Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/F-cO8DY5we3ruehpt1DdaGZTJLY.roa
File: F-cO8DY5we3ruehpt1DdaGZTJLY.roa (raw, json)
Hash identifier: LAS644NvWoPgwtaziFP441ODeculzXhcaX+rYlVwp50=
Subject key identifier: 17:E7:0E:F0:36:39:C1:ED:EB:B9:E8:69:B7:50:DD:68:66:53:24:B6
Certificate issuer: /CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Certificate serial: 019423D7EF9F5B3C443CCED84488C5DE890C
Authority key identifier: 60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/F-cO8DY5we3ruehpt1DdaGZTJLY.roa
Signing time: Wed 01 Jan 2025 21:49:01 +0000
ROA not before: Wed 01 Jan 2025 21:49:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199284
IP address blocks: 91.137.16.0/20 maxlen: 24
91.137.48.0/22 maxlen: 24
91.137.50.0/23 maxlen: 24
91.137.56.0/21 maxlen: 22
91.137.60.0/22 maxlen: 24
91.137.62.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:ef:9f:5b:3c:44:3c:ce:d8:44:88:c5:de:89:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60ea8385a14fd9967978ae7f06ec4dd52229a44a
Validity
Not Before: Jan 1 21:49:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17e70ef03639c1edebb9e869b750dd68665324b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1e:5e:69:f4:55:9a:b4:d6:ae:d9:f6:ab:fa:
92:33:e7:54:3a:36:81:59:60:b2:9e:25:df:c0:d3:
fb:94:08:0c:4b:11:3f:c3:ce:90:14:af:fb:0f:d6:
ad:b4:4b:49:e5:40:36:fe:b7:4b:78:d5:46:30:f9:
45:7f:45:47:a4:30:36:06:a2:6a:a3:ba:80:67:48:
af:fd:35:07:bf:c5:66:e7:2b:ff:0b:80:6c:dc:b7:
00:5b:6e:fb:10:d4:aa:d0:36:31:fb:42:46:cf:0f:
b0:97:db:38:4b:40:71:74:8d:fd:6d:8c:f2:c5:c5:
55:af:60:85:65:d7:10:5f:d0:12:bc:27:f1:71:a5:
02:c7:15:f0:2f:4e:b5:25:30:33:d0:38:4d:d9:85:
4f:4d:e8:b5:3d:d0:25:0f:be:e5:4e:37:a2:35:4e:
fb:1d:65:01:13:77:b5:09:c9:67:6b:ea:5c:bd:c6:
d6:af:3e:b4:d9:31:30:eb:84:73:2e:4d:47:9c:b4:
3e:ac:ca:d1:52:2a:87:fe:a3:d5:ce:05:84:b9:13:
7e:d6:d9:f3:b7:dc:dd:6e:1f:32:df:f9:04:51:c7:
e6:fd:5c:22:6d:a0:bc:33:8b:09:dc:9d:f4:a0:6e:
2c:16:0d:be:94:d6:9e:5c:0d:04:cd:af:e3:50:37:
36:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E7:0E:F0:36:39:C1:ED:EB:B9:E8:69:B7:50:DD:68:66:53:24:B6
X509v3 Authority Key Identifier:
keyid:60:EA:83:85:A1:4F:D9:96:79:78:AE:7F:06:EC:4D:D5:22:29:A4:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/F-cO8DY5we3ruehpt1DdaGZTJLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0330fb-95d1-4302-bea1-f54577f7cc0f/1/YOqDhaFP2ZZ5eK5_BuxN1SIppEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.137.16.0/20
91.137.48.0/22
91.137.56.0/21
Signature Algorithm: sha256WithRSAEncryption
61:ec:41:a8:e7:d7:a0:7d:17:be:2c:61:b4:ef:1a:7b:90:1a:
7e:0d:c7:4c:30:f2:4c:7d:fc:fb:12:71:1f:d9:b9:2a:4d:c0:
f6:57:2a:c6:be:04:3c:af:64:15:4a:b5:ce:a6:50:dd:f1:bb:
06:4c:ac:e5:18:75:f3:ba:60:2f:6d:bc:94:97:e3:64:67:e1:
c2:f7:f7:29:95:66:9e:99:66:60:60:b8:bc:2e:91:23:5e:0c:
9d:bc:0d:69:ab:06:fc:62:36:2c:19:5c:fb:7c:62:23:9b:97:
c2:44:fd:bc:7b:1f:0b:58:23:2e:0e:60:57:72:25:3e:ad:bc:
1b:3e:a2:d2:e7:97:52:69:a1:2d:d6:47:6a:26:f9:63:42:1a:
df:14:1c:ce:e9:55:23:75:60:2d:6f:16:33:0e:76:6a:a0:ad:
23:f2:81:e5:ee:3f:5a:55:8e:83:76:c5:01:e3:1f:90:44:c0:
96:3f:0f:93:65:e3:9d:03:67:21:14:e3:2b:28:44:c7:cc:cd:
b1:a6:ac:a6:5e:87:c8:cd:1c:c5:d3:6d:b9:10:9a:7b:20:12:
27:dc:3e:26:73:18:4f:5b:2a:f2:fd:a2:3a:da:cb:57:7e:6a:
2e:42:ab:42:d3:cd:6a:de:15:be:39:2c:eb:1e:e0:23:5c:1f:
52:a1:a4:4d
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQj1++fWzxEPM7YRIjF3okMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYwZWE4Mzg1YTE0ZmQ5OTY3OTc4YWU3ZjA2ZWM0ZGQ1MjIy
OWE0NGEwHhcNMjUwMTAxMjE0OTAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxN2U3MGVmMDM2MzljMWVkZWJiOWU4NjliNzUwZGQ2ODY2NTMyNGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB5eafRVmrTWrtn2q/qSM+dUOjaB
WWCyniXfwNP7lAgMSxE/w86QFK/7D9attEtJ5UA2/rdLeNVGMPlFf0VHpDA2BqJq
o7qAZ0iv/TUHv8Vm5yv/C4Bs3LcAW277ENSq0DYx+0JGzw+wl9s4S0BxdI39bYzy
xcVVr2CFZdcQX9ASvCfxcaUCxxXwL061JTAz0DhN2YVPTei1PdAlD77lTjeiNU77
HWUBE3e1Cclna+pcvcbWrz602TEw64RzLk1HnLQ+rMrRUiqH/qPVzgWEuRN+1tnz
t9zdbh8y3/kEUcfm/VwibaC8M4sJ3J30oG4sFg2+lNaeXA0Eza/jUDc2ZQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFBfnDvA2OcHt67noabdQ3WhmUyS2MB8GA1UdIwQY
MBaAFGDqg4WhT9mWeXiufwbsTdUiKaRKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWU9xRGhhRlAyWlo1ZUs1X0J1eE4xU0lwcEVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8wMzMwZmItOTVkMS00MzAyLWJlYTEt
ZjU0NTc3ZjdjYzBmLzEvRi1jTzhEWTV3ZTNydWVocHQxRGRhR1pUSkxZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8wMzMwZmItOTVkMS00MzAyLWJlYTEtZjU0NTc3ZjdjYzBm
LzEvWU9xRGhhRlAyWlo1ZUs1X0J1eE4xU0lwcEVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEW4kQAwQC
W4kwAwQDW4k4MA0GCSqGSIb3DQEBCwUAA4IBAQBh7EGo59egfRe+LGG07xp7kBp+
DcdMMPJMffz7EnEf2bkqTcD2VyrGvgQ8r2QVSrXOplDd8bsGTKzlGHXzumAvbbyU
l+NkZ+HC9/cplWaemWZgYLi8LpEjXgydvA1pqwb8YjYsGVz7fGIjm5fCRP28ex8L
WCMuDmBXciU+rbwbPqLS55dSaaEt1kdqJvljQhrfFBzO6VUjdWAtbxYzDnZqoK0j
8oHl7j9aVY6DdsUB4x+QRMCWPw+TZeOdA2chFOMrKETHzM2xpqymXofIzRzF0225
EJp7IBIn3D4mcxhPWyry/aI62stXfmouQqtC081q3hW+OSzrHuAjXB9SoaRN
-----END CERTIFICATE-----
Generated at Thu Apr 24 22:32:48 2025 by rpki-client