Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/0DP07uLmhCaYUKz4-De4vVyiQvU.roa
File: 0DP07uLmhCaYUKz4-De4vVyiQvU.roa (raw, json)
Hash identifier: tLlgxWvlov28mbUFOnnNCCYCPUkvTsTiijysrOZYrbM=
Subject key identifier: D0:33:F4:EE:E2:E6:84:26:98:50:AC:F8:F8:37:B8:BD:5C:A2:42:F5
Certificate issuer: /CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
Certificate serial: 0194274852A2DAC9DF1CCE720197258E3FF1
Authority key identifier: E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/0DP07uLmhCaYUKz4-De4vVyiQvU.roa
Signing time: Thu 02 Jan 2025 13:50:38 +0000
ROA not before: Thu 02 Jan 2025 13:50:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47993
IP address blocks: 91.208.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:52:a2:da:c9:df:1c:ce:72:01:97:25:8e:3f:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e996a6ffdad5ceb2626617bd6ed9c4ec571d0f3a
Validity
Not Before: Jan 2 13:50:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d033f4eee2e684269850acf8f837b8bd5ca242f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f9:9f:67:fd:8b:4f:69:6f:df:3e:be:88:20:
16:ba:88:8d:26:ee:97:5c:a7:2a:27:25:07:8e:ff:
a5:44:03:2b:80:da:fd:5c:d2:1b:97:23:ec:ad:9f:
6b:75:c4:32:ff:a1:2b:fe:a8:24:40:73:87:b9:0c:
22:71:42:69:9a:d8:72:ed:c0:16:ea:74:d1:1a:45:
74:04:2a:09:b2:1b:92:7c:22:38:71:19:d8:e6:08:
39:f3:fc:a4:00:f1:82:78:0d:74:06:fe:d5:89:11:
f0:1e:75:ec:d8:5b:f4:45:d7:ea:9d:02:27:c1:6e:
f3:d7:d9:08:73:ae:1a:22:9f:25:9d:2b:46:ef:3d:
e7:4d:9c:5b:00:c8:ed:c7:c7:39:d5:d9:a8:e4:e5:
13:54:5f:ac:8b:25:8c:e4:57:de:db:28:a0:71:9c:
2d:2e:a7:81:95:26:0b:63:6e:cf:c4:ce:de:fa:a4:
8b:9b:12:56:3c:3e:2e:c9:0a:45:9d:8c:58:74:af:
76:19:44:03:47:08:98:29:e0:cb:3d:3b:4b:2a:8b:
81:47:4c:52:c5:82:84:51:53:55:ac:36:a6:3c:ba:
e8:ab:62:1e:1c:1e:f2:45:bb:ac:81:f5:32:54:6f:
82:bc:e3:6f:f7:a0:79:55:99:02:e6:b4:27:fa:cf:
bb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:33:F4:EE:E2:E6:84:26:98:50:AC:F8:F8:37:B8:BD:5C:A2:42:F5
X509v3 Authority Key Identifier:
keyid:E9:96:A6:FF:DA:D5:CE:B2:62:66:17:BD:6E:D9:C4:EC:57:1D:0F:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Zam_9rVzrJiZhe9btnE7FcdDzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/0DP07uLmhCaYUKz4-De4vVyiQvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6c15e8-8a82-49d5-a309-38be6a47cfcc/1/6Zam_9rVzrJiZhe9btnE7FcdDzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.168.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:2f:49:13:c7:c4:9d:a2:e4:71:f6:c6:29:bd:1f:36:02:1a:
dd:f1:58:b8:6c:16:19:83:28:78:37:9c:1e:eb:f2:91:7c:93:
52:e8:4a:49:1d:91:fc:93:e6:2f:18:7d:88:41:bb:0c:13:19:
88:b6:95:cf:97:b1:92:25:c4:ca:fa:cd:67:e1:4d:af:72:1f:
23:29:bb:a5:1d:e3:c4:0e:97:a6:6b:4b:41:9e:73:fa:f7:2b:
f5:ef:46:55:f4:44:8c:f7:3c:e1:01:3e:6f:7f:52:44:1d:68:
12:76:77:01:86:e4:d9:2b:10:70:bb:e8:eb:1c:dd:56:c8:a2:
f8:ba:52:0f:b8:4c:3e:46:e7:6a:c4:6f:13:07:0f:05:b0:28:
43:41:99:6e:98:3f:9b:fa:f4:25:a3:68:10:3e:b2:97:51:0f:
74:db:a0:41:1c:fa:3e:46:e3:ce:23:55:27:9a:84:82:df:44:
0c:e3:19:88:47:76:d3:76:88:12:8c:0e:30:d3:fe:24:b0:db:
06:be:26:c2:39:c8:ce:4f:4c:30:67:2f:39:b9:37:6e:c8:0e:
a9:49:d2:d9:d8:c3:fb:b1:7c:7c:ff:ca:f0:9e:a5:15:55:97:
af:10:03:90:df:e7:2a:f4:6a:51:a6:7d:8d:a8:6f:3f:0e:1b:
97:5b:f3:1b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnSFKi2snfHM5yAZcljj/xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU5OTZhNmZmZGFkNWNlYjI2MjY2MTdiZDZlZDljNGVjNTcx
ZDBmM2EwHhcNMjUwMTAyMTM1MDM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkMDMzZjRlZWUyZTY4NDI2OTg1MGFjZjhmODM3YjhiZDVjYTI0MmY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/mfZ/2LT2lv3z6+iCAWuoiNJu6X
XKcqJyUHjv+lRAMrgNr9XNIblyPsrZ9rdcQy/6Er/qgkQHOHuQwicUJpmthy7cAW
6nTRGkV0BCoJshuSfCI4cRnY5gg58/ykAPGCeA10Bv7ViRHwHnXs2Fv0RdfqnQIn
wW7z19kIc64aIp8lnStG7z3nTZxbAMjtx8c51dmo5OUTVF+siyWM5Ffe2yigcZwt
LqeBlSYLY27PxM7e+qSLmxJWPD4uyQpFnYxYdK92GUQDRwiYKeDLPTtLKouBR0xS
xYKEUVNVrDamPLroq2IeHB7yRbusgfUyVG+CvONv96B5VZkC5rQn+s+7iQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNAz9O7i5oQmmFCs+Pg3uL1cokL1MB8GA1UdIwQY
MBaAFOmWpv/a1c6yYmYXvW7ZxOxXHQ86MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNlphbV85clZ6ckppWmhlOWJ0bkU3RmNkRHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC82YzE1ZTgtOGE4Mi00OWQ1LWEzMDkt
MzhiZTZhNDdjZmNjLzEvMERQMDd1TG1oQ2FZVUt6NC1EZTR2VnlpUXZVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC82YzE1ZTgtOGE4Mi00OWQ1LWEzMDktMzhiZTZhNDdjZmNj
LzEvNlphbV85clZ6ckppWmhlOWJ0bkU3RmNkRHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9CoMA0G
CSqGSIb3DQEBCwUAA4IBAQAbL0kTx8SdouRx9sYpvR82Ahrd8Vi4bBYZgyh4N5we
6/KRfJNS6EpJHZH8k+YvGH2IQbsMExmItpXPl7GSJcTK+s1n4U2vch8jKbulHePE
Dpema0tBnnP69yv170ZV9ESM9zzhAT5vf1JEHWgSdncBhuTZKxBwu+jrHN1WyKL4
ulIPuEw+RudqxG8TBw8FsChDQZlumD+b+vQlo2gQPrKXUQ9026BBHPo+RuPOI1Un
moSC30QM4xmIR3bTdogSjA4w0/4ksNsGvibCOcjOT0wwZy85uTduyA6pSdLZ2MP7
sXx8/8rwnqUVVZevEAOQ3+cq9GpRpn2NqG8/DhuXW/Mb
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:53:06 2025 by rpki-client