Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/3U1ZWgNoASiRwWRzOTs9a26_aSI.roa
File: 3U1ZWgNoASiRwWRzOTs9a26_aSI.roa (raw, json)
Hash identifier: rfiPEMHu4Dy2ke39aiCtx6HNVMRJPDS81QuXHyTH8CQ=
Subject key identifier: DD:4D:59:5A:03:68:01:28:91:C1:64:73:39:3B:3D:6B:6E:BF:69:22
Certificate issuer: /CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Certificate serial: 01942444EBBEF0738D0AAF3D56452A8368E9
Authority key identifier: 3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/3U1ZWgNoASiRwWRzOTs9a26_aSI.roa
Signing time: Wed 01 Jan 2025 23:48:04 +0000
ROA not before: Wed 01 Jan 2025 23:48:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8454
IP address blocks: 91.213.98.0/24 maxlen: 24
2001:67c:2f78::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:eb:be:f0:73:8d:0a:af:3d:56:45:2a:83:68:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfccd4a00422c865f5093b85bb868c2bb30c469
Validity
Not Before: Jan 1 23:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dd4d595a0368012891c16473393b3d6b6ebf6922
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:62:71:08:ac:02:6b:e0:d4:3f:c4:6e:37:96:
ae:54:29:1a:7c:ab:96:e5:f8:be:0d:5b:94:c3:b2:
6c:3d:ba:d4:69:57:d1:e2:11:65:8d:a1:0d:44:b4:
01:92:7f:35:e2:e6:5c:c9:a6:7f:47:be:3c:ee:72:
8c:f7:7e:64:bf:18:5a:a5:0f:a3:d7:0e:06:8f:a0:
45:60:fe:cb:27:cc:66:3f:ae:2a:7f:b1:b7:50:4b:
d7:da:71:f0:51:9c:72:9a:fa:83:c4:4d:9a:80:e3:
c8:82:bc:89:77:a7:0a:e1:5e:ee:41:46:0a:2c:5a:
b2:0a:ab:fa:b2:5b:b7:d8:ca:4e:aa:95:71:eb:c6:
61:72:09:d8:09:ce:96:d4:9a:e0:14:12:91:c0:4d:
c4:30:3e:ea:c2:ed:9e:aa:29:b4:ed:6f:e1:59:f6:
57:7b:20:a9:95:5e:77:4e:2a:b6:62:fc:a7:f5:c9:
15:72:e2:6f:f2:ed:c6:4e:c0:49:85:4e:2f:25:85:
df:d8:50:56:a4:60:3d:04:05:08:f4:00:d6:1f:91:
a1:ff:cb:e9:76:3c:f4:e6:21:46:6a:1e:23:07:97:
de:22:ac:61:d0:f5:8e:77:a8:27:51:8c:7d:52:8c:
a9:b9:1d:9f:27:42:2a:06:b5:75:2e:50:16:89:8b:
ec:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4D:59:5A:03:68:01:28:91:C1:64:73:39:3B:3D:6B:6E:BF:69:22
X509v3 Authority Key Identifier:
keyid:3B:FC:CD:4A:00:42:2C:86:5F:50:93:B8:5B:B8:68:C2:BB:30:C4:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_zNSgBCLIZfUJO4W7howrswxGk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/3U1ZWgNoASiRwWRzOTs9a26_aSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/ba70f2-b7ac-4346-9d08-63ae0bfc169f/1/O_zNSgBCLIZfUJO4W7howrswxGk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.98.0/24
IPv6:
2001:67c:2f78::/48
Signature Algorithm: sha256WithRSAEncryption
16:7a:e2:da:3a:99:03:b8:5e:64:8f:8a:2f:85:cc:3c:9f:17:
78:86:ab:e9:e6:25:8f:62:08:f6:cf:52:95:a0:a3:d9:4f:2e:
75:db:e6:b0:78:71:64:e5:32:fe:3a:95:bf:8e:6c:f5:7a:ea:
44:ac:96:bb:cf:58:19:0e:51:fd:c7:00:cd:0d:21:dc:93:e7:
60:23:66:66:f5:6c:17:3c:1e:bd:8d:00:28:c6:0d:d3:93:f4:
0d:26:2c:3b:d5:55:68:26:53:eb:eb:a0:30:3d:d0:5c:93:55:
b0:c5:1c:ae:45:11:73:44:e3:e1:03:87:9d:ac:b9:1f:d8:f3:
b8:11:09:f2:81:ef:84:7a:de:fd:90:14:b5:3d:46:30:53:bd:
11:26:0e:f0:ea:a9:49:4f:57:4e:10:50:d6:8e:13:31:36:dc:
a4:2c:e8:cd:92:09:b0:50:4c:57:99:5e:ed:93:e1:fa:06:ae:
a5:03:b7:38:3b:09:2a:c3:d5:51:4c:ca:de:e0:aa:2f:46:54:
3a:14:f0:8d:0f:d6:bd:34:c6:99:2d:68:a1:f2:4d:25:4b:8c:
38:d1:12:28:fb:86:66:f2:a3:64:a6:5e:18:70:79:b4:1c:74:
d1:56:ae:c3:6d:51:5e:0c:ac:14:11:39:20:e5:09:b4:e4:ce:
4c:8f:fe:e7
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAZQkROu+8HONCq89VkUqg2jpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiZmNjZDRhMDA0MjJjODY1ZjUwOTNiODViYjg2OGMyYmIz
MGM0NjkwHhcNMjUwMTAxMjM0ODA0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkZDRkNTk1YTAzNjgwMTI4OTFjMTY0NzMzOTNiM2Q2YjZlYmY2OTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2JxCKwCa+DUP8RuN5auVCkafKuW
5fi+DVuUw7JsPbrUaVfR4hFljaENRLQBkn814uZcyaZ/R7487nKM935kvxhapQ+j
1w4Gj6BFYP7LJ8xmP64qf7G3UEvX2nHwUZxymvqDxE2agOPIgryJd6cK4V7uQUYK
LFqyCqv6slu32MpOqpVx68ZhcgnYCc6W1JrgFBKRwE3EMD7qwu2eqim07W/hWfZX
eyCplV53Tiq2Yvyn9ckVcuJv8u3GTsBJhU4vJYXf2FBWpGA9BAUI9ADWH5Gh/8vp
djz05iFGah4jB5feIqxh0PWOd6gnUYx9UoypuR2fJ0IqBrV1LlAWiYvs+QIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFN1NWVoDaAEokcFkczk7PWtuv2kiMB8GA1UdIwQY
MBaAFDv8zUoAQiyGX1CTuFu4aMK7MMRpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT196TlNnQkNMSVpmVUpPNFc3aG93cnN3eEdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9iYTcwZjItYjdhYy00MzQ2LTlkMDgt
NjNhZTBiZmMxNjlmLzEvM1UxWldnTm9BU2lSd1dSek9UczlhMjZfYVNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9iYTcwZjItYjdhYy00MzQ2LTlkMDgtNjNhZTBiZmMxNjlm
LzEvT196TlNnQkNMSVpmVUpPNFc3aG93cnN3eEdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAW9ViMA8E
AgACMAkDBwAgAQZ8L3gwDQYJKoZIhvcNAQELBQADggEBABZ64to6mQO4XmSPii+F
zDyfF3iGq+nmJY9iCPbPUpWgo9lPLnXb5rB4cWTlMv46lb+ObPV66kSslrvPWBkO
Uf3HAM0NIdyT52AjZmb1bBc8Hr2NACjGDdOT9A0mLDvVVWgmU+vroDA90FyTVbDF
HK5FEXNE4+EDh52suR/Y87gRCfKB74R63v2QFLU9RjBTvREmDvDqqUlPV04QUNaO
EzE23KQs6M2SCbBQTFeZXu2T4foGrqUDtzg7CSrD1VFMyt7gqi9GVDoU8I0P1r00
xpktaKHyTSVLjDjREij7hmbyo2SmXhhwebQcdNFWrsNtUV4MrBQROSDlCbTkzkyP
/uc=
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:11:18 2025 by rpki-client