Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/1-DlikylqXiNLfsxUp7xWNcqG9Zo.roa
File: 1-DlikylqXiNLfsxUp7xWNcqG9Zo.roa (raw, json)
Hash identifier: VbRr/OReqs5w+OHxhY9YXuluPoozwY2bo9ixoFMaSnA=
Subject key identifier: F8:39:62:93:29:6A:5E:23:4B:7E:CC:54:A7:BC:56:35:CA:86:F5:9A
Certificate issuer: /CN=d1911510a09979e54e7a14918c0b828b8237f876
Certificate serial: 019422FC0DEE28D0F122995B9B1C64B9E60D
Authority key identifier: D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/1-DlikylqXiNLfsxUp7xWNcqG9Zo.roa
Signing time: Wed 01 Jan 2025 17:48:51 +0000
ROA not before: Wed 01 Jan 2025 17:48:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198245
IP address blocks: 91.232.234.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:0d:ee:28:d0:f1:22:99:5b:9b:1c:64:b9:e6:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1911510a09979e54e7a14918c0b828b8237f876
Validity
Not Before: Jan 1 17:48:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8396293296a5e234b7ecc54a7bc5635ca86f59a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:60:cb:69:13:82:39:d2:4d:3e:f8:de:50:
fd:a6:c1:be:cc:d0:fd:f5:5e:9c:02:8c:f3:13:bc:
e0:af:9b:36:5f:88:96:d1:16:81:bc:52:ec:9c:76:
97:45:07:07:2a:2b:3f:a6:4f:7a:15:98:48:29:ef:
47:ab:b7:77:5c:27:04:16:46:cb:78:f5:06:e5:39:
c2:b3:fc:45:3d:c6:dc:bc:e6:db:ac:90:34:ff:47:
39:d9:21:63:76:25:71:ca:9a:d5:9d:6b:27:42:f9:
63:98:6f:e3:b7:19:45:c8:51:a0:8f:71:f9:95:3c:
97:f5:03:16:6b:1c:86:6a:46:69:fd:ab:ee:2c:f8:
4e:18:3c:3e:57:c9:65:38:f9:a8:2f:0a:3b:78:86:
5f:e9:9d:d9:93:4d:74:a7:32:d6:5c:3e:fb:1d:fe:
32:cb:fa:e3:7f:02:bc:bb:4f:c5:de:29:69:f7:71:
86:08:b9:c9:51:e3:19:9b:2a:18:7c:ac:90:42:0a:
e5:44:64:a4:f5:c8:2e:8a:f1:52:7d:d7:14:c1:b4:
23:37:de:fd:d2:6e:da:ac:02:2c:bd:9e:a6:fb:28:
53:7e:b2:bb:7d:31:a7:f5:40:63:9e:1d:51:83:e2:
1c:62:03:bb:8c:1a:22:10:7a:bc:e8:09:c4:61:ca:
67:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:39:62:93:29:6A:5E:23:4B:7E:CC:54:A7:BC:56:35:CA:86:F5:9A
X509v3 Authority Key Identifier:
keyid:D1:91:15:10:A0:99:79:E5:4E:7A:14:91:8C:0B:82:8B:82:37:F8:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ZEVEKCZeeVOehSRjAuCi4I3-HY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/1-DlikylqXiNLfsxUp7xWNcqG9Zo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/8e7aad-3515-4e1d-8462-8f76bf76cf46/1/0ZEVEKCZeeVOehSRjAuCi4I3-HY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.234.0/24
Signature Algorithm: sha256WithRSAEncryption
30:24:e0:ce:3f:ab:3b:2b:4e:ad:24:50:6c:9d:33:df:0b:47:
5b:6d:fb:95:cb:bd:03:de:ef:85:00:8c:03:17:88:17:0f:51:
72:18:39:e9:88:13:66:aa:1a:7c:28:63:68:f2:c5:a5:16:fc:
9d:34:3b:dd:4e:72:cf:7a:ef:3d:df:83:31:35:2c:f6:46:02:
be:86:ae:97:eb:f0:b9:c3:94:9e:38:1f:4a:3b:52:45:36:8d:
d5:a0:34:01:f5:45:02:ab:2f:0b:d7:66:ec:79:d9:58:02:5c:
ba:79:e6:37:94:db:f7:1f:93:df:f8:a6:27:5b:4d:67:ce:91:
4e:5a:42:25:3d:a5:a3:37:d3:ed:47:5f:29:2e:f5:d5:f3:e8:
c1:bc:2b:22:33:d0:a1:d4:8d:08:34:e4:69:89:21:54:22:90:
e1:9f:1a:82:c4:54:c1:6b:03:36:cb:1a:60:f6:09:39:0a:ce:
f4:ed:31:f9:70:02:2f:85:60:57:c3:29:98:46:55:b5:00:83:
8a:05:3e:41:5f:64:27:42:cd:f4:e8:87:1e:bf:1e:bd:f7:c0:
b3:a2:71:70:9b:07:ce:6f:83:40:82:8b:af:ac:db:14:f9:b4:
10:7d:2c:1a:a8:e7:42:2c:2b:17:e0:e3:6c:ab:05:29:14:0a:
d7:70:34:3b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZQi/A3uKNDxIplbmxxkueYNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxOTExNTEwYTA5OTc5ZTU0ZTdhMTQ5MThjMGI4MjhiODIz
N2Y4NzYwHhcNMjUwMTAxMTc0ODUxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmODM5NjI5MzI5NmE1ZTIzNGI3ZWNjNTRhN2JjNTYzNWNhODZmNTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLRgy2kTgjnSTT743lD9psG+zND9
9V6cAozzE7zgr5s2X4iW0RaBvFLsnHaXRQcHKis/pk96FZhIKe9Hq7d3XCcEFkbL
ePUG5TnCs/xFPcbcvObbrJA0/0c52SFjdiVxyprVnWsnQvljmG/jtxlFyFGgj3H5
lTyX9QMWaxyGakZp/avuLPhOGDw+V8llOPmoLwo7eIZf6Z3Zk010pzLWXD77Hf4y
y/rjfwK8u0/F3ilp93GGCLnJUeMZmyoYfKyQQgrlRGSk9cguivFSfdcUwbQjN979
0m7arAIsvZ6m+yhTfrK7fTGn9UBjnh1Rg+IcYgO7jBoiEHq86AnEYcpnzwIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPg5YpMpal4jS37MVKe8VjXKhvWaMB8GA1UdIwQY
MBaAFNGRFRCgmXnlTnoUkYwLgouCN/h2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFpFVkVLQ1plZVZPZWhTUmpBdUNpNEkzLUhZLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS84ZTdhYWQtMzUxNS00ZTFkLTg0NjIt
OGY3NmJmNzZjZjQ2LzEvMS1EbGlreWxxWGlOTGZzeFVwN3hXTmNxRzlaby5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvOGEvOGU3YWFkLTM1MTUtNGUxZC04NDYyLThmNzZiZjc2Y2Y0
Ni8xLzBaRVZFS0NaZWVWT2VoU1JqQXVDaTRJMy1IWS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvo6jAN
BgkqhkiG9w0BAQsFAAOCAQEAMCTgzj+rOytOrSRQbJ0z3wtHW237lcu9A97vhQCM
AxeIFw9Rchg56YgTZqoafChjaPLFpRb8nTQ73U5yz3rvPd+DMTUs9kYCvoaul+vw
ucOUnjgfSjtSRTaN1aA0AfVFAqsvC9dm7HnZWAJcunnmN5Tb9x+T3/imJ1tNZ86R
TlpCJT2lozfT7UdfKS711fPowbwrIjPQodSNCDTkaYkhVCKQ4Z8agsRUwWsDNssa
YPYJOQrO9O0x+XACL4VgV8MpmEZVtQCDigU+QV9kJ0LN9OiHHr8evffAs6JxcJsH
zm+DQIKLr6zbFPm0EH0sGqjnQiwrF+DjbKsFKRQK13A0Ow==
-----END CERTIFICATE-----
Generated at Fri Apr 25 04:10:31 2025 by rpki-client