Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/C2ecozniAHAj0uhFfwHN_H6EGZA.roa
File: C2ecozniAHAj0uhFfwHN_H6EGZA.roa (raw, json)
Hash identifier: EZUOiLLYsi9hRi0qVE5EwgylGRW0PHLtxyCT19uY13Y=
Subject key identifier: 0B:67:9C:A3:39:E2:00:70:23:D2:E8:45:7F:01:CD:FC:7E:84:19:90
Certificate issuer: /CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Certificate serial: 019427B56A71CA1881FCDDE9139942E58895
Authority key identifier: 25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/C2ecozniAHAj0uhFfwHN_H6EGZA.roa
Signing time: Thu 02 Jan 2025 15:49:48 +0000
ROA not before: Thu 02 Jan 2025 15:49:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56622
IP address blocks: 91.226.34.0/24 maxlen: 24
91.226.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:6a:71:ca:18:81:fc:dd:e9:13:99:42:e5:88:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=254cc4ab5d48c5270d40e9fe50e72396deec5869
Validity
Not Before: Jan 2 15:49:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b679ca339e2007023d2e8457f01cdfc7e841990
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c9:03:67:15:3e:ad:79:27:86:b8:9f:5d:d5:
3b:8b:dd:4a:90:8a:7b:5d:ec:17:54:9f:a6:c8:a8:
fa:ae:52:53:5b:b2:32:d7:84:96:5e:40:10:5a:1e:
cf:eb:de:dd:47:49:cb:78:34:3d:97:ea:43:58:3a:
ac:6c:97:ba:31:44:67:4a:79:71:63:a1:b5:70:22:
79:bd:97:f6:0a:1f:7d:09:3c:62:14:f8:a9:f4:f3:
4b:26:a6:fd:b6:11:0b:19:a1:14:c8:c7:6d:2e:78:
97:c9:18:fa:33:30:a0:b0:7e:ca:74:39:a3:cf:4b:
83:7a:8d:be:01:5d:78:7b:13:61:31:9a:b6:40:1a:
61:f8:a8:7e:51:53:30:7a:17:4f:4a:80:1a:7a:b4:
cd:34:45:2d:86:70:da:e6:d4:d6:92:e9:bd:a8:17:
a2:68:88:d5:9f:c7:92:f7:98:ec:32:53:c8:e9:a5:
ff:17:b9:eb:8a:d0:71:ac:9d:98:02:8d:56:b9:f3:
99:c2:e9:ab:df:e4:f3:84:85:fa:80:33:a0:41:2d:
c4:7a:fb:91:fb:3a:44:c2:e7:fc:47:02:93:ee:54:
f4:c4:6a:3d:c3:60:ab:d8:71:8c:ae:ca:af:40:13:
f3:da:af:2f:72:dd:a1:cf:bc:ef:7f:8f:98:e8:f1:
ec:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:67:9C:A3:39:E2:00:70:23:D2:E8:45:7F:01:CD:FC:7E:84:19:90
X509v3 Authority Key Identifier:
keyid:25:4C:C4:AB:5D:48:C5:27:0D:40:E9:FE:50:E7:23:96:DE:EC:58:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JUzEq11IxScNQOn-UOcjlt7sWGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/C2ecozniAHAj0uhFfwHN_H6EGZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/69f8fc-5175-4fb3-aaaf-637cfd72baf0/1/JUzEq11IxScNQOn-UOcjlt7sWGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.34.0/23
Signature Algorithm: sha256WithRSAEncryption
90:c5:9d:7b:e1:34:6f:d8:7b:6a:bf:28:8b:8d:d0:1d:c8:cc:
41:23:cd:e1:ac:fd:de:92:0b:c1:cb:c4:b3:78:35:11:42:50:
5c:d0:f2:90:fd:59:05:98:03:30:83:66:02:94:a2:ce:c8:fa:
5a:3c:72:9f:02:21:70:df:20:32:e4:72:ab:3c:02:6d:c5:f1:
cb:8a:46:40:5c:fe:60:8d:3e:de:6b:ca:e0:01:98:90:0e:02:
43:13:b5:c0:dd:da:ef:c3:aa:8e:40:8f:49:60:90:b1:ce:e5:
66:c7:69:a4:68:b4:36:1a:2f:1c:94:94:9e:60:31:cc:8f:60:
78:ca:8d:9f:fc:f4:d3:3c:7b:85:77:79:af:54:de:5a:c3:9c:
df:cf:71:54:a0:83:ec:6a:ae:df:49:8a:3b:b1:d1:25:1b:4a:
51:50:2a:65:aa:c0:f6:9d:bb:9a:25:69:c1:ae:b3:d9:a9:15:
b8:a8:3d:52:1a:c0:02:e6:b9:52:09:27:53:c4:55:b3:7e:92:
eb:a9:5c:6e:61:b1:97:10:be:06:6b:df:11:03:b8:87:7c:42:
30:41:93:4e:74:8f:9e:ea:4a:47:51:40:88:d8:39:75:2f:b0:
23:62:a7:29:9b:c1:30:6b:c2:1d:ea:78:61:a6:1c:f4:40:96:
06:4c:0e:b8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQntWpxyhiB/N3pE5lC5YiVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1NGNjNGFiNWQ0OGM1MjcwZDQwZTlmZTUwZTcyMzk2ZGVl
YzU4NjkwHhcNMjUwMTAyMTU0OTQ4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYjY3OWNhMzM5ZTIwMDcwMjNkMmU4NDU3ZjAxY2RmYzdlODQxOTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ckDZxU+rXknhrifXdU7i91KkIp7
XewXVJ+myKj6rlJTW7Iy14SWXkAQWh7P697dR0nLeDQ9l+pDWDqsbJe6MURnSnlx
Y6G1cCJ5vZf2Ch99CTxiFPip9PNLJqb9thELGaEUyMdtLniXyRj6MzCgsH7KdDmj
z0uDeo2+AV14exNhMZq2QBph+Kh+UVMwehdPSoAaerTNNEUthnDa5tTWkum9qBei
aIjVn8eS95jsMlPI6aX/F7nritBxrJ2YAo1WufOZwumr3+TzhIX6gDOgQS3EevuR
+zpEwuf8RwKT7lT0xGo9w2Cr2HGMrsqvQBPz2q8vct2hz7zvf4+Y6PHsiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAtnnKM54gBwI9LoRX8Bzfx+hBmQMB8GA1UdIwQY
MBaAFCVMxKtdSMUnDUDp/lDnI5be7FhpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlV6RXExMUl4U2NOUU9uLVVPY2psdDdzV0drLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82OWY4ZmMtNTE3NS00ZmIzLWFhYWYt
NjM3Y2ZkNzJiYWYwLzEvQzJlY296bmlBSEFqMHVoRmZ3SE5fSDZFR1pBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82OWY4ZmMtNTE3NS00ZmIzLWFhYWYtNjM3Y2ZkNzJiYWYw
LzEvSlV6RXExMUl4U2NOUU9uLVVPY2psdDdzV0drLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW+IiMA0G
CSqGSIb3DQEBCwUAA4IBAQCQxZ174TRv2HtqvyiLjdAdyMxBI83hrP3ekgvBy8Sz
eDURQlBc0PKQ/VkFmAMwg2YClKLOyPpaPHKfAiFw3yAy5HKrPAJtxfHLikZAXP5g
jT7ea8rgAZiQDgJDE7XA3drvw6qOQI9JYJCxzuVmx2mkaLQ2Gi8clJSeYDHMj2B4
yo2f/PTTPHuFd3mvVN5aw5zfz3FUoIPsaq7fSYo7sdElG0pRUCplqsD2nbuaJWnB
rrPZqRW4qD1SGsAC5rlSCSdTxFWzfpLrqVxuYbGXEL4Ga98RA7iHfEIwQZNOdI+e
6kpHUUCI2Dl1L7AjYqcpm8Ewa8Id6nhhphz0QJYGTA64
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:48:27 2025 by rpki-client