Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/AbbCpXYiPra6RxhQTvg6tXGKv2M.roa
File: AbbCpXYiPra6RxhQTvg6tXGKv2M.roa (raw, json)
Hash identifier: FNfTwP/KDnV+ro4Bwjh1vRofBv3ZvkWsRE+40NBNKuk=
Subject key identifier: 01:B6:C2:A5:76:22:3E:B6:BA:47:18:50:4E:F8:3A:B5:71:8A:BF:63
Certificate issuer: /CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Certificate serial: 019424B3968C0B7B573C974AE54605D851F4
Authority key identifier: 61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/AbbCpXYiPra6RxhQTvg6tXGKv2M.roa
Signing time: Thu 02 Jan 2025 01:48:56 +0000
ROA not before: Thu 02 Jan 2025 01:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202422
IP address blocks: 91.188.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:96:8c:0b:7b:57:3c:97:4a:e5:46:05:d8:51:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6161470d39be4ba2dd5df8fa47b16396278e670a
Validity
Not Before: Jan 2 01:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=01b6c2a576223eb6ba4718504ef83ab5718abf63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:63:73:3d:2e:15:7f:79:ab:45:72:a0:fa:
f2:b4:c6:18:de:c0:ca:0f:70:2b:d7:75:95:23:cd:
8e:13:70:56:32:4c:85:6b:b9:73:21:67:6d:30:83:
16:50:6b:53:8c:de:0b:0c:dd:40:fd:3d:43:b4:1a:
9d:cc:8b:fe:09:d6:44:d1:61:22:b2:f1:da:50:ca:
de:ca:6c:d5:69:46:25:34:be:41:8b:d4:89:58:2c:
3e:ae:f7:42:36:91:6d:cf:f9:82:49:0f:38:02:7c:
76:b9:21:15:c5:b3:bd:df:66:39:0b:a7:34:0c:ac:
3e:5c:98:9f:ed:4b:2f:10:c1:40:bf:c3:6b:36:3d:
8c:fa:a4:58:f6:6b:8d:f8:50:b4:c2:aa:08:ef:f4:
a9:4b:b0:4e:cf:be:3d:f6:36:da:b3:dc:b5:92:bb:
16:8c:53:69:eb:22:cd:0b:7b:87:3a:b4:e8:6d:6a:
0b:05:07:3d:f3:ae:a0:fd:b1:27:01:16:ab:a0:59:
7d:fc:b8:a2:99:f1:2a:a3:11:37:9d:4d:d7:3c:e3:
a0:53:d5:68:9a:41:89:54:19:a9:52:46:75:13:4a:
b0:3f:b0:c0:fa:90:51:85:a5:fa:e9:96:d2:ba:78:
ae:c1:aa:b7:3b:d5:aa:47:28:de:0e:88:51:66:3f:
31:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B6:C2:A5:76:22:3E:B6:BA:47:18:50:4E:F8:3A:B5:71:8A:BF:63
X509v3 Authority Key Identifier:
keyid:61:61:47:0D:39:BE:4B:A2:DD:5D:F8:FA:47:B1:63:96:27:8E:67:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YWFHDTm-S6LdXfj6R7FjlieOZwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/AbbCpXYiPra6RxhQTvg6tXGKv2M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/e51856-e52e-4b24-8c99-c240bfc9cbc1/1/YWFHDTm-S6LdXfj6R7FjlieOZwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.251.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:40:bc:f8:fb:2e:60:cc:0a:9b:b5:ad:da:2b:68:94:3b:25:
d7:86:01:f6:34:15:f1:c9:d3:98:83:36:45:18:55:69:17:eb:
eb:59:a1:0a:2b:b8:04:df:f8:32:6b:87:d5:59:68:49:9a:3e:
0d:a1:52:d0:49:bd:77:97:43:ba:0a:33:d2:02:5d:02:a5:c1:
20:aa:25:4a:1a:7d:41:a1:18:33:f7:87:98:b9:0b:15:3d:54:
cc:2e:3f:18:bf:96:a5:76:ff:31:81:38:03:11:9f:66:fd:e7:
2f:44:6e:d4:09:c6:83:19:ea:93:fc:43:a6:bc:63:41:5f:66:
a8:2d:5e:b9:e6:f9:e3:9c:ee:06:09:b9:6f:32:ac:75:e4:14:
81:06:33:c3:f8:70:f1:20:a0:b8:02:1b:96:ad:3c:28:d6:37:
1b:58:a6:dc:b4:67:ff:59:59:fa:0c:56:bf:26:5a:7f:1b:32:
0a:bf:3a:a5:a1:b3:db:42:5b:97:c3:5b:86:78:6b:af:10:06:
90:45:90:c9:9d:e4:99:37:29:71:06:97:e2:ee:45:43:c5:d0:
18:c2:e1:50:ec:b5:82:19:99:b0:64:39:a9:19:d0:07:de:51:
d2:22:86:22:17:6d:36:bd:e2:d7:30:1d:30:a3:e0:75:e9:6a:
d9:ba:0a:5b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks5aMC3tXPJdK5UYF2FH0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYxNjE0NzBkMzliZTRiYTJkZDVkZjhmYTQ3YjE2Mzk2Mjc4
ZTY3MGEwHhcNMjUwMTAyMDE0ODU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMWI2YzJhNTc2MjIzZWI2YmE0NzE4NTA0ZWY4M2FiNTcxOGFiZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCFjcz0uFX95q0VyoPrytMYY3sDK
D3Ar13WVI82OE3BWMkyFa7lzIWdtMIMWUGtTjN4LDN1A/T1DtBqdzIv+CdZE0WEi
svHaUMreymzVaUYlNL5Bi9SJWCw+rvdCNpFtz/mCSQ84Anx2uSEVxbO932Y5C6c0
DKw+XJif7UsvEMFAv8NrNj2M+qRY9muN+FC0wqoI7/SpS7BOz7499jbas9y1krsW
jFNp6yLNC3uHOrTobWoLBQc9866g/bEnARaroFl9/LiimfEqoxE3nU3XPOOgU9Vo
mkGJVBmpUkZ1E0qwP7DA+pBRhaX66ZbSuniuwaq3O9WqRyjeDohRZj8xBwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAG2wqV2Ij62ukcYUE74OrVxir9jMB8GA1UdIwQY
MBaAFGFhRw05vkui3V34+kexY5YnjmcKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTkt
YzI0MGJmYzljYmMxLzEvQWJiQ3BYWWlQcmE2UnhoUVR2ZzZ0WEdLdjJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9lNTE4NTYtZTUyZS00YjI0LThjOTktYzI0MGJmYzljYmMx
LzEvWVdGSERUbS1TNkxkWGZqNlI3RmpsaWVPWndvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW7z7MA0G
CSqGSIb3DQEBCwUAA4IBAQCxQLz4+y5gzAqbta3aK2iUOyXXhgH2NBXxydOYgzZF
GFVpF+vrWaEKK7gE3/gya4fVWWhJmj4NoVLQSb13l0O6CjPSAl0CpcEgqiVKGn1B
oRgz94eYuQsVPVTMLj8Yv5aldv8xgTgDEZ9m/ecvRG7UCcaDGeqT/EOmvGNBX2ao
LV655vnjnO4GCblvMqx15BSBBjPD+HDxIKC4AhuWrTwo1jcbWKbctGf/WVn6DFa/
Jlp/GzIKvzqlobPbQluXw1uGeGuvEAaQRZDJneSZNylxBpfi7kVDxdAYwuFQ7LWC
GZmwZDmpGdAH3lHSIoYiF202veLXMB0wo+B16WrZugpb
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:53:50 2025 by rpki-client