Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/9dHpkAlOL0XgkLxchS4Qy2sMNCs.roa
File: 9dHpkAlOL0XgkLxchS4Qy2sMNCs.roa (raw, json)
Hash identifier: g9vMbBt1/drUDiVGZvjhkatTyph0Mun8c4A/qeNjgzE=
Subject key identifier: F5:D1:E9:90:09:4E:2F:45:E0:90:BC:5C:85:2E:10:CB:6B:0C:34:2B
Certificate issuer: /CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Certificate serial: 019425FD51D3E63837C89761BC3BBC880E35
Authority key identifier: 4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/9dHpkAlOL0XgkLxchS4Qy2sMNCs.roa
Signing time: Thu 02 Jan 2025 07:49:06 +0000
ROA not before: Thu 02 Jan 2025 07:49:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199860
IP address blocks: 91.132.228.0/22 maxlen: 22
91.132.228.0/23 maxlen: 23
91.132.230.0/23 maxlen: 23
91.226.104.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:51:d3:e6:38:37:c8:97:61:bc:3b:bc:88:0e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c4be43394a7c2bf1e8fdfbb1d506fa37ac73231
Validity
Not Before: Jan 2 07:49:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5d1e990094e2f45e090bc5c852e10cb6b0c342b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9a:7a:ee:85:81:15:d2:19:85:77:d8:cc:c1:
20:7c:9a:b6:32:cc:2d:7d:f5:75:d6:34:f6:34:99:
df:ab:df:61:7d:0b:1b:14:46:e8:98:d9:5b:49:f7:
42:a2:66:bb:ce:14:3b:dd:81:8d:43:e9:d6:65:f7:
f1:b1:41:8a:4a:15:7c:6b:b2:36:fb:8d:54:30:c9:
30:ff:62:88:46:bc:72:c7:7e:97:76:c4:98:b8:a9:
5b:57:48:30:e6:44:92:5c:df:58:f7:9d:43:34:6d:
81:f2:7e:3f:40:f5:d9:8b:de:d5:87:79:d4:2a:65:
b4:47:1d:93:86:e9:ca:d4:49:8f:83:fe:df:a2:4b:
19:4f:bf:15:ae:08:da:77:a1:b1:c4:62:cb:ac:d2:
a9:cf:8b:a7:6a:41:4c:4e:82:71:fb:cc:41:6a:05:
e5:b1:be:72:91:85:f9:57:71:8b:b3:73:d6:74:90:
6c:5c:c4:b9:f1:98:32:dc:66:cf:eb:95:0f:4a:77:
85:9c:3f:8b:65:47:dc:9e:d9:34:d6:4a:55:44:4d:
54:0a:7d:94:61:9a:40:0d:05:58:42:00:f7:8f:93:
c8:a5:95:7e:f6:fa:9d:6b:7f:ab:5d:4c:7a:44:a0:
c6:84:b6:14:ba:70:aa:01:af:f8:bf:c9:77:92:4a:
cd:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:D1:E9:90:09:4E:2F:45:E0:90:BC:5C:85:2E:10:CB:6B:0C:34:2B
X509v3 Authority Key Identifier:
keyid:4C:4B:E4:33:94:A7:C2:BF:1E:8F:DF:BB:1D:50:6F:A3:7A:C7:32:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TEvkM5Snwr8ej9-7HVBvo3rHMjE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/9dHpkAlOL0XgkLxchS4Qy2sMNCs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/a5056f-6948-4130-9077-5f3d06f6a5d2/1/TEvkM5Snwr8ej9-7HVBvo3rHMjE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.228.0/22
91.226.104.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:86:1d:8c:43:0a:94:b7:2c:e4:2a:cc:30:eb:cc:d6:b8:58:
84:6e:9d:5b:86:e5:4c:13:7d:84:83:10:ca:90:b7:23:de:aa:
87:fd:eb:61:00:db:b2:72:92:ff:57:43:ba:50:b7:25:a2:b5:
29:46:f5:a9:c3:55:5a:be:ca:22:84:e9:12:6c:0d:0d:d1:be:
b5:d0:03:00:2d:87:dd:bd:11:48:45:8a:a4:e9:e6:86:58:fd:
09:9c:35:fa:73:aa:c8:4b:f5:11:c1:87:0b:4f:4b:5f:25:54:
95:5c:cb:0e:3c:01:82:ad:61:97:ba:71:f0:12:51:a0:00:e7:
00:34:cb:18:3c:26:e8:ae:01:51:89:9b:30:a3:b4:84:b1:03:
5b:5a:da:66:b6:ab:3a:90:f9:03:85:48:91:6d:58:41:e8:06:
99:2e:3e:fd:00:b6:77:df:ee:f2:da:84:ac:00:0c:64:10:8a:
ca:cb:a7:87:ea:86:07:e2:ec:9a:d3:d7:ba:b6:f5:f6:89:ab:
72:1f:3a:f3:f0:f0:e2:96:d6:7f:a7:a1:bf:43:7b:a3:ca:d3:
3b:36:1e:cd:98:11:90:83:9e:13:60:f8:a6:5f:f5:63:8b:39:
71:c6:6f:65:b0:ca:44:99:de:dc:1c:b2:4d:85:da:40:79:af:
2d:f0:e3:62
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQl/VHT5jg3yJdhvDu8iA41MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjNGJlNDMzOTRhN2MyYmYxZThmZGZiYjFkNTA2ZmEzN2Fj
NzMyMzEwHhcNMjUwMTAyMDc0OTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNWQxZTk5MDA5NGUyZjQ1ZTA5MGJjNWM4NTJlMTBjYjZiMGMzNDJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZp67oWBFdIZhXfYzMEgfJq2Mswt
ffV11jT2NJnfq99hfQsbFEbomNlbSfdComa7zhQ73YGNQ+nWZffxsUGKShV8a7I2
+41UMMkw/2KIRrxyx36XdsSYuKlbV0gw5kSSXN9Y951DNG2B8n4/QPXZi97Vh3nU
KmW0Rx2ThunK1EmPg/7foksZT78Vrgjad6GxxGLLrNKpz4unakFMToJx+8xBagXl
sb5ykYX5V3GLs3PWdJBsXMS58Zgy3GbP65UPSneFnD+LZUfcntk01kpVRE1UCn2U
YZpADQVYQgD3j5PIpZV+9vqda3+rXUx6RKDGhLYUunCqAa/4v8l3kkrNYwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPXR6ZAJTi9F4JC8XIUuEMtrDDQrMB8GA1UdIwQY
MBaAFExL5DOUp8K/Ho/fux1Qb6N6xzIxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVEV2a001U253cjhlajktN0hWQnZvM3JITWpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9hNTA1NmYtNjk0OC00MTMwLTkwNzct
NWYzZDA2ZjZhNWQyLzEvOWRIcGtBbE9MMFhna0x4Y2hTNFF5MnNNTkNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9hNTA1NmYtNjk0OC00MTMwLTkwNzctNWYzZDA2ZjZhNWQy
LzEvVEV2a001U253cjhlajktN0hWQnZvM3JITWpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW4TkAwQC
W+JoMA0GCSqGSIb3DQEBCwUAA4IBAQA8hh2MQwqUtyzkKsww68zWuFiEbp1bhuVM
E32EgxDKkLcj3qqH/ethANuycpL/V0O6ULclorUpRvWpw1VavsoihOkSbA0N0b61
0AMALYfdvRFIRYqk6eaGWP0JnDX6c6rIS/URwYcLT0tfJVSVXMsOPAGCrWGXunHw
ElGgAOcANMsYPCborgFRiZswo7SEsQNbWtpmtqs6kPkDhUiRbVhB6AaZLj79ALZ3
3+7y2oSsAAxkEIrKy6eH6oYH4uya09e6tvX2iatyHzrz8PDiltZ/p6G/Q3ujytM7
Nh7NmBGQg54TYPimX/Vjizlxxm9lsMpEmd7cHLJNhdpAea8t8ONi
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:44:47 2025 by rpki-client