Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/m2QATzNu0SRSUTMmrV_23UYzqCU.roa
File: m2QATzNu0SRSUTMmrV_23UYzqCU.roa (raw, json)
Hash identifier: iD9hVdOJHc5GBYHSyd+djF2Re6JSu/DsX978dRZjYtw=
Subject key identifier: 9B:64:00:4F:33:6E:D1:24:52:51:33:26:AD:5F:F6:DD:46:33:A8:25
Certificate issuer: /CN=66719ec516f11540da4c4e7e4b7f5b377d9fd25b
Certificate serial: 019424B25BA4995FB230E0FD21188B5E7877
Authority key identifier: 66:71:9E:C5:16:F1:15:40:DA:4C:4E:7E:4B:7F:5B:37:7D:9F:D2:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/m2QATzNu0SRSUTMmrV_23UYzqCU.roa
Signing time: Thu 02 Jan 2025 01:47:35 +0000
ROA not before: Thu 02 Jan 2025 01:47:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8685
IP address blocks: 91.195.138.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:5b:a4:99:5f:b2:30:e0:fd:21:18:8b:5e:78:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66719ec516f11540da4c4e7e4b7f5b377d9fd25b
Validity
Not Before: Jan 2 01:47:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9b64004f336ed12452513326ad5ff6dd4633a825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e8:52:cf:ba:00:00:69:8d:78:d0:5f:3e:fa:
d1:e3:08:b2:32:e2:de:a0:1e:cb:bd:33:5c:d2:e4:
4a:33:1b:e9:5b:7e:4a:87:14:61:12:72:a1:18:0b:
02:28:9d:7b:a4:2d:75:30:a0:08:34:73:94:86:04:
a6:5c:75:13:51:b1:84:de:28:18:6f:a9:84:8e:3e:
30:ea:7c:61:91:c4:3f:91:d8:49:71:ab:ec:78:3f:
d8:71:d7:be:0f:08:5f:67:c6:7b:6f:1c:27:7f:4c:
79:d9:0f:cc:53:1f:e2:a8:f9:3e:6b:ce:11:21:18:
07:b5:aa:1a:c6:82:7d:27:3a:b7:16:bd:ef:a4:f5:
7c:70:0e:97:b3:41:9b:80:06:da:e3:5d:97:3a:47:
2b:4a:c6:72:d0:19:54:89:ef:08:5b:c3:f7:65:00:
5a:67:fe:a1:02:fa:cb:6c:05:08:06:f2:1d:40:75:
00:5c:2a:1e:ba:86:bf:3e:aa:f9:c6:f8:44:0b:ec:
c3:c5:4e:11:35:1c:4a:d7:dc:bd:fe:89:b2:4c:3b:
c2:8f:27:61:cc:cc:f0:64:75:ee:d8:75:b0:8c:6c:
7f:42:5c:e1:ed:92:bf:20:3f:16:68:ed:c2:a6:5d:
cb:7b:ca:b5:ca:a2:69:a7:30:6b:9c:7a:62:f2:f2:
63:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:64:00:4F:33:6E:D1:24:52:51:33:26:AD:5F:F6:DD:46:33:A8:25
X509v3 Authority Key Identifier:
keyid:66:71:9E:C5:16:F1:15:40:DA:4C:4E:7E:4B:7F:5B:37:7D:9F:D2:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZnGexRbxFUDaTE5-S39bN32f0ls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/m2QATzNu0SRSUTMmrV_23UYzqCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/77c074-da25-45e8-9d26-54c16b9cc118/1/ZnGexRbxFUDaTE5-S39bN32f0ls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.138.0/23
Signature Algorithm: sha256WithRSAEncryption
53:e4:3a:45:bf:93:39:b0:d5:48:5e:eb:07:eb:cd:9b:27:41:
0c:ba:8d:76:6b:9a:bc:a6:aa:c2:3e:55:34:b7:05:cf:9b:63:
5f:80:73:79:4a:d3:b2:23:f5:4a:e1:4a:04:5e:68:94:e5:8b:
cf:30:65:4b:88:15:f2:1c:a5:8a:eb:9f:a6:74:f7:a8:67:7f:
da:e4:a9:bb:1a:7d:31:75:c4:01:61:e4:b3:4d:5b:28:49:17:
15:14:ee:78:8d:62:29:16:94:6b:27:32:b3:56:ce:8c:39:cd:
5e:08:e2:f5:9c:69:83:72:73:5b:1b:95:f5:ae:bc:2b:83:4e:
13:58:80:37:60:93:05:3d:b8:c1:38:12:9c:53:aa:8b:d0:24:
b6:d8:72:a0:82:40:8a:f8:58:9f:7c:af:4e:5a:55:44:07:05:
fe:8c:b6:d1:5a:61:98:52:3b:e2:18:33:2f:99:3c:80:d4:67:
9c:94:f5:c4:bd:c2:af:72:7a:00:f6:ad:01:08:79:27:1f:70:
b9:79:07:12:f1:5d:a5:52:ab:9c:f1:70:e0:d9:54:91:5c:f1:
65:ed:20:14:eb:24:d0:7f:42:a6:1b:99:a4:18:24:0f:9b:0e:
69:dc:67:9f:f4:90:b4:10:ff:b8:3b:c3:45:58:0e:25:d2:1c:
03:c5:5b:4a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQkslukmV+yMOD9IRiLXnh3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY2NzE5ZWM1MTZmMTE1NDBkYTRjNGU3ZTRiN2Y1YjM3N2Q5
ZmQyNWIwHhcNMjUwMTAyMDE0NzM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YjY0MDA0ZjMzNmVkMTI0NTI1MTMzMjZhZDVmZjZkZDQ2MzNhODI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvehSz7oAAGmNeNBfPvrR4wiyMuLe
oB7LvTNc0uRKMxvpW35KhxRhEnKhGAsCKJ17pC11MKAINHOUhgSmXHUTUbGE3igY
b6mEjj4w6nxhkcQ/kdhJcavseD/Ycde+DwhfZ8Z7bxwnf0x52Q/MUx/iqPk+a84R
IRgHtaoaxoJ9Jzq3Fr3vpPV8cA6Xs0GbgAba412XOkcrSsZy0BlUie8IW8P3ZQBa
Z/6hAvrLbAUIBvIdQHUAXCoeuoa/Pqr5xvhEC+zDxU4RNRxK19y9/omyTDvCjydh
zMzwZHXu2HWwjGx/Qlzh7ZK/ID8WaO3Cpl3Le8q1yqJppzBrnHpi8vJj/wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJtkAE8zbtEkUlEzJq1f9t1GM6glMB8GA1UdIwQY
MBaAFGZxnsUW8RVA2kxOfkt/Wzd9n9JbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWm5HZXhSYnhGVURhVEU1LVMzOWJOMzJmMGxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC83N2MwNzQtZGEyNS00NWU4LTlkMjYt
NTRjMTZiOWNjMTE4LzEvbTJRQVR6TnUwU1JTVVRNbXJWXzIzVVl6cUNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC83N2MwNzQtZGEyNS00NWU4LTlkMjYtNTRjMTZiOWNjMTE4
LzEvWm5HZXhSYnhGVURhVEU1LVMzOWJOMzJmMGxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8OKMA0G
CSqGSIb3DQEBCwUAA4IBAQBT5DpFv5M5sNVIXusH682bJ0EMuo12a5q8pqrCPlU0
twXPm2NfgHN5StOyI/VK4UoEXmiU5YvPMGVLiBXyHKWK65+mdPeoZ3/a5Km7Gn0x
dcQBYeSzTVsoSRcVFO54jWIpFpRrJzKzVs6MOc1eCOL1nGmDcnNbG5X1rrwrg04T
WIA3YJMFPbjBOBKcU6qL0CS22HKggkCK+FiffK9OWlVEBwX+jLbRWmGYUjviGDMv
mTyA1GeclPXEvcKvcnoA9q0BCHknH3C5eQcS8V2lUquc8XDg2VSRXPFl7SAU6yTQ
f0KmG5mkGCQPmw5p3Gef9JC0EP+4O8NFWA4l0hwDxVtK
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:18:59 2025 by rpki-client