf/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY3OTU1YjFhYTFjMDI4NGQyODQzYjk2ZjI2YzVmZTc1MWU2
Njk0NmYwHhcNMjUwMjA1MTk1OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlZjI4YjlmNjliYTI1YTQyMWUxMWE2MGFmMGEwNTgyODM0N2VhZTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hKNLJDD/WwzQx9ci4opaAqnbO3f
/O1ITaopphxcJkOhq5EVs5u83yhigzEhI8qqd10vOUiY5c9M0Tb9SfVy9HL3RNBQ
pSErCS/gbHr/9sJmTziheXeKhj9f+dxw+NaSO1pxYlnjTIsRMl4ofJMFD1TwKDXX
rc353DHX4cLLUqr6WANRYLHe/pzayXnjqVJ6JHbh7luu1k73QFuLpoRPNifMGkWt
xLvS8MaH4y//JD1wo4zas99Ck+k4hUrUCVREEV42peUuyZEr8EY5i17jDlkaOE53
KNohEou6/jkB31X4FIgA/z8bpMko6weFt6ofq1duOtxS8RMSxXVfOuljYQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFO8oufabolpCHhGmCvCgWCg0fq6aMB8GA1UdIwQY
MBaAFGeVWxqhwChNKEO5bybF/nUeZpRvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDct
MDhhZDk0MTAxZDdlLzEvN3lpNTlwdWlXa0llRWFZSzhLQllLRFItcnBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi82MzE5MjUtNmIwZS00ZWE1LTkxZDctMDhhZDk0MTAxZDdl
LzEvWjVWYkdxSEFLRTBvUTdsdkpzWC1kUjVtbEc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAW/EvAwQA
wRNuMA0GCSqGSIb3DQEBCwUAA4IBAQADWCouW4hwU2baIzA6BfEPOGZ3SoBbGPGG
DGSY33biw4MO6EYZhIJrMZB37uAdphyO8KyU1phP9lE+J2O0lcWy6oMgyZv7NP7l
SpPBUF8zPTHTN+kj+HON/PFWHLJKXqe0UymmbRVLVsOYtvH0xTxto6cNgGKKSiDG
cOFqJNLI8DEcZprgX74dq+J0no2idVlfPm53uIjSaENaXVsIv99AuHucyGTsbBAM
w7oak2cZr/WMNLS5ow/hEgF+bGK+yrpg1FY3aikI8FUoNt8LfsBzEctJ5kBsQArw
hlwMl7EI9cGHnQhbBE95Yu5GGVVXNs2R6AZirYTQCLWcsu/T3DFq
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:32:41 2025 by rpki-client on console.sobornost.net