Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/E3jVbCBCXVL1zjPe92rTz_3YiF4.roa
File: E3jVbCBCXVL1zjPe92rTz_3YiF4.roa (raw, json)
Hash identifier: mYLzngkxdY+DYIKIgMoHQZMDI+UNbhQHPxx6Kp46ZgQ=
Subject key identifier: 13:78:D5:6C:20:42:5D:52:F5:CE:33:DE:F7:6A:D3:CF:FD:D8:88:5E
Certificate issuer: /CN=e847e88749704294552fef54886111ed0586ec24
Certificate serial: 0194266AE74948FE3AB89B13356FE36115D7
Authority key identifier: E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/E3jVbCBCXVL1zjPe92rTz_3YiF4.roa
Signing time: Thu 02 Jan 2025 09:48:47 +0000
ROA not before: Thu 02 Jan 2025 09:48:47 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203394
IP address blocks: 91.231.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6a:e7:49:48:fe:3a:b8:9b:13:35:6f:e3:61:15:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e847e88749704294552fef54886111ed0586ec24
Validity
Not Before: Jan 2 09:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1378d56c20425d52f5ce33def76ad3cffdd8885e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:02:5a:de:f5:fd:06:8d:e3:52:43:49:15:c2:
1c:e2:64:9b:28:12:b3:e9:6d:ab:35:21:e6:7c:f1:
08:26:25:1b:73:dc:27:d0:53:a2:90:fd:c6:c0:ff:
ff:c8:54:bf:5d:13:56:bf:d9:ac:ae:0a:26:b0:ae:
db:0b:81:e3:49:46:fe:68:a7:0e:6d:af:08:20:d8:
13:a4:9a:05:73:77:73:62:fc:6d:1d:b7:a1:40:37:
6a:ec:88:dd:cf:cd:86:59:d9:f0:9f:b0:33:0d:60:
d0:c0:da:05:4f:35:84:31:4b:71:5b:5a:28:3d:22:
94:9a:60:5e:41:04:9e:03:c9:52:69:e5:69:21:0a:
92:52:6d:46:91:51:31:44:22:4d:d8:98:f2:09:c4:
66:9b:39:d6:bb:b0:51:1d:9b:ed:c2:86:43:f0:30:
03:3e:d4:7d:34:ab:78:7c:d9:93:10:79:7e:62:02:
ae:83:67:f9:72:48:0d:89:7c:3d:8b:30:97:33:ee:
4a:64:7f:06:83:82:72:65:07:72:f8:85:ce:d9:14:
fb:05:a0:66:ec:03:72:0e:19:b0:06:74:cf:b8:36:
5e:08:8b:16:fb:07:65:68:ca:57:5b:59:bc:51:c5:
65:43:ea:ee:8e:eb:7b:be:c6:a1:5f:ef:a7:dd:bd:
9f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:78:D5:6C:20:42:5D:52:F5:CE:33:DE:F7:6A:D3:CF:FD:D8:88:5E
X509v3 Authority Key Identifier:
keyid:E8:47:E8:87:49:70:42:94:55:2F:EF:54:88:61:11:ED:05:86:EC:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Efoh0lwQpRVL-9UiGER7QWG7CQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/E3jVbCBCXVL1zjPe92rTz_3YiF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/77f532-398f-4ad8-b348-bdad7ef776c4/1/6Efoh0lwQpRVL-9UiGER7QWG7CQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.182.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:ff:ca:5a:94:d1:99:1c:9f:23:13:a5:07:21:62:2d:d8:2d:
f7:67:4f:e7:9e:7e:b3:59:56:cc:11:82:0b:33:eb:78:8e:ac:
5e:62:19:b9:a2:45:bc:60:05:41:40:a8:8d:01:1b:c2:43:63:
e3:30:51:c4:6f:00:f7:73:e9:62:fa:b1:e1:31:0c:f4:20:44:
50:01:7b:21:19:28:ae:de:0f:26:44:28:98:2f:5e:c2:57:96:
d5:07:07:2a:6a:83:19:32:b3:bc:d5:e3:bf:70:96:fb:4c:7a:
18:f8:f8:4c:79:d7:d2:8f:fa:aa:2c:e7:22:6b:20:6e:38:15:
58:83:2e:1a:f4:ae:fc:7a:4c:ac:af:2a:9e:28:5f:6d:d8:7c:
87:f3:9a:8b:45:c8:08:b6:24:34:67:a5:68:fa:f2:f3:48:0c:
ec:11:c7:22:d9:69:54:a4:87:91:18:81:14:1e:4b:a6:cf:3a:
c2:81:c1:ae:5b:36:a0:e3:6f:0e:dc:f2:64:88:b9:f0:87:a5:
4a:e3:ae:31:4e:62:00:bb:80:60:ef:e3:55:e5:b1:b9:85:8e:
b1:bc:2e:de:d7:c1:c2:5c:60:ef:73:f1:77:a2:a1:3a:75:a3:
f5:db:c0:d6:9a:86:74:46:5e:ca:27:d3:3d:2b:1d:d3:e4:b7:
e4:34:9f:de
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQmaudJSP46uJsTNW/jYRXXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NDdlODg3NDk3MDQyOTQ1NTJmZWY1NDg4NjExMWVkMDU4
NmVjMjQwHhcNMjUwMTAyMDk0ODQ3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMzc4ZDU2YzIwNDI1ZDUyZjVjZTMzZGVmNzZhZDNjZmZkZDg4ODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgJa3vX9Bo3jUkNJFcIc4mSbKBKz
6W2rNSHmfPEIJiUbc9wn0FOikP3GwP//yFS/XRNWv9msrgomsK7bC4HjSUb+aKcO
ba8IINgTpJoFc3dzYvxtHbehQDdq7Ijdz82GWdnwn7AzDWDQwNoFTzWEMUtxW1oo
PSKUmmBeQQSeA8lSaeVpIQqSUm1GkVExRCJN2JjyCcRmmznWu7BRHZvtwoZD8DAD
PtR9NKt4fNmTEHl+YgKug2f5ckgNiXw9izCXM+5KZH8Gg4JyZQdy+IXO2RT7BaBm
7ANyDhmwBnTPuDZeCIsW+wdlaMpXW1m8UcVlQ+rujut7vsahX++n3b2fXwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBN41WwgQl1S9c4z3vdq08/92IheMB8GA1UdIwQY
MBaAFOhH6IdJcEKUVS/vVIhhEe0FhuwkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkVmb2gwbHdRcFJWTC05VWlHRVI3UVdHN0NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS83N2Y1MzItMzk4Zi00YWQ4LWIzNDgt
YmRhZDdlZjc3NmM0LzEvRTNqVmJDQkNYVkwxempQZTkyclR6XzNZaUY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS83N2Y1MzItMzk4Zi00YWQ4LWIzNDgtYmRhZDdlZjc3NmM0
LzEvNkVmb2gwbHdRcFJWTC05VWlHRVI3UVdHN0NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+e2MA0G
CSqGSIb3DQEBCwUAA4IBAQAM/8palNGZHJ8jE6UHIWIt2C33Z0/nnn6zWVbMEYIL
M+t4jqxeYhm5okW8YAVBQKiNARvCQ2PjMFHEbwD3c+li+rHhMQz0IERQAXshGSiu
3g8mRCiYL17CV5bVBwcqaoMZMrO81eO/cJb7THoY+PhMedfSj/qqLOciayBuOBVY
gy4a9K78ekysryqeKF9t2HyH85qLRcgItiQ0Z6Vo+vLzSAzsEcci2WlUpIeRGIEU
HkumzzrCgcGuWzag428O3PJkiLnwh6VK464xTmIAu4Bg7+NV5bG5hY6xvC7e18HC
XGDvc/F3oqE6daP128DWmoZ0Rl7KJ9M9Kx3T5LfkNJ/e
-----END CERTIFICATE-----
Generated at Fri Apr 25 14:15:04 2025 by rpki-client