Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/0jdBY_E5YLyLUu_FzsB8buFy_Wg.roa
File: 0jdBY_E5YLyLUu_FzsB8buFy_Wg.roa (raw, json)
Hash identifier: m69bij1M0dFLciXpzKZZy7Clt1a/35aqA5PNXsZojag=
Subject key identifier: D2:37:41:63:F1:39:60:BC:8B:52:EF:C5:CE:C0:7C:6E:E1:72:FD:68
Certificate issuer: /CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Certificate serial: 01941F8C5651899C92ABD037A1553A1F239E
Authority key identifier: E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/0jdBY_E5YLyLUu_FzsB8buFy_Wg.roa
Signing time: Wed 01 Jan 2025 01:47:58 +0000
ROA not before: Wed 01 Jan 2025 01:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39689
IP address blocks: 91.212.4.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:56:51:89:9c:92:ab:d0:37:a1:55:3a:1f:23:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f3f6dc4610f6c9bbaa4532111738e493b6adf0
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2374163f13960bc8b52efc5cec07c6ee172fd68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:da:2e:d3:0f:21:99:56:ab:5e:87:e2:4b:4a:
b6:07:e3:e8:19:d6:48:fe:2b:6e:83:3b:f4:96:57:
ab:59:70:d3:97:b3:2b:65:7b:fb:38:c6:8f:d0:11:
2f:70:5d:af:0c:d6:93:ff:7f:12:ac:96:1d:c9:e9:
89:4c:03:a2:fe:7a:c1:02:d6:9f:ac:88:a7:fb:87:
22:9f:2c:91:4e:a1:b8:d5:1f:93:d3:7e:a7:e6:95:
47:f1:d3:47:ad:27:31:58:1e:2a:33:bb:77:2e:9e:
2a:7e:fe:9a:b1:69:c9:8d:65:a5:cf:53:5c:bd:e6:
e0:ef:a5:39:06:f9:84:3a:d4:5f:c8:21:50:b4:2a:
7a:11:4a:ce:38:23:09:f3:79:6e:18:9f:07:a8:6d:
4b:13:4c:80:80:98:5b:a2:82:98:58:84:2d:39:be:
a3:9a:4f:b2:5f:b3:f3:cb:51:6a:e8:d5:1f:08:6e:
c3:a4:f7:6d:8e:60:b3:00:8d:94:74:23:39:34:0e:
7d:44:07:90:29:04:78:0b:57:28:52:ed:e5:b2:93:
c9:a8:38:15:85:de:88:fc:c6:71:79:d2:3e:f5:6e:
24:91:6b:10:00:06:50:ab:67:00:70:6e:77:cb:0a:
bd:59:ee:8b:31:65:a7:bf:e2:6c:cc:dd:73:1d:d3:
02:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:37:41:63:F1:39:60:BC:8B:52:EF:C5:CE:C0:7C:6E:E1:72:FD:68
X509v3 Authority Key Identifier:
keyid:E1:F3:F6:DC:46:10:F6:C9:BB:AA:45:32:11:17:38:E4:93:B6:AD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fP23EYQ9sm7qkUyERc45JO2rfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/0jdBY_E5YLyLUu_FzsB8buFy_Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b36132-ca77-4584-8d7b-291b7ad093bf/1/4fP23EYQ9sm7qkUyERc45JO2rfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.4.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:7e:29:2e:f8:a7:69:79:c0:09:5f:c8:47:c2:f8:11:46:16:
a8:f0:d1:a1:2c:f8:90:27:23:80:74:35:b2:2f:23:36:92:64:
8f:fa:27:e5:58:21:3a:e7:1a:15:47:27:db:2b:af:61:74:94:
b5:5d:20:6a:4b:12:4b:44:e5:b2:fb:0d:5d:dd:cc:5c:c5:4d:
78:2a:99:14:6a:14:62:31:32:35:ec:dc:8e:7e:7b:ed:13:1f:
49:9a:59:05:d2:d1:d6:e1:df:78:dc:68:87:76:ed:82:82:5c:
38:1c:37:91:3c:f4:9a:22:54:36:09:95:57:5c:8c:ab:02:28:
d2:ed:ff:ab:33:37:91:68:4c:2e:74:48:9d:4e:d1:38:ee:08:
9f:56:f2:e9:60:d1:69:f7:32:89:d0:1d:44:15:49:9b:7b:ca:
18:42:1a:b5:ee:a4:75:95:ae:cc:73:ee:8b:e4:f2:17:f1:63:
50:7f:ce:57:b3:e3:1d:bd:30:f1:49:31:1b:c5:29:04:f2:01:
99:7d:a0:e7:fb:17:b2:fa:f8:b5:85:9a:12:5d:a4:4d:26:af:
9b:33:e7:d4:9f:3c:53:c0:f8:c7:a6:78:8d:c0:21:f8:2f:a4:
8c:36:10:ce:a8:75:ba:f1:08:28:28:f0:20:01:7f:6b:47:48:
38:60:ea:4b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQfjFZRiZySq9A3oVU6HyOeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjNmNmRjNDYxMGY2YzliYmFhNDUzMjExMTczOGU0OTNi
NmFkZjAwHhcNMjUwMTAxMDE0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMjM3NDE2M2YxMzk2MGJjOGI1MmVmYzVjZWMwN2M2ZWUxNzJmZDY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNou0w8hmVarXofiS0q2B+PoGdZI
/itugzv0llerWXDTl7MrZXv7OMaP0BEvcF2vDNaT/38SrJYdyemJTAOi/nrBAtaf
rIin+4cinyyRTqG41R+T036n5pVH8dNHrScxWB4qM7t3Lp4qfv6asWnJjWWlz1Nc
vebg76U5BvmEOtRfyCFQtCp6EUrOOCMJ83luGJ8HqG1LE0yAgJhbooKYWIQtOb6j
mk+yX7Pzy1Fq6NUfCG7DpPdtjmCzAI2UdCM5NA59RAeQKQR4C1coUu3lspPJqDgV
hd6I/MZxedI+9W4kkWsQAAZQq2cAcG53ywq9We6LMWWnv+JszN1zHdMCNwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNI3QWPxOWC8i1Lvxc7AfG7hcv1oMB8GA1UdIwQY
MBaAFOHz9txGEPbJu6pFMhEXOOSTtq3wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZQMjNFWVE5c203cWtVeUVSYzQ1Sk8ycmZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMzYxMzItY2E3Ny00NTg0LThkN2It
MjkxYjdhZDA5M2JmLzEvMGpkQllfRTVZTHlMVXVfRnpzQjhidUZ5X1dnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMzYxMzItY2E3Ny00NTg0LThkN2ItMjkxYjdhZDA5M2Jm
LzEvNGZQMjNFWVE5c203cWtVeUVSYzQ1Sk8ycmZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9QEMA0G
CSqGSIb3DQEBCwUAA4IBAQBsfiku+KdpecAJX8hHwvgRRhao8NGhLPiQJyOAdDWy
LyM2kmSP+iflWCE65xoVRyfbK69hdJS1XSBqSxJLROWy+w1d3cxcxU14KpkUahRi
MTI17NyOfnvtEx9JmlkF0tHW4d943GiHdu2Cglw4HDeRPPSaIlQ2CZVXXIyrAijS
7f+rMzeRaEwudEidTtE47gifVvLpYNFp9zKJ0B1EFUmbe8oYQhq17qR1la7Mc+6L
5PIX8WNQf85Xs+MdvTDxSTEbxSkE8gGZfaDn+xey+vi1hZoSXaRNJq+bM+fUnzxT
wPjHpniNwCH4L6SMNhDOqHW68QgoKPAgAX9rR0g4YOpL
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:01:20 2025 by rpki-client