Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/2XUfaTirVUXiz634l6yJgIfFd-w.roa
File: 2XUfaTirVUXiz634l6yJgIfFd-w.roa (raw, json)
Hash identifier: GVtKnxVhn05fl8oago4Thd0oyWhI+oUJ9lxXzUd8jx4=
Subject key identifier: D9:75:1F:69:38:AB:55:45:E2:CF:AD:F8:97:AC:89:80:87:C5:77:EC
Certificate issuer: /CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Certificate serial: 019425FC11A4952C1D70464CD03F865FDAC1
Authority key identifier: 2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/2XUfaTirVUXiz634l6yJgIfFd-w.roa
Signing time: Thu 02 Jan 2025 07:47:44 +0000
ROA not before: Thu 02 Jan 2025 07:47:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198657
IP address blocks: 91.237.236.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:11:a4:95:2c:1d:70:46:4c:d0:3f:86:5f:da:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f2709cb399c4e168ccbda16db136b5bc8b96dd6
Validity
Not Before: Jan 2 07:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d9751f6938ab5545e2cfadf897ac898087c577ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5c:e1:79:36:d4:d4:63:3b:bd:9d:5e:a6:74:
f9:71:45:de:ac:64:c4:c2:eb:b6:8b:67:9f:b5:eb:
bf:e1:66:62:a3:82:82:c9:19:74:ef:cc:b1:0f:69:
b3:a9:c0:1c:9e:c7:7f:12:c4:93:21:5b:54:f7:fb:
44:2b:63:21:19:16:1a:8b:60:bb:18:30:49:4c:ea:
69:4d:39:0e:a6:63:17:aa:0c:7e:96:e7:97:f0:da:
f4:03:1c:4b:18:12:26:1e:85:4c:1b:4d:14:f0:97:
2e:8d:1b:9e:20:b1:2b:19:43:a5:13:98:11:42:a9:
98:66:9e:9f:d9:95:65:1f:9f:74:52:cf:31:a9:0b:
1c:ec:19:13:6c:d8:b8:aa:c0:5e:e9:49:c5:72:d8:
56:c2:d3:ef:40:18:84:c6:e2:11:f5:4a:4f:3a:63:
22:b1:e5:1f:1f:15:c5:02:54:fd:bd:20:b0:de:9f:
73:c1:93:df:e4:77:22:24:4c:81:a0:28:f1:4d:1d:
77:b7:8e:43:cc:0d:0d:14:3b:d5:4b:60:67:b4:d1:
1f:30:04:5b:15:42:b2:f8:48:ef:dd:6e:24:5a:e8:
10:b5:50:14:18:e9:85:79:68:52:4f:75:ce:af:29:
ec:14:53:da:be:16:07:e1:47:71:5d:e7:71:2b:4e:
b4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:75:1F:69:38:AB:55:45:E2:CF:AD:F8:97:AC:89:80:87:C5:77:EC
X509v3 Authority Key Identifier:
keyid:2F:27:09:CB:39:9C:4E:16:8C:CB:DA:16:DB:13:6B:5B:C8:B9:6D:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LycJyzmcThaMy9oW2xNrW8i5bdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/2XUfaTirVUXiz634l6yJgIfFd-w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/f83781-2949-48c7-8900-20167cd42b82/1/LycJyzmcThaMy9oW2xNrW8i5bdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.236.0/22
Signature Algorithm: sha256WithRSAEncryption
6b:0f:34:51:ca:f1:eb:cb:84:41:f5:02:2e:38:97:1e:03:42:
05:0d:b6:fa:72:36:f7:3f:02:0e:7f:e2:cc:e6:11:40:2f:83:
53:16:f7:d1:8d:ca:a6:e3:64:95:63:d2:2a:d5:cb:ba:e6:0a:
8b:57:a1:7c:29:71:ef:7f:04:41:f6:ad:fa:80:e5:fd:0f:a9:
1e:55:c4:61:41:3c:e1:8d:d6:cd:55:61:b3:8b:47:48:af:c8:
f0:8e:4b:21:82:54:56:59:e0:e3:c0:d1:2f:d2:72:8c:8b:45:
e3:24:8e:3e:60:9b:a9:61:58:92:60:dd:fa:bc:67:8f:a7:55:
c7:3e:08:ee:f7:6c:9b:20:e7:ad:fb:5b:ee:36:9b:d5:d7:f6:
00:3e:8e:0d:bc:63:a4:04:29:58:91:15:aa:09:0f:de:2e:e5:
57:2f:6a:5f:5c:68:93:d4:fb:b9:d7:bd:3c:70:e7:3f:ee:75:
6f:6b:f2:b4:7d:20:d8:d9:87:ca:7e:97:5c:a2:0f:2e:89:43:
42:43:88:60:39:73:86:be:2b:de:94:1a:75:3c:67:d1:d0:1e:
dc:f7:0b:a1:91:95:dd:f4:42:54:7d:dd:3e:b1:9b:a8:0a:de:
6d:0c:26:a4:4d:42:39:d0:9c:b8:36:3e:8e:f2:3f:f6:f1:90:
ba:aa:f7:06
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQl/BGklSwdcEZM0D+GX9rBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmMjcwOWNiMzk5YzRlMTY4Y2NiZGExNmRiMTM2YjViYzhi
OTZkZDYwHhcNMjUwMTAyMDc0NzQ0WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTc1MWY2OTM4YWI1NTQ1ZTJjZmFkZjg5N2FjODk4MDg3YzU3N2VjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolzheTbU1GM7vZ1epnT5cUXerGTE
wuu2i2efteu/4WZio4KCyRl078yxD2mzqcAcnsd/EsSTIVtU9/tEK2MhGRYai2C7
GDBJTOppTTkOpmMXqgx+lueX8Nr0AxxLGBImHoVMG00U8JcujRueILErGUOlE5gR
QqmYZp6f2ZVlH590Us8xqQsc7BkTbNi4qsBe6UnFcthWwtPvQBiExuIR9UpPOmMi
seUfHxXFAlT9vSCw3p9zwZPf5HciJEyBoCjxTR13t45DzA0NFDvVS2BntNEfMARb
FUKy+Ejv3W4kWugQtVAUGOmFeWhST3XOrynsFFPavhYH4UdxXedxK060uQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNl1H2k4q1VF4s+t+JesiYCHxXfsMB8GA1UdIwQY
MBaAFC8nCcs5nE4WjMvaFtsTa1vIuW3WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTHljSnl6bWNUaGFNeTlvVzJ4TnJXOGk1YmRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9mODM3ODEtMjk0OS00OGM3LTg5MDAt
MjAxNjdjZDQyYjgyLzEvMlhVZmFUaXJWVVhpejYzNGw2eUpnSWZGZC13LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9mODM3ODEtMjk0OS00OGM3LTg5MDAtMjAxNjdjZDQyYjgy
LzEvTHljSnl6bWNUaGFNeTlvVzJ4TnJXOGk1YmRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+3sMA0G
CSqGSIb3DQEBCwUAA4IBAQBrDzRRyvHry4RB9QIuOJceA0IFDbb6cjb3PwIOf+LM
5hFAL4NTFvfRjcqm42SVY9Iq1cu65gqLV6F8KXHvfwRB9q36gOX9D6keVcRhQTzh
jdbNVWGzi0dIr8jwjkshglRWWeDjwNEv0nKMi0XjJI4+YJupYViSYN36vGePp1XH
Pgju92ybIOet+1vuNpvV1/YAPo4NvGOkBClYkRWqCQ/eLuVXL2pfXGiT1Pu51708
cOc/7nVva/K0fSDY2YfKfpdcog8uiUNCQ4hgOXOGvivelBp1PGfR0B7c9wuhkZXd
9EJUfd0+sZuoCt5tDCakTUI50Jy4Nj6O8j/28ZC6qvcG
-----END CERTIFICATE-----
Generated at Fri Apr 25 09:54:52 2025 by rpki-client