Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/91cINY9woI_zH6e1r3Wkrenr7Yg.roa
File: 91cINY9woI_zH6e1r3Wkrenr7Yg.roa (raw, json)
Hash identifier: 3OQuboWAG+RQMvSWcHif8T7bhj5yD9lJGrTB5RXF988=
Subject key identifier: F7:57:08:35:8F:70:A0:8F:F3:1F:A7:B5:AF:75:A4:AD:E9:EB:ED:88
Certificate issuer: /CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
Certificate serial: 0194236A48914996689EC4BCDC7A90A3BE91
Authority key identifier: 9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/91cINY9woI_zH6e1r3Wkrenr7Yg.roa
Signing time: Wed 01 Jan 2025 19:49:15 +0000
ROA not before: Wed 01 Jan 2025 19:49:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 201990
IP address blocks: 45.90.43.0/24 maxlen: 24
185.205.84.0/22 maxlen: 22
193.218.203.0/24 maxlen: 24
217.197.102.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:6a:48:91:49:96:68:9e:c4:bc:dc:7a:90:a3:be:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df185e99ffe611527a0e94331151ffe2ee72ae9
Validity
Not Before: Jan 1 19:49:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f75708358f70a08ff31fa7b5af75a4ade9ebed88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7b:f7:05:91:dc:56:64:65:fb:03:e6:fe:f3:
d6:96:be:b2:18:ff:4c:0a:48:58:90:11:c5:9d:a1:
b7:db:65:28:b1:dc:be:6f:1c:c3:65:56:ab:ca:c9:
23:c5:c6:42:8a:a7:47:e3:33:4a:4b:32:41:7e:5b:
b9:61:8d:28:21:7a:f4:6b:f2:cb:47:21:da:09:0d:
da:8e:1e:e7:83:2d:be:24:3e:b5:a2:29:aa:b9:69:
f6:5e:e0:e5:1b:59:2b:9b:c2:89:79:41:ba:b3:0c:
67:a6:25:5c:2a:42:76:41:45:5e:b9:31:d2:3d:51:
94:91:37:b1:dd:12:8c:48:cb:4a:25:1d:de:1c:69:
cf:5c:e1:e5:29:77:86:03:ea:f3:a7:ca:d5:6a:4b:
b8:06:dc:96:50:88:74:bb:e0:c7:31:69:59:e3:4a:
a3:70:9e:98:9f:77:eb:55:42:88:a0:59:ce:a1:f8:
88:f0:14:8d:3d:b2:2b:b5:cc:b3:42:94:34:8c:6a:
06:35:b5:49:66:dc:3c:66:90:9c:90:1d:e8:2d:f5:
a8:ac:92:20:2b:b1:f6:f6:2d:8d:5c:19:dd:6f:dd:
03:f4:81:d0:f6:ff:38:ce:b3:3a:e5:42:ef:6f:81:
5b:42:d2:db:b8:b2:61:f0:af:d7:d9:e8:78:8c:68:
a2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:57:08:35:8F:70:A0:8F:F3:1F:A7:B5:AF:75:A4:AD:E9:EB:ED:88
X509v3 Authority Key Identifier:
keyid:9D:F1:85:E9:9F:FE:61:15:27:A0:E9:43:31:15:1F:FE:2E:E7:2A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/91cINY9woI_zH6e1r3Wkrenr7Yg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/60e51f-b803-474d-b27a-f2990ceb94ec/1/nfGF6Z_-YRUnoOlDMRUf_i7nKuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.90.43.0/24
185.205.84.0/22
193.218.203.0/24
217.197.102.0/24
Signature Algorithm: sha256WithRSAEncryption
77:3f:4c:cb:4a:a7:20:47:d4:8b:fc:cf:8c:9a:fe:ae:16:d3:
72:9f:c2:3e:46:c6:18:ff:af:cd:6b:b3:26:87:23:dc:db:fc:
c2:be:d6:7b:56:34:af:62:cf:91:9f:89:24:70:e5:96:99:6e:
91:fb:03:81:08:0d:c6:6d:41:4e:34:01:86:c3:e0:fb:6f:00:
be:4b:31:1f:92:3d:72:b9:c1:66:65:8d:48:2c:d5:e6:f5:97:
26:da:21:cf:21:d7:c2:4e:bd:13:ad:95:a0:1e:4b:c2:7f:f3:
b1:e6:95:93:69:86:a7:c1:73:a4:c5:a4:2d:cc:d9:c0:cb:29:
52:fd:b6:7a:57:55:8a:fc:5f:21:01:26:1b:e5:57:33:0b:30:
94:f1:8e:bc:ae:b5:3a:80:b6:bf:33:d4:e3:e2:d9:20:db:39:
4e:49:ed:f2:98:41:78:e1:d3:ce:20:97:f6:4d:e8:f0:97:a2:
0a:88:74:bf:0d:53:a5:4f:c7:0c:5b:b9:72:29:da:15:8a:f8:
28:d2:f3:fe:5d:5e:a8:37:1c:8d:ee:6a:c8:4b:0c:b4:9c:35:
b8:05:1a:1d:e8:39:bd:de:66:5d:29:eb:6e:8a:8b:62:59:d4:
f0:d3:50:00:9e:51:04:2f:91:b2:0d:14:1d:fc:ce:71:b9:26:
2c:8e:31:b8
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAZQjakiRSZZonsS83HqQo76RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZjE4NWU5OWZmZTYxMTUyN2EwZTk0MzMxMTUxZmZlMmVl
NzJhZTkwHhcNMjUwMTAxMTk0OTE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzU3MDgzNThmNzBhMDhmZjMxZmE3YjVhZjc1YTRhZGU5ZWJlZDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnv3BZHcVmRl+wPm/vPWlr6yGP9M
CkhYkBHFnaG322Uosdy+bxzDZVaryskjxcZCiqdH4zNKSzJBflu5YY0oIXr0a/LL
RyHaCQ3ajh7ngy2+JD61oimquWn2XuDlG1krm8KJeUG6swxnpiVcKkJ2QUVeuTHS
PVGUkTex3RKMSMtKJR3eHGnPXOHlKXeGA+rzp8rVaku4BtyWUIh0u+DHMWlZ40qj
cJ6Yn3frVUKIoFnOofiI8BSNPbIrtcyzQpQ0jGoGNbVJZtw8ZpCckB3oLfWorJIg
K7H29i2NXBndb90D9IHQ9v84zrM65ULvb4FbQtLbuLJh8K/X2eh4jGiiFwIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFPdXCDWPcKCP8x+nta91pK3p6+2IMB8GA1UdIwQY
MBaAFJ3xhemf/mEVJ6DpQzEVH/4u5yrpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy82MGU1MWYtYjgwMy00NzRkLWIyN2Et
ZjI5OTBjZWI5NGVjLzEvOTFjSU5ZOXdvSV96SDZlMXIzV2tyZW5yN1lnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy82MGU1MWYtYjgwMy00NzRkLWIyN2EtZjI5OTBjZWI5NGVj
LzEvbmZHRjZaXy1ZUlVub09sRE1SVWZfaTduS3VrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALVorAwQC
uc1UAwQAwdrLAwQA2cVmMA0GCSqGSIb3DQEBCwUAA4IBAQB3P0zLSqcgR9SL/M+M
mv6uFtNyn8I+RsYY/6/Na7MmhyPc2/zCvtZ7VjSvYs+Rn4kkcOWWmW6R+wOBCA3G
bUFONAGGw+D7bwC+SzEfkj1yucFmZY1ILNXm9Zcm2iHPIdfCTr0TrZWgHkvCf/Ox
5pWTaYanwXOkxaQtzNnAyylS/bZ6V1WK/F8hASYb5VczCzCU8Y68rrU6gLa/M9Tj
4tkg2zlOSe3ymEF44dPOIJf2Tejwl6IKiHS/DVOlT8cMW7lyKdoVivgo0vP+XV6o
NxyN7mrISwy0nDW4BRod6Dm93mZdKetuiotiWdTw01AAnlEEL5GyDRQd/M5xuSYs
jjG4
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:39:26 2025 by rpki-client