Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/E7tuzODCvj1Y4rQf0ix9lEI7vNs.roa
File: E7tuzODCvj1Y4rQf0ix9lEI7vNs.roa (raw, json)
Hash identifier: 7tjdPPhW07eifJoW12vu1rvxuuaPJc8oBZTFD5/C/EY=
Subject key identifier: 13:BB:6E:CC:E0:C2:BE:3D:58:E2:B4:1F:D2:2C:7D:94:42:3B:BC:DB
Certificate issuer: /CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9
Certificate serial: 019425218D7AC4FA1093A05F35F6A8531241
Authority key identifier: 90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/E7tuzODCvj1Y4rQf0ix9lEI7vNs.roa
Signing time: Thu 02 Jan 2025 03:49:03 +0000
ROA not before: Thu 02 Jan 2025 03:49:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48480
IP address blocks: 91.211.48.0/22 maxlen: 32
193.107.96.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:8d:7a:c4:fa:10:93:a0:5f:35:f6:a8:53:12:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90b0ac29b108f372316fbf4ea93e148731a4c4e9
Validity
Not Before: Jan 2 03:49:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13bb6ecce0c2be3d58e2b41fd22c7d94423bbcdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cf:98:7e:4b:50:2e:53:de:e6:b7:07:c7:a3:
c5:14:45:fe:a3:f8:09:f0:c7:66:bb:bf:27:c5:d9:
13:4f:a5:1b:27:17:3e:13:8a:fb:11:3e:3a:07:01:
a5:55:24:d4:89:03:4f:1c:f8:1c:b1:87:74:f4:42:
bc:5c:52:05:24:9f:fc:0a:87:67:f2:60:3d:d1:19:
8a:52:92:f9:fb:16:12:21:34:28:3a:a4:82:2e:1b:
83:01:12:5d:4e:4a:ae:5b:5d:98:57:58:d5:3a:db:
77:1e:66:69:90:50:e0:79:f8:81:a2:02:48:1a:20:
76:4b:b1:e8:cf:93:c5:c6:11:15:42:11:01:e3:73:
58:12:96:bc:57:f8:85:5b:69:2c:74:88:de:b0:41:
be:0d:52:e0:5d:79:10:95:6c:cc:44:1a:bd:cb:80:
5c:44:b2:0e:73:a6:08:ec:14:22:7b:31:29:87:e8:
6f:45:10:9b:1e:57:c2:14:14:de:d2:41:57:5f:d7:
9a:72:39:64:5c:3c:cf:74:5f:03:b3:09:fe:a4:68:
7d:5c:9f:45:41:8a:80:6e:eb:6c:61:f6:70:ac:fd:
92:d8:b8:fe:cb:c6:73:75:92:c0:6e:92:06:a7:ab:
74:4b:ec:4a:78:33:bd:a3:c0:e0:94:8d:70:5d:94:
46:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BB:6E:CC:E0:C2:BE:3D:58:E2:B4:1F:D2:2C:7D:94:42:3B:BC:DB
X509v3 Authority Key Identifier:
keyid:90:B0:AC:29:B1:08:F3:72:31:6F:BF:4E:A9:3E:14:87:31:A4:C4:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kLCsKbEI83Ixb79OqT4UhzGkxOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/E7tuzODCvj1Y4rQf0ix9lEI7vNs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/2f632c-bd54-4036-90b6-d253cd3e7a34/1/kLCsKbEI83Ixb79OqT4UhzGkxOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.48.0/22
193.107.96.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:81:68:64:f7:bb:80:88:ca:fa:14:e8:0f:ec:2f:59:57:e4:
67:d3:f7:ad:88:b3:b7:55:e6:50:14:b3:57:d1:d3:a3:9d:c7:
19:9d:b2:d6:04:09:6d:da:0f:52:39:63:7e:dd:de:89:ae:aa:
e1:d6:bd:c5:06:6a:02:a5:90:bb:db:86:7d:4a:b2:90:a0:a0:
02:43:50:62:11:84:69:86:9a:d2:b9:20:35:4f:6c:fc:6b:e3:
4f:f9:79:a7:46:1a:2d:26:1c:dd:f5:3d:a7:06:61:d1:fa:cf:
9d:c9:3d:e3:9c:41:9f:59:70:52:c5:a8:9b:20:38:af:ed:2f:
64:b5:6c:f0:31:16:15:f0:37:48:ff:58:42:e2:e3:20:a5:01:
4e:72:13:c7:61:e0:91:db:04:58:24:c9:8c:b9:6d:2e:9d:a1:
55:21:59:a3:90:21:ba:dd:6d:53:21:aa:9d:00:53:2f:c4:6b:
a1:fc:63:d0:70:0f:75:67:66:57:4f:9e:35:eb:36:c8:6f:58:
19:bb:c1:b8:f8:90:b2:97:8f:92:bf:d7:50:1c:2f:ba:0d:37:
76:45:00:aa:60:86:56:c9:84:56:64:0a:5a:8f:04:07:a7:f7:
77:36:bf:5a:f7:7e:cd:29:ac:c3:41:11:dd:68:2e:f0:7d:6d:
9a:e2:53:f9
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQlIY16xPoQk6BfNfaoUxJBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkwYjBhYzI5YjEwOGYzNzIzMTZmYmY0ZWE5M2UxNDg3MzFh
NGM0ZTkwHhcNMjUwMTAyMDM0OTAzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2JiNmVjY2UwYzJiZTNkNThlMmI0MWZkMjJjN2Q5NDQyM2JiY2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAns+YfktQLlPe5rcHx6PFFEX+o/gJ
8Mdmu78nxdkTT6UbJxc+E4r7ET46BwGlVSTUiQNPHPgcsYd09EK8XFIFJJ/8Codn
8mA90RmKUpL5+xYSITQoOqSCLhuDARJdTkquW12YV1jVOtt3HmZpkFDgefiBogJI
GiB2S7Hoz5PFxhEVQhEB43NYEpa8V/iFW2ksdIjesEG+DVLgXXkQlWzMRBq9y4Bc
RLIOc6YI7BQiezEph+hvRRCbHlfCFBTe0kFXX9eacjlkXDzPdF8Dswn+pGh9XJ9F
QYqAbutsYfZwrP2S2Lj+y8ZzdZLAbpIGp6t0S+xKeDO9o8DglI1wXZRGiwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFBO7bszgwr49WOK0H9IsfZRCO7zbMB8GA1UdIwQY
MBaAFJCwrCmxCPNyMW+/Tqk+FIcxpMTpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva0xDc0tiRUk4M0l4Yjc5T3FUNFVoekdreE9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8yZjYzMmMtYmQ1NC00MDM2LTkwYjYt
ZDI1M2NkM2U3YTM0LzEvRTd0dXpPREN2ajFZNHJRZjBpeDlsRUk3dk5zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8yZjYzMmMtYmQ1NC00MDM2LTkwYjYtZDI1M2NkM2U3YTM0
LzEva0xDc0tiRUk4M0l4Yjc5T3FUNFVoekdreE9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW9MwAwQC
wWtgMA0GCSqGSIb3DQEBCwUAA4IBAQAqgWhk97uAiMr6FOgP7C9ZV+Rn0/etiLO3
VeZQFLNX0dOjnccZnbLWBAlt2g9SOWN+3d6Jrqrh1r3FBmoCpZC724Z9SrKQoKAC
Q1BiEYRphprSuSA1T2z8a+NP+XmnRhotJhzd9T2nBmHR+s+dyT3jnEGfWXBSxaib
IDiv7S9ktWzwMRYV8DdI/1hC4uMgpQFOchPHYeCR2wRYJMmMuW0unaFVIVmjkCG6
3W1TIaqdAFMvxGuh/GPQcA91Z2ZXT5416zbIb1gZu8G4+JCyl4+Sv9dQHC+6DTd2
RQCqYIZWyYRWZApajwQHp/d3Nr9a937NKazDQRHdaC7wfW2a4lP5
-----END CERTIFICATE-----
Generated at Mon Apr 14 20:33:08 2025 by rpki-client on console.sobornost.net