Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/Ol4H0Ofe0seTJhjp23zwbv14mcA.roa
File: Ol4H0Ofe0seTJhjp23zwbv14mcA.roa (raw, json)
Hash identifier: h0M7hTbR8JXwLU22tU4Fw/p8crplmJ6JisUg1rjxv0k=
Subject key identifier: 3A:5E:07:D0:E7:DE:D2:C7:93:26:18:E9:DB:7C:F0:6E:FD:78:99:C0
Certificate issuer: /CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6
Certificate serial: 019421B20D850E27E0830E20ED5EE677141C
Authority key identifier: B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/Ol4H0Ofe0seTJhjp23zwbv14mcA.roa
Signing time: Wed 01 Jan 2025 11:48:24 +0000
ROA not before: Wed 01 Jan 2025 11:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31734
IP address blocks: 91.208.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:0d:85:0e:27:e0:83:0e:20:ed:5e:e6:77:14:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b22dd06501f99d47022d3a4039efcf439d0bc7e6
Validity
Not Before: Jan 1 11:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3a5e07d0e7ded2c7932618e9db7cf06efd7899c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:8e:86:08:7e:16:41:04:c1:73:93:32:92:c5:
d4:e4:24:fa:9a:13:4e:c3:d5:d6:49:f3:cc:e4:a7:
71:0e:aa:63:af:0c:6d:88:31:f5:94:29:2a:79:29:
8b:0f:1d:bc:36:58:c6:fe:3b:45:1d:8c:1d:40:aa:
cd:48:1c:e1:f7:c6:4e:22:e7:21:fd:8c:03:d4:6e:
dd:3d:42:eb:00:dd:48:06:8c:79:58:2d:9d:20:62:
c4:77:5e:79:c4:4a:8c:1c:82:ce:a0:15:9f:03:9e:
4e:ce:04:35:58:34:3c:b8:d7:1f:6d:12:6b:e5:d4:
83:61:0a:04:09:5a:64:60:08:1e:ce:36:f4:f5:60:
84:b6:b5:a0:eb:55:04:54:d5:a4:6f:30:f8:2a:49:
85:33:2c:cb:b1:8d:4d:e0:3f:ae:68:d3:e4:9c:55:
dd:db:5d:81:08:6d:04:b4:52:32:48:d9:32:a5:c6:
82:28:db:73:15:cb:f1:1e:44:d8:ad:96:54:0b:28:
65:ce:58:b5:63:4d:70:63:b5:51:17:7d:f9:c8:ce:
3b:59:c6:74:a0:9f:cf:c6:c6:17:1a:84:d4:27:eb:
05:94:fe:50:29:c0:9f:ad:60:04:98:e6:80:8a:15:
e9:86:7b:e3:a6:72:1a:b3:b9:9c:46:46:ab:c9:12:
83:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:5E:07:D0:E7:DE:D2:C7:93:26:18:E9:DB:7C:F0:6E:FD:78:99:C0
X509v3 Authority Key Identifier:
keyid:B2:2D:D0:65:01:F9:9D:47:02:2D:3A:40:39:EF:CF:43:9D:0B:C7:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/Ol4H0Ofe0seTJhjp23zwbv14mcA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/202633-c690-48e5-9613-711ffdf91698/1/si3QZQH5nUcCLTpAOe_PQ50Lx-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.223.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:63:77:3a:70:6b:98:41:74:db:fc:7c:c7:98:82:56:a4:b9:
cf:da:76:bb:49:e6:68:0a:d4:9e:11:9d:b6:5d:50:e8:6e:cd:
17:41:5d:2b:12:6d:94:74:d4:3a:53:53:ed:23:dd:84:64:24:
b5:fb:92:f7:63:7d:43:31:65:88:41:ac:d4:cb:a9:3d:92:ed:
d7:78:a6:18:53:3a:a5:18:a4:1e:2b:6f:b0:4c:85:11:a2:f5:
88:7c:0a:a7:64:ea:d7:20:7e:32:a9:a5:20:71:56:24:08:ec:
d0:98:4d:bb:a9:6a:77:2a:eb:7e:82:60:3e:da:94:d1:9a:e2:
d2:37:c9:d3:e3:ff:d4:a7:41:26:0c:82:6f:dd:05:12:11:9f:
4f:99:aa:39:ab:f4:ce:2e:4e:46:df:96:ab:28:45:af:8d:33:
10:72:1d:ba:b9:52:64:78:ac:9f:24:21:39:f5:25:d0:be:e3:
17:4f:01:ad:ca:fa:88:02:f4:11:77:00:aa:f2:f2:27:50:54:
52:d8:6e:0c:9b:20:1c:22:03:86:e1:8e:2f:e2:56:41:b0:02:
14:cc:85:cd:b4:e7:8f:ee:12:58:e5:ad:dc:0b:43:dc:7d:62:
5f:6d:1a:a7:9e:b3:d5:ad:69:51:10:29:db:9b:23:d2:d9:c6:
f9:a7:6c:d8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsg2FDifggw4g7V7mdxQcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyMmRkMDY1MDFmOTlkNDcwMjJkM2E0MDM5ZWZjZjQzOWQw
YmM3ZTYwHhcNMjUwMTAxMTE0ODI0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTVlMDdkMGU3ZGVkMmM3OTMyNjE4ZTlkYjdjZjA2ZWZkNzg5OWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+I6GCH4WQQTBc5MyksXU5CT6mhNO
w9XWSfPM5KdxDqpjrwxtiDH1lCkqeSmLDx28NljG/jtFHYwdQKrNSBzh98ZOIuch
/YwD1G7dPULrAN1IBox5WC2dIGLEd155xEqMHILOoBWfA55OzgQ1WDQ8uNcfbRJr
5dSDYQoECVpkYAgezjb09WCEtrWg61UEVNWkbzD4KkmFMyzLsY1N4D+uaNPknFXd
212BCG0EtFIySNkypcaCKNtzFcvxHkTYrZZUCyhlzli1Y01wY7VRF335yM47WcZ0
oJ/PxsYXGoTUJ+sFlP5QKcCfrWAEmOaAihXphnvjpnIas7mcRkaryRKDIwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDpeB9Dn3tLHkyYY6dt88G79eJnAMB8GA1UdIwQY
MBaAFLIt0GUB+Z1HAi06QDnvz0OdC8fmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2kzUVpRSDVuVWNDTFRwQU9lX1BRNTBMeC1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yMDI2MzMtYzY5MC00OGU1LTk2MTMt
NzExZmZkZjkxNjk4LzEvT2w0SDBPZmUwc2VUSmhqcDIzendidjE0bWNBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yMDI2MzMtYzY5MC00OGU1LTk2MTMtNzExZmZkZjkxNjk4
LzEvc2kzUVpRSDVuVWNDTFRwQU9lX1BRNTBMeC1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9DfMA0G
CSqGSIb3DQEBCwUAA4IBAQAfY3c6cGuYQXTb/HzHmIJWpLnP2na7SeZoCtSeEZ22
XVDobs0XQV0rEm2UdNQ6U1PtI92EZCS1+5L3Y31DMWWIQazUy6k9ku3XeKYYUzql
GKQeK2+wTIURovWIfAqnZOrXIH4yqaUgcVYkCOzQmE27qWp3Kut+gmA+2pTRmuLS
N8nT4//Up0EmDIJv3QUSEZ9Pmao5q/TOLk5G35arKEWvjTMQch26uVJkeKyfJCE5
9SXQvuMXTwGtyvqIAvQRdwCq8vInUFRS2G4MmyAcIgOG4Y4v4lZBsAIUzIXNtOeP
7hJY5a3cC0PcfWJfbRqnnrPVrWlRECnbmyPS2cb5p2zY
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:37:57 2025 by rpki-client