Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/rrMUUFpVeR29bf5As6_7n50ECNM.roa
File: rrMUUFpVeR29bf5As6_7n50ECNM.roa (raw, json)
Hash identifier: kpYzrs/MH+Fk5UtuYnqob2xS0TbxQg7bm0bqEnSyqG0=
Subject key identifier: AE:B3:14:50:5A:55:79:1D:BD:6D:FE:40:B3:AF:FB:9F:9D:04:08:D3
Certificate issuer: /CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da
Certificate serial: 0194221FB886229DD2842F647370FC032653
Authority key identifier: 30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/rrMUUFpVeR29bf5As6_7n50ECNM.roa
Signing time: Wed 01 Jan 2025 13:48:11 +0000
ROA not before: Wed 01 Jan 2025 13:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48016
IP address blocks: 91.208.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b8:86:22:9d:d2:84:2f:64:73:70:fc:03:26:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3035546ea5b0790549ca0ba1bb2a3e1dbae4a3da
Validity
Not Before: Jan 1 13:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aeb314505a55791dbd6dfe40b3affb9f9d0408d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b1:c7:33:07:9c:da:39:81:92:6a:0b:14:a5:
db:da:51:9d:1b:16:2a:24:11:ec:38:41:13:e2:43:
6d:75:d8:8f:92:89:67:54:ad:cf:68:82:fd:f4:28:
4a:5e:bd:af:6b:dd:95:d7:57:65:c4:04:0a:a6:76:
74:34:3d:10:55:02:63:f2:a8:39:46:09:d0:ce:2f:
1a:3a:7d:05:0c:9a:25:d5:a6:0c:e7:55:52:27:b5:
06:3d:74:86:ec:59:38:87:ad:ab:35:22:85:c7:b8:
ee:5d:66:be:f9:31:7b:e5:48:a3:58:7f:8c:66:80:
13:e6:1c:66:e4:b8:3f:6d:a7:f9:ca:d1:ed:73:0d:
22:00:23:fc:4d:3e:4b:1a:59:36:da:9f:f8:fb:d9:
9e:23:05:84:b3:da:d6:cc:2b:ee:fe:17:36:22:be:
25:73:2f:60:31:30:4e:27:16:bb:81:c7:61:d8:d1:
c7:86:cb:13:83:7b:96:2d:8e:d4:1a:04:6b:c2:ab:
15:41:b3:b6:45:cd:ba:2e:d3:d9:c6:a2:6d:2c:aa:
8b:37:63:8a:a2:25:ad:32:ab:f8:4c:b4:90:00:e3:
90:99:90:67:30:43:07:45:a5:1b:2e:ba:aa:5e:e9:
b8:42:f4:b1:3d:07:68:d9:81:06:50:38:1c:b7:a7:
fe:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B3:14:50:5A:55:79:1D:BD:6D:FE:40:B3:AF:FB:9F:9D:04:08:D3
X509v3 Authority Key Identifier:
keyid:30:35:54:6E:A5:B0:79:05:49:CA:0B:A1:BB:2A:3E:1D:BA:E4:A3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MDVUbqWweQVJyguhuyo-Hbrko9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/rrMUUFpVeR29bf5As6_7n50ECNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/d4dade-caef-4cd0-aef3-004f0cb3ed77/1/MDVUbqWweQVJyguhuyo-Hbrko9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.225.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:3d:e2:0c:fc:c7:04:39:fd:1a:dc:ac:e3:d5:b4:0e:d0:2d:
93:b4:79:c4:00:48:bb:99:b6:1f:c3:97:03:1a:20:f2:62:25:
4c:76:95:0b:48:bb:5c:9f:f5:9e:30:ac:30:e3:b6:d5:f5:2f:
a1:62:e1:a7:0a:11:db:80:08:4b:27:3e:3e:7c:f4:a3:f0:f0:
a7:cb:f9:fc:5f:4c:ac:4b:4f:5a:98:17:90:7a:73:dd:ea:74:
bb:fb:91:fd:2b:4b:7f:fd:6e:a1:60:30:f2:7a:1d:ee:86:52:
d3:55:57:42:d8:65:46:6e:31:45:8b:c2:3f:b6:c7:00:1b:8c:
0e:a8:70:c2:c3:08:a3:56:b6:e8:21:11:92:e0:ea:b0:41:cc:
e8:2a:00:27:fb:85:21:af:90:41:02:28:41:8e:78:87:b7:a8:
7f:fc:b7:28:be:43:f0:0c:7f:e3:37:b2:73:d5:aa:0c:05:58:
c8:d0:cd:c4:8f:3f:5a:bf:f8:ca:de:2f:d9:c6:6a:f7:a2:97:
d7:fb:3c:9a:b8:0a:72:ba:74:cc:a7:2e:b9:c5:79:38:19:e5:
04:0a:8c:74:b1:88:b8:24:87:19:9f:7f:2d:fd:40:c9:f6:b4:
65:c2:dc:f3:8b:fc:9a:87:7a:71:ab:43:37:26:9a:cb:81:c7:
6e:61:17:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH7iGIp3ShC9kc3D8AyZTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMzU1NDZlYTViMDc5MDU0OWNhMGJhMWJiMmEzZTFkYmFl
NGEzZGEwHhcNMjUwMTAxMTM0ODExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWIzMTQ1MDVhNTU3OTFkYmQ2ZGZlNDBiM2FmZmI5ZjlkMDQwOGQzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrHHMwec2jmBkmoLFKXb2lGdGxYq
JBHsOEET4kNtddiPkolnVK3PaIL99ChKXr2va92V11dlxAQKpnZ0ND0QVQJj8qg5
RgnQzi8aOn0FDJol1aYM51VSJ7UGPXSG7Fk4h62rNSKFx7juXWa++TF75UijWH+M
ZoAT5hxm5Lg/baf5ytHtcw0iACP8TT5LGlk22p/4+9meIwWEs9rWzCvu/hc2Ir4l
cy9gMTBOJxa7gcdh2NHHhssTg3uWLY7UGgRrwqsVQbO2Rc26LtPZxqJtLKqLN2OK
oiWtMqv4TLSQAOOQmZBnMEMHRaUbLrqqXum4QvSxPQdo2YEGUDgct6f+5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK6zFFBaVXkdvW3+QLOv+5+dBAjTMB8GA1UdIwQY
MBaAFDA1VG6lsHkFScoLobsqPh265KPaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTURWVWJxV3dlUVZKeWd1aHV5by1IYnJrbzlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC9kNGRhZGUtY2FlZi00Y2QwLWFlZjMt
MDA0ZjBjYjNlZDc3LzEvcnJNVVVGcFZlUjI5YmY1QXM2XzduNTBFQ05NLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC9kNGRhZGUtY2FlZi00Y2QwLWFlZjMtMDA0ZjBjYjNlZDc3
LzEvTURWVWJxV3dlUVZKeWd1aHV5by1IYnJrbzlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9DhMA0G
CSqGSIb3DQEBCwUAA4IBAQA7PeIM/McEOf0a3Kzj1bQO0C2TtHnEAEi7mbYfw5cD
GiDyYiVMdpULSLtcn/WeMKww47bV9S+hYuGnChHbgAhLJz4+fPSj8PCny/n8X0ys
S09amBeQenPd6nS7+5H9K0t//W6hYDDyeh3uhlLTVVdC2GVGbjFFi8I/tscAG4wO
qHDCwwijVrboIRGS4OqwQczoKgAn+4Uhr5BBAihBjniHt6h//LcovkPwDH/jN7Jz
1aoMBVjI0M3Ejz9av/jK3i/Zxmr3opfX+zyauApyunTMpy65xXk4GeUECox0sYi4
JIcZn38t/UDJ9rRlwtzzi/yah3pxq0M3JprLgcduYReJ
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:07:17 2025 by rpki-client