Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/5e4d05-ce79-4f7f-8a95-46cd28316aa7/1/_h_mzD48e8HDzNg5k5LS-QfIKhM.roa
File: _h_mzD48e8HDzNg5k5LS-QfIKhM.roa (raw, json)
Hash identifier: KkcKm266SCOSV6exw0wmCCx2tpiEDOiM8+ZTmV+6A4c=
Subject key identifier: FE:1F:E6:CC:3E:3C:7B:C1:C3:CC:D8:39:93:92:D2:F9:07:C8:2A:13
Certificate issuer: /CN=e83c7507faff0f4126813851e927e8fb09fb7a6f
Certificate serial: 0194266BCE7C03A187AAB740D63B86346135
Authority key identifier: E8:3C:75:07:FA:FF:0F:41:26:81:38:51:E9:27:E8:FB:09:FB:7A:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6Dx1B_r_D0EmgThR6Sfo-wn7em8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/5e4d05-ce79-4f7f-8a95-46cd28316aa7/1/_h_mzD48e8HDzNg5k5LS-QfIKhM.roa
Signing time: Thu 02 Jan 2025 09:49:46 +0000
ROA not before: Thu 02 Jan 2025 09:49:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198530
IP address blocks: 91.236.16.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:ce:7c:03:a1:87:aa:b7:40:d6:3b:86:34:61:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e83c7507faff0f4126813851e927e8fb09fb7a6f
Validity
Not Before: Jan 2 09:49:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fe1fe6cc3e3c7bc1c3ccd8399392d2f907c82a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:21:2a:cb:ea:d4:64:b6:7d:ac:39:20:b5:75:
00:39:70:68:09:c2:65:80:ba:6a:88:98:3b:ee:d8:
f5:b4:62:26:dc:9c:66:c5:2a:b8:dc:8f:c7:5b:32:
af:60:83:f9:c1:2d:54:36:d1:87:ec:c2:6e:3f:4b:
fe:c4:f2:02:4d:90:26:42:d9:f5:b6:1e:9a:a0:f4:
50:52:77:b1:54:ae:96:c1:bb:63:87:77:fc:f2:5d:
9b:e9:0b:fc:e9:b6:01:44:c2:b9:1f:75:02:56:1f:
45:a5:57:a5:b5:6f:d1:88:0f:47:8f:f3:de:3c:54:
0d:5b:56:ef:d5:87:3e:9f:e8:8c:f5:c4:e4:95:a2:
68:38:be:5a:c9:ae:ff:7a:1a:f1:66:f1:ee:fc:53:
a2:de:1d:c3:cb:09:11:1f:7d:44:a2:77:f9:19:ea:
91:f6:c3:d9:35:62:f1:8f:96:1d:08:4c:5f:88:d7:
5a:ff:df:42:28:20:fd:14:31:44:46:f0:f4:b0:54:
81:b9:f5:ac:57:15:31:01:5e:c3:d1:10:5c:e9:d0:
00:ac:a2:8c:b9:b6:ab:1b:5a:45:35:7f:4a:b5:b7:
f6:78:a4:d6:b1:f7:90:a9:f5:9e:fc:d5:e9:da:fa:
fa:6c:cf:ba:38:be:2a:2e:75:fa:5d:63:8e:74:f2:
cd:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:1F:E6:CC:3E:3C:7B:C1:C3:CC:D8:39:93:92:D2:F9:07:C8:2A:13
X509v3 Authority Key Identifier:
keyid:E8:3C:75:07:FA:FF:0F:41:26:81:38:51:E9:27:E8:FB:09:FB:7A:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6Dx1B_r_D0EmgThR6Sfo-wn7em8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e4d05-ce79-4f7f-8a95-46cd28316aa7/1/_h_mzD48e8HDzNg5k5LS-QfIKhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/5e4d05-ce79-4f7f-8a95-46cd28316aa7/1/6Dx1B_r_D0EmgThR6Sfo-wn7em8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.16.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:85:59:0b:fa:46:f9:54:37:a2:f1:7d:57:b7:f0:18:89:1f:
19:3c:5f:78:f0:2c:9f:f2:de:05:7a:bd:c5:6a:ad:1b:b7:00:
b2:8a:74:8b:5c:a4:be:61:da:63:93:02:d7:ab:63:e4:cc:62:
6c:61:ea:ff:ae:a7:5c:b7:da:d8:53:bf:87:1a:39:8f:f3:16:
44:e8:1d:1b:5a:70:cb:66:54:82:de:29:eb:75:e7:7e:65:17:
e1:57:d4:49:c5:64:31:10:c3:e8:31:f4:f5:75:f2:0a:b8:c0:
a1:56:83:da:ef:b9:cd:ce:fb:d6:52:c2:f8:0f:bd:d0:da:42:
c6:74:cc:1c:e1:19:21:3c:ea:b5:3b:71:c7:5d:5b:13:cc:ae:
35:66:ec:cc:e1:65:48:97:5d:f1:09:45:4f:eb:fd:5f:64:6a:
46:57:ba:08:e6:54:3e:42:11:2d:5a:7c:3d:61:f5:92:e3:92:
e1:f4:8f:e5:97:b1:0d:b4:91:67:09:51:85:73:3a:f9:d3:bb:
8e:94:35:68:9e:d8:07:77:2e:5b:dc:96:dc:8c:79:07:f8:a1:
09:e0:26:77:a7:23:57:fd:ff:27:a3:be:4b:bc:67:7b:ac:6c:
09:55:d2:8b:d9:72:71:f7:c0:e3:93:16:95:58:ac:a2:c7:ed:
e8:df:85:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma858A6GHqrdA1juGNGE1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4M2M3NTA3ZmFmZjBmNDEyNjgxMzg1MWU5MjdlOGZiMDlm
YjdhNmYwHhcNMjUwMTAyMDk0OTQ2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZTFmZTZjYzNlM2M3YmMxYzNjY2Q4Mzk5MzkyZDJmOTA3YzgyYTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yEqy+rUZLZ9rDkgtXUAOXBoCcJl
gLpqiJg77tj1tGIm3JxmxSq43I/HWzKvYIP5wS1UNtGH7MJuP0v+xPICTZAmQtn1
th6aoPRQUnexVK6Wwbtjh3f88l2b6Qv86bYBRMK5H3UCVh9FpVeltW/RiA9Hj/Pe
PFQNW1bv1Yc+n+iM9cTklaJoOL5aya7/ehrxZvHu/FOi3h3DywkRH31Eonf5GeqR
9sPZNWLxj5YdCExfiNda/99CKCD9FDFERvD0sFSBufWsVxUxAV7D0RBc6dAArKKM
ubarG1pFNX9Ktbf2eKTWsfeQqfWe/NXp2vr6bM+6OL4qLnX6XWOOdPLNSwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP4f5sw+PHvBw8zYOZOS0vkHyCoTMB8GA1UdIwQY
MBaAFOg8dQf6/w9BJoE4Uekn6PsJ+3pvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkR4MUJfcl9EMEVtZ1RoUjZTZm8td243ZW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC81ZTRkMDUtY2U3OS00ZjdmLThhOTUt
NDZjZDI4MzE2YWE3LzEvX2hfbXpENDhlOEhEek5nNWs1TFMtUWZJS2hNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC81ZTRkMDUtY2U3OS00ZjdmLThhOTUtNDZjZDI4MzE2YWE3
LzEvNkR4MUJfcl9EMEVtZ1RoUjZTZm8td243ZW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+wQMA0G
CSqGSIb3DQEBCwUAA4IBAQCehVkL+kb5VDei8X1Xt/AYiR8ZPF948Cyf8t4Fer3F
aq0btwCyinSLXKS+YdpjkwLXq2PkzGJsYer/rqdct9rYU7+HGjmP8xZE6B0bWnDL
ZlSC3inrded+ZRfhV9RJxWQxEMPoMfT1dfIKuMChVoPa77nNzvvWUsL4D73Q2kLG
dMwc4RkhPOq1O3HHXVsTzK41ZuzM4WVIl13xCUVP6/1fZGpGV7oI5lQ+QhEtWnw9
YfWS45Lh9I/ll7ENtJFnCVGFczr507uOlDVontgHdy5b3JbcjHkH+KEJ4CZ3pyNX
/f8no75LvGd7rGwJVdKL2XJx98DjkxaVWKyix+3o34Wk
-----END CERTIFICATE-----
Generated at Fri Apr 25 20:47:15 2025 by rpki-client