Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/etVX6TJKFEJRufjvzOGQ6JSSL7w.roa
File: etVX6TJKFEJRufjvzOGQ6JSSL7w.roa (raw, json)
Hash identifier: 63VfWS1eguDOAS4kGZod2yjLHalgrK50WGTQVYmqUfQ=
Subject key identifier: 7A:D5:57:E9:32:4A:14:42:51:B9:F8:EF:CC:E1:90:E8:94:92:2F:BC
Certificate issuer: /CN=10258ae0c26c65a6a6966f3f7e698633b9143426
Certificate serial: 0194258F4E5ABF60130734196284C0B65F46
Authority key identifier: 10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/etVX6TJKFEJRufjvzOGQ6JSSL7w.roa
Signing time: Thu 02 Jan 2025 05:48:56 +0000
ROA not before: Thu 02 Jan 2025 05:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56874
IP address blocks: 91.228.118.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:4e:5a:bf:60:13:07:34:19:62:84:c0:b6:5f:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10258ae0c26c65a6a6966f3f7e698633b9143426
Validity
Not Before: Jan 2 05:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7ad557e9324a144251b9f8efcce190e894922fbc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:3f:74:4c:bc:40:a5:11:ac:81:25:a7:40:6b:
07:95:20:93:d7:ec:a9:d7:a1:ba:07:44:a5:ac:36:
99:ea:4c:52:4c:6c:c0:64:f4:68:8c:84:f6:2c:93:
1c:2d:38:70:aa:da:0c:80:0e:f1:89:73:de:33:80:
c9:53:a5:dc:7d:57:4a:50:84:22:3e:c8:7e:86:21:
9f:ea:38:78:24:c2:42:a2:9a:5d:1b:3e:62:67:c1:
54:dc:49:8e:da:e4:93:24:eb:64:8c:eb:c5:a1:e2:
58:88:48:e3:02:24:fb:90:72:10:2e:97:b7:e9:08:
77:30:54:e1:33:4d:bb:76:8c:eb:c3:3a:2c:b8:d8:
de:a4:bc:76:3e:8e:ee:24:e0:b9:d0:38:e7:e6:0e:
b1:1e:cd:77:42:ea:dd:ca:c2:e8:61:54:db:d6:e5:
99:e5:bb:e0:7c:d4:db:99:19:3e:f3:db:b5:2f:69:
2c:e7:5d:02:7c:29:46:c8:56:d7:de:d1:ce:29:4f:
28:a5:ac:7a:d2:a5:db:df:44:83:85:d2:22:49:c6:
e2:70:63:7d:2f:96:a9:6b:2c:4c:58:2c:1e:28:46:
21:7e:a3:35:09:e1:e2:f3:9a:37:e3:71:7c:4d:c6:
43:b1:eb:40:81:1d:78:bd:d3:9b:cf:fa:4c:18:da:
db:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:D5:57:E9:32:4A:14:42:51:B9:F8:EF:CC:E1:90:E8:94:92:2F:BC
X509v3 Authority Key Identifier:
keyid:10:25:8A:E0:C2:6C:65:A6:A6:96:6F:3F:7E:69:86:33:B9:14:34:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ECWK4MJsZaamlm8_fmmGM7kUNCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/etVX6TJKFEJRufjvzOGQ6JSSL7w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/1341a7-1ce6-43b9-bf76-ef7e8d4434f3/1/ECWK4MJsZaamlm8_fmmGM7kUNCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.118.0/24
Signature Algorithm: sha256WithRSAEncryption
47:69:7e:a0:d6:8a:dc:e4:6c:68:40:2c:aa:b0:d1:90:b0:71:
ca:ae:61:43:d4:f9:3c:59:08:87:1e:f4:70:8f:b8:9e:5d:07:
2d:c9:ad:85:0d:a0:5a:05:c0:96:5d:64:11:41:20:53:08:70:
1b:6f:43:bd:1d:6f:94:fa:39:21:3d:fb:88:4f:78:ef:4f:2c:
61:45:d3:78:a5:72:04:67:ec:ef:d5:50:5f:7b:13:df:a2:75:
11:93:31:df:60:e9:83:c3:14:9b:35:0a:81:8e:95:13:43:0e:
28:f4:bd:05:bb:03:5c:97:68:e9:f3:85:dc:5d:a1:f0:d8:6a:
fa:48:ca:b6:7f:e3:2c:e0:69:b6:1e:ab:82:8f:22:54:ff:c2:
1a:b8:26:cd:5d:47:0f:e5:81:07:05:3f:63:0f:b7:20:28:c8:
46:00:26:f6:5c:1d:d7:17:21:be:72:98:ce:e8:10:1c:40:94:
74:68:89:ba:1b:4c:2f:35:b3:37:6c:bd:82:cb:68:0d:f0:00:
05:d6:ea:d2:40:ea:d8:55:fe:2b:02:35:09:c5:21:e0:50:01:
5c:02:dd:c2:5f:fe:bc:e0:63:8c:a3:e3:b3:9a:da:35:93:72:
59:d3:41:de:72:98:fd:85:63:27:94:3f:ca:76:f6:29:4a:56:
77:cb:cf:2c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj05av2ATBzQZYoTAtl9GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEwMjU4YWUwYzI2YzY1YTZhNjk2NmYzZjdlNjk4NjMzYjkx
NDM0MjYwHhcNMjUwMTAyMDU0ODU2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YWQ1NTdlOTMyNGExNDQyNTFiOWY4ZWZjY2UxOTBlODk0OTIyZmJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0D90TLxApRGsgSWnQGsHlSCT1+yp
16G6B0SlrDaZ6kxSTGzAZPRojIT2LJMcLThwqtoMgA7xiXPeM4DJU6XcfVdKUIQi
Psh+hiGf6jh4JMJCoppdGz5iZ8FU3EmO2uSTJOtkjOvFoeJYiEjjAiT7kHIQLpe3
6Qh3MFThM027dozrwzosuNjepLx2Po7uJOC50Djn5g6xHs13QurdysLoYVTb1uWZ
5bvgfNTbmRk+89u1L2ks510CfClGyFbX3tHOKU8opax60qXb30SDhdIiScbicGN9
L5apayxMWCweKEYhfqM1CeHi85o343F8TcZDsetAgR14vdObz/pMGNrbFQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHrVV+kyShRCUbn478zhkOiUki+8MB8GA1UdIwQY
MBaAFBAliuDCbGWmppZvP35phjO5FDQmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRUNXSzRNSnNaYWFtbG04X2ZtbUdNN2tVTkNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8xMzQxYTctMWNlNi00M2I5LWJmNzYt
ZWY3ZThkNDQzNGYzLzEvZXRWWDZUSktGRUpSdWZqdnpPR1E2SlNTTDd3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8xMzQxYTctMWNlNi00M2I5LWJmNzYtZWY3ZThkNDQzNGYz
LzEvRUNXSzRNSnNaYWFtbG04X2ZtbUdNN2tVTkNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+R2MA0G
CSqGSIb3DQEBCwUAA4IBAQBHaX6g1orc5GxoQCyqsNGQsHHKrmFD1Pk8WQiHHvRw
j7ieXQctya2FDaBaBcCWXWQRQSBTCHAbb0O9HW+U+jkhPfuIT3jvTyxhRdN4pXIE
Z+zv1VBfexPfonURkzHfYOmDwxSbNQqBjpUTQw4o9L0FuwNcl2jp84XcXaHw2Gr6
SMq2f+Ms4Gm2HquCjyJU/8IauCbNXUcP5YEHBT9jD7cgKMhGACb2XB3XFyG+cpjO
6BAcQJR0aIm6G0wvNbM3bL2Cy2gN8AAF1urSQOrYVf4rAjUJxSHgUAFcAt3CX/68
4GOMo+Ozmto1k3JZ00Hecpj9hWMnlD/KdvYpSlZ3y88s
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:51:26 2025 by rpki-client