Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/f9_4yHGEiJhxZligkSR6T3R3EKU.roa
File: f9_4yHGEiJhxZligkSR6T3R3EKU.roa (raw, json)
Hash identifier: zpcNNRByx6ZecO+EUAONqKSkYOomMoB7CmsUhShj7mY=
Subject key identifier: 7F:DF:F8:C8:71:84:88:98:71:66:58:A0:91:24:7A:4F:74:77:10:A5
Certificate issuer: /CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08
Certificate serial: 019420D59F62783F0C5F9B90C67222B857EF
Authority key identifier: 1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/f9_4yHGEiJhxZligkSR6T3R3EKU.roa
Signing time: Wed 01 Jan 2025 07:47:38 +0000
ROA not before: Wed 01 Jan 2025 07:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 56967
IP address blocks: 91.212.111.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:9f:62:78:3f:0c:5f:9b:90:c6:72:22:b8:57:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bb80b4a3327c583aecdb03cef3f64f33bd59b08
Validity
Not Before: Jan 1 07:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fdff8c871848898716658a091247a4f747710a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:50:70:f4:0d:8a:a5:e0:da:19:c0:53:bf:d4:
f0:77:9b:ad:90:3a:98:f0:58:f5:d1:30:05:85:6a:
a2:f5:10:50:88:73:a0:95:6c:ea:15:eb:89:30:52:
03:82:35:74:07:d1:df:d1:a6:62:6c:72:32:c3:15:
2c:91:38:4a:2d:38:b5:fc:4f:22:ab:8c:20:5c:4e:
bd:4b:56:25:08:d2:7e:33:dd:2c:a9:bb:33:c7:e8:
95:12:6f:66:86:cc:03:9c:c4:c0:79:ec:22:b6:c5:
d8:b0:09:83:b8:2b:73:95:bd:cb:83:a3:1b:25:8e:
ee:23:2b:d9:78:54:12:90:2a:3e:bf:8f:0f:6e:b0:
a6:8e:6a:c5:83:97:fa:6e:ec:f0:91:49:04:33:86:
34:14:1e:64:15:76:2c:2b:50:57:8e:be:98:b6:e8:
5e:ff:11:85:cd:1e:d9:29:b5:aa:b6:a7:45:c0:a5:
44:0a:d6:4b:f0:be:ba:27:c6:81:12:ef:54:4c:1d:
dd:0a:74:7f:37:96:ff:44:78:68:e8:de:ad:f4:a4:
b0:2c:5d:73:68:c1:46:d8:f6:d4:e8:e2:b2:66:36:
31:0c:44:38:54:33:5d:d4:30:a8:07:64:4a:f3:9a:
4f:ec:8a:72:05:69:a0:c6:d1:fd:fe:96:05:e2:ca:
1c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DF:F8:C8:71:84:88:98:71:66:58:A0:91:24:7A:4F:74:77:10:A5
X509v3 Authority Key Identifier:
keyid:1B:B8:0B:4A:33:27:C5:83:AE:CD:B0:3C:EF:3F:64:F3:3B:D5:9B:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G7gLSjMnxYOuzbA87z9k8zvVmwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/f9_4yHGEiJhxZligkSR6T3R3EKU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/5ff89a-2f15-4090-bcc2-807b7c2d6389/1/G7gLSjMnxYOuzbA87z9k8zvVmwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.111.0/24
Signature Algorithm: sha256WithRSAEncryption
05:7a:fb:6b:e2:9d:c8:2e:51:f7:28:10:52:23:8b:68:0c:53:
7d:22:4d:74:aa:4a:8c:29:55:3d:e2:84:41:ed:49:b8:df:cc:
16:35:d7:93:6f:98:96:7a:a7:72:6d:f4:7b:59:c5:44:4d:88:
d2:82:5e:33:ea:fc:c6:ad:62:dd:b2:60:36:7a:79:7c:60:2e:
e6:fb:40:41:02:41:40:e0:f7:6d:5d:00:c4:8b:47:cc:00:16:
46:0b:2b:2d:26:27:40:81:fd:cd:67:e6:8a:ff:d0:5c:a8:d5:
61:92:7f:5e:86:27:e9:75:bb:9a:1b:d1:02:d2:67:60:82:8a:
78:30:ad:d2:8a:4f:0e:08:f7:25:8b:68:93:82:49:5b:41:49:
62:59:04:d8:49:64:2f:ff:8b:e3:aa:6b:41:3f:59:1d:76:f7:
8b:85:ab:9a:dd:81:b3:a5:ca:da:f9:cd:ce:5b:ad:64:44:9d:
88:73:30:a8:de:6a:99:5d:6f:1b:f1:28:28:28:3b:62:ee:af:
4a:7e:df:b1:c3:b8:49:93:08:fb:95:9d:d4:28:e8:2b:9f:06:
95:b2:41:2c:44:37:1a:fe:7c:20:72:1b:5b:0f:d2:c0:49:9c:
7c:85:6f:54:b7:10:5f:6b:93:0b:e6:bb:06:ff:de:93:36:e8:
13:c1:b7:70
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1Z9ieD8MX5uQxnIiuFfvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiYjgwYjRhMzMyN2M1ODNhZWNkYjAzY2VmM2Y2NGYzM2Jk
NTliMDgwHhcNMjUwMTAxMDc0NzM4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmRmZjhjODcxODQ4ODk4NzE2NjU4YTA5MTI0N2E0Zjc0NzcxMGE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lBw9A2KpeDaGcBTv9Twd5utkDqY
8Fj10TAFhWqi9RBQiHOglWzqFeuJMFIDgjV0B9Hf0aZibHIywxUskThKLTi1/E8i
q4wgXE69S1YlCNJ+M90sqbszx+iVEm9mhswDnMTAeewitsXYsAmDuCtzlb3Lg6Mb
JY7uIyvZeFQSkCo+v48PbrCmjmrFg5f6buzwkUkEM4Y0FB5kFXYsK1BXjr6Ytuhe
/xGFzR7ZKbWqtqdFwKVECtZL8L66J8aBEu9UTB3dCnR/N5b/RHho6N6t9KSwLF1z
aMFG2PbU6OKyZjYxDEQ4VDNd1DCoB2RK85pP7IpyBWmgxtH9/pYF4socHwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH/f+MhxhIiYcWZYoJEkek90dxClMB8GA1UdIwQY
MBaAFBu4C0ozJ8WDrs2wPO8/ZPM71ZsIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzdnTFNqTW54WU91emJBODd6OWs4enZWbXdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS81ZmY4OWEtMmYxNS00MDkwLWJjYzIt
ODA3YjdjMmQ2Mzg5LzEvZjlfNHlIR0VpSmh4WmxpZ2tTUjZUM1IzRUtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MS81ZmY4OWEtMmYxNS00MDkwLWJjYzItODA3YjdjMmQ2Mzg5
LzEvRzdnTFNqTW54WU91emJBODd6OWs4enZWbXdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9RvMA0G
CSqGSIb3DQEBCwUAA4IBAQAFevtr4p3ILlH3KBBSI4toDFN9Ik10qkqMKVU94oRB
7Um438wWNdeTb5iWeqdybfR7WcVETYjSgl4z6vzGrWLdsmA2enl8YC7m+0BBAkFA
4PdtXQDEi0fMABZGCystJidAgf3NZ+aK/9BcqNVhkn9ehifpdbuaG9EC0mdggop4
MK3Sik8OCPcli2iTgklbQUliWQTYSWQv/4vjqmtBP1kddveLhaua3YGzpcra+c3O
W61kRJ2IczCo3mqZXW8b8SgoKDti7q9Kft+xw7hJkwj7lZ3UKOgrnwaVskEsRDca
/nwgchtbD9LASZx8hW9UtxBfa5ML5rsG/96TNugTwbdw
-----END CERTIFICATE-----
Generated at Fri Apr 25 11:39:05 2025 by rpki-client