Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/6cbf70-fe8f-48c9-9de5-52cfe6cc91e3/1/rNz98diYbuT8xowwxzTzSsYkYYs.roa
File: rNz98diYbuT8xowwxzTzSsYkYYs.roa (raw, json)
Hash identifier: dhP2lEJP+/86iE+yXaaW1AMpAdTQWEMHNsHUaWhX+2o=
Subject key identifier: AC:DC:FD:F1:D8:98:6E:E4:FC:C6:8C:30:C7:34:F3:4A:C6:24:61:8B
Certificate issuer: /CN=bd611e1cabe0db5643a5d2945160f45ed84a807a
Certificate serial: 0194206815D433A6E36FAB79359C7241933E
Authority key identifier: BD:61:1E:1C:AB:E0:DB:56:43:A5:D2:94:51:60:F4:5E:D8:4A:80:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vWEeHKvg21ZDpdKUUWD0XthKgHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/6cbf70-fe8f-48c9-9de5-52cfe6cc91e3/1/rNz98diYbuT8xowwxzTzSsYkYYs.roa
Signing time: Wed 01 Jan 2025 05:47:59 +0000
ROA not before: Wed 01 Jan 2025 05:47:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51815
IP address blocks: 91.226.180.0/24 maxlen: 24
194.48.213.0/24 maxlen: 24
2001:67c:5f4::/48 maxlen: 48
2a0a:b780::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:15:d4:33:a6:e3:6f:ab:79:35:9c:72:41:93:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd611e1cabe0db5643a5d2945160f45ed84a807a
Validity
Not Before: Jan 1 05:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=acdcfdf1d8986ee4fcc68c30c734f34ac624618b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:c5:f5:50:22:4d:71:35:66:ae:48:11:b9:53:
1a:69:68:8e:05:c6:1c:0c:e3:96:1f:11:d4:c9:71:
5e:0a:f5:e7:1e:39:99:e0:c9:1d:41:e6:20:80:5e:
dc:44:ad:d5:5b:0a:28:7d:af:35:d2:b3:40:cd:82:
d5:f1:9f:e7:03:c7:84:85:0c:d4:d9:be:ac:71:8a:
ce:c8:57:e3:ed:55:ca:af:b2:cc:b3:06:b3:23:bb:
4e:40:00:42:85:68:2f:5f:36:ba:40:3d:42:60:28:
71:24:f0:5c:53:3b:bb:38:f1:3b:48:6a:61:9d:d7:
71:ac:64:14:d1:1e:32:59:d1:c2:9b:1a:e0:f9:e3:
8d:bf:1e:0e:90:f3:c1:f6:b4:58:a9:b2:eb:df:32:
72:4b:ad:5c:39:7e:c8:b7:75:fa:ac:4e:44:06:d3:
7b:c6:a0:6c:1d:a3:c0:3a:b1:2e:f1:ff:e3:3f:82:
18:f2:4f:7c:3d:87:25:fb:43:b1:bf:be:f5:87:95:
8d:1c:1f:68:d1:8b:46:d0:ec:46:c1:b0:1d:ec:5e:
c6:14:c8:60:16:62:a8:05:ef:8e:9d:b3:20:35:4b:
c6:da:7a:20:49:2d:d0:c7:fd:ba:d4:78:2a:0d:2b:
60:1d:34:a5:29:88:b1:90:54:c6:5f:fd:32:38:4b:
a8:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:DC:FD:F1:D8:98:6E:E4:FC:C6:8C:30:C7:34:F3:4A:C6:24:61:8B
X509v3 Authority Key Identifier:
keyid:BD:61:1E:1C:AB:E0:DB:56:43:A5:D2:94:51:60:F4:5E:D8:4A:80:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWEeHKvg21ZDpdKUUWD0XthKgHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6cbf70-fe8f-48c9-9de5-52cfe6cc91e3/1/rNz98diYbuT8xowwxzTzSsYkYYs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/6cbf70-fe8f-48c9-9de5-52cfe6cc91e3/1/vWEeHKvg21ZDpdKUUWD0XthKgHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.180.0/24
194.48.213.0/24
IPv6:
2001:67c:5f4::/48
2a0a:b780::/29
Signature Algorithm: sha256WithRSAEncryption
0c:8d:74:79:62:74:47:0e:14:bb:cd:e1:0c:00:0c:9d:ba:21:
e7:73:53:1f:30:82:50:b7:db:c0:72:3e:db:5f:b1:8a:6a:af:
db:23:b5:0e:07:1e:4c:a6:2f:b4:4e:d0:56:89:19:12:49:2d:
39:78:9d:49:a8:8a:10:a7:c9:21:9c:67:16:56:49:96:d8:5c:
57:c4:67:6b:d5:f7:e1:62:45:04:3d:18:c1:35:06:49:52:ee:
28:54:a2:fe:02:0d:32:21:27:40:e4:ee:d1:d4:73:47:d1:4a:
9b:ff:f0:ef:79:4b:41:32:99:e2:1f:b4:c7:5d:b6:0e:fa:36:
3d:7e:af:94:47:61:27:cc:78:af:1f:13:d0:86:a3:c1:33:8d:
3e:7b:de:83:50:58:dc:73:64:76:e2:0f:bd:d9:0f:bb:0f:64:
7c:84:f0:74:82:d1:aa:8e:e5:96:e9:26:f6:d7:9e:aa:cc:04:
e2:5f:25:46:2e:8c:cf:61:05:c0:60:f4:de:7c:50:30:de:c2:
bf:71:7b:69:97:2a:36:84:92:d2:fa:17:1c:ea:9b:89:26:a0:
90:41:d0:21:e2:96:c5:cf:3f:3f:f3:ec:3d:cd:b8:f3:33:bc:
c9:ac:66:7a:8e:2f:45:b3:1e:0c:fa:45:c2:33:1b:fa:75:91:
0b:f2:d5:a2
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAZQgaBXUM6bjb6t5NZxyQZM+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNjExZTFjYWJlMGRiNTY0M2E1ZDI5NDUxNjBmNDVlZDg0
YTgwN2EwHhcNMjUwMTAxMDU0NzU5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2RjZmRmMWQ4OTg2ZWU0ZmNjNjhjMzBjNzM0ZjM0YWM2MjQ2MThiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMX1UCJNcTVmrkgRuVMaaWiOBcYc
DOOWHxHUyXFeCvXnHjmZ4MkdQeYggF7cRK3VWwoofa810rNAzYLV8Z/nA8eEhQzU
2b6scYrOyFfj7VXKr7LMswazI7tOQABChWgvXza6QD1CYChxJPBcUzu7OPE7SGph
nddxrGQU0R4yWdHCmxrg+eONvx4OkPPB9rRYqbLr3zJyS61cOX7It3X6rE5EBtN7
xqBsHaPAOrEu8f/jP4IY8k98PYcl+0Oxv771h5WNHB9o0YtG0OxGwbAd7F7GFMhg
FmKoBe+OnbMgNUvG2nogSS3Qx/261HgqDStgHTSlKYixkFTGX/0yOEuo5QIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFKzc/fHYmG7k/MaMMMc080rGJGGLMB8GA1UdIwQY
MBaAFL1hHhyr4NtWQ6XSlFFg9F7YSoB6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdldFZUhLdmcyMVpEcGRLVVVXRDBYdGhLZ0hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC82Y2JmNzAtZmU4Zi00OGM5LTlkZTUt
NTJjZmU2Y2M5MWUzLzEvck56OThkaVlidVQ4eG93d3h6VHpTc1lrWVlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC82Y2JmNzAtZmU4Zi00OGM5LTlkZTUtNTJjZmU2Y2M5MWUz
LzEvdldFZUhLdmcyMVpEcGRLVVVXRDBYdGhLZ0hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDASBAIAATAMAwQAW+K0AwQA
wjDVMBYEAgACMBADBwAgAQZ8BfQDBQMqCreAMA0GCSqGSIb3DQEBCwUAA4IBAQAM
jXR5YnRHDhS7zeEMAAyduiHnc1MfMIJQt9vAcj7bX7GKaq/bI7UOBx5Mpi+0TtBW
iRkSSS05eJ1JqIoQp8khnGcWVkmW2FxXxGdr1ffhYkUEPRjBNQZJUu4oVKL+Ag0y
ISdA5O7R1HNH0Uqb//DveUtBMpniH7THXbYO+jY9fq+UR2EnzHivHxPQhqPBM40+
e96DUFjcc2R24g+92Q+7D2R8hPB0gtGqjuWW6Sb2156qzATiXyVGLozPYQXAYPTe
fFAw3sK/cXtplyo2hJLS+hcc6puJJqCQQdAh4pbFzz8/8+w9zbjzM7zJrGZ6ji9F
sx4M+kXCMxv6dZEL8tWi
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:29:18 2025 by rpki-client