Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/61Gq7F9HDY76tR6eiEQWqVAvCDc.roa
File: 61Gq7F9HDY76tR6eiEQWqVAvCDc.roa (raw, json)
Hash identifier: UnYiE/hrC17fToVR4tEZHFP7UPTNmsiE/lDxvNs6zSU=
Subject key identifier: EB:51:AA:EC:5F:47:0D:8E:FA:B5:1E:9E:88:44:16:A9:50:2F:08:37
Certificate issuer: /CN=646836c9214faaa16798a93e8773e599534b29d7
Certificate serial: 019423D7C17BC8026A97B2157ED581160E2E
Authority key identifier: 64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/61Gq7F9HDY76tR6eiEQWqVAvCDc.roa
Signing time: Wed 01 Jan 2025 21:48:49 +0000
ROA not before: Wed 01 Jan 2025 21:48:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56958
IP address blocks: 91.132.103.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:c1:7b:c8:02:6a:97:b2:15:7e:d5:81:16:0e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=646836c9214faaa16798a93e8773e599534b29d7
Validity
Not Before: Jan 1 21:48:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eb51aaec5f470d8efab51e9e884416a9502f0837
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:31:99:3d:95:17:ce:31:7d:02:dd:db:1c:2c:
05:6a:1b:25:e1:a5:2a:1d:83:a4:1b:b4:ac:52:49:
a3:d3:64:ca:bd:99:16:af:0a:86:d3:50:e1:24:2a:
af:da:a1:66:bd:5e:48:fc:21:3a:19:25:ea:98:a4:
51:f0:5e:47:0c:ec:cd:cf:bd:89:01:5b:36:b1:be:
e4:85:ef:98:a9:c7:da:49:e5:48:83:15:14:57:89:
9b:64:30:5a:5d:34:01:23:31:13:c1:9e:3b:8a:42:
38:eb:a7:b2:78:9e:66:d6:34:fa:23:4a:85:66:40:
62:8d:0a:aa:11:83:f1:89:e0:86:0e:3c:ef:d4:e0:
2c:d7:05:c1:da:f5:8b:8c:ca:40:b7:c9:d1:9c:7d:
78:7e:02:43:d8:f8:5c:58:4b:e3:d9:e7:fd:44:44:
5c:29:79:06:31:48:d9:47:44:ae:dc:9f:87:e0:54:
ec:37:16:c2:20:13:e9:09:c2:9c:3a:8e:04:da:8b:
fb:29:76:b5:7a:86:e1:c0:de:81:08:3d:94:36:20:
70:2b:1b:46:cf:37:6f:dd:b9:62:bd:fe:08:ad:21:
a1:db:da:ba:8c:0d:92:92:bc:c8:92:88:aa:f9:00:
a9:a9:19:7a:8f:82:1c:cc:d3:46:14:1e:66:65:f7:
4d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:51:AA:EC:5F:47:0D:8E:FA:B5:1E:9E:88:44:16:A9:50:2F:08:37
X509v3 Authority Key Identifier:
keyid:64:68:36:C9:21:4F:AA:A1:67:98:A9:3E:87:73:E5:99:53:4B:29:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/61Gq7F9HDY76tR6eiEQWqVAvCDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/3d947d-5881-42e6-b35f-5e822f310638/1/ZGg2ySFPqqFnmKk-h3PlmVNLKdc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.103.0/24
Signature Algorithm: sha256WithRSAEncryption
43:c5:d4:8c:77:11:76:ce:0e:80:4e:7d:35:fa:12:2d:54:c5:
9f:bb:a5:2d:38:97:7b:82:b2:60:70:98:75:f6:ee:de:2f:cf:
29:a8:9f:bf:a6:c6:7a:e0:41:a0:1b:72:27:7a:47:1b:06:cf:
23:1c:29:0f:f9:b4:1e:1a:4a:b6:9e:d1:f5:ec:50:c4:ed:46:
22:61:e1:59:3d:79:31:9c:3e:62:02:b6:ee:b0:0d:94:5e:ab:
46:1f:3f:39:40:44:d6:7f:d9:5e:d4:88:a6:40:57:e8:1a:ac:
44:1a:77:18:cd:09:f4:f5:55:8c:c3:14:38:cc:8d:a1:a7:88:
aa:35:90:0a:ed:73:51:9b:09:2d:cc:c9:ec:48:c1:0a:c6:96:
68:f9:19:f8:aa:f3:cb:74:49:c7:e0:0c:a0:15:99:f3:c9:e9:
03:b3:8e:7c:1e:1c:f9:f6:c9:3c:5e:13:7f:87:57:6b:ec:d6:
50:17:53:55:5d:2b:18:b1:66:dc:54:6b:01:08:eb:ba:5a:05:
00:a7:60:3a:7d:17:c3:00:68:54:4a:9b:c1:8f:d2:30:be:bd:
48:f7:d8:85:df:a8:8f:9b:f1:89:17:77:d1:37:bd:3f:99:08:
37:09:be:c5:ff:7a:03:71:d0:79:d5:dd:65:af:e9:67:c9:f9:
67:c6:03:cd
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj18F7yAJql7IVftWBFg4uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NjgzNmM5MjE0ZmFhYTE2Nzk4YTkzZTg3NzNlNTk5NTM0
YjI5ZDcwHhcNMjUwMTAxMjE0ODQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYjUxYWFlYzVmNDcwZDhlZmFiNTFlOWU4ODQ0MTZhOTUwMmYwODM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujGZPZUXzjF9At3bHCwFahsl4aUq
HYOkG7SsUkmj02TKvZkWrwqG01DhJCqv2qFmvV5I/CE6GSXqmKRR8F5HDOzNz72J
AVs2sb7khe+YqcfaSeVIgxUUV4mbZDBaXTQBIzETwZ47ikI466eyeJ5m1jT6I0qF
ZkBijQqqEYPxieCGDjzv1OAs1wXB2vWLjMpAt8nRnH14fgJD2PhcWEvj2ef9RERc
KXkGMUjZR0Su3J+H4FTsNxbCIBPpCcKcOo4E2ov7KXa1eobhwN6BCD2UNiBwKxtG
zzdv3blivf4IrSGh29q6jA2SkrzIkoiq+QCpqRl6j4IczNNGFB5mZfdN9QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOtRquxfRw2O+rUenohEFqlQLwg3MB8GA1UdIwQY
MBaAFGRoNskhT6qhZ5ipPodz5ZlTSynXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zZDk0N2QtNTg4MS00MmU2LWIzNWYt
NWU4MjJmMzEwNjM4LzEvNjFHcTdGOUhEWTc2dFI2ZWlFUVdxVkF2Q0RjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zZDk0N2QtNTg4MS00MmU2LWIzNWYtNWU4MjJmMzEwNjM4
LzEvWkdnMnlTRlBxcUZubUtrLWgzUGxtVk5MS2RjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW4RnMA0G
CSqGSIb3DQEBCwUAA4IBAQBDxdSMdxF2zg6ATn01+hItVMWfu6UtOJd7grJgcJh1
9u7eL88pqJ+/psZ64EGgG3InekcbBs8jHCkP+bQeGkq2ntH17FDE7UYiYeFZPXkx
nD5iArbusA2UXqtGHz85QETWf9le1IimQFfoGqxEGncYzQn09VWMwxQ4zI2hp4iq
NZAK7XNRmwktzMnsSMEKxpZo+Rn4qvPLdEnH4AygFZnzyekDs458Hhz59sk8XhN/
h1dr7NZQF1NVXSsYsWbcVGsBCOu6WgUAp2A6fRfDAGhUSpvBj9Iwvr1I99iF36iP
m/GJF3fRN70/mQg3Cb7F/3oDcdB51d1lr+lnyflnxgPN
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:59:13 2025 by rpki-client