Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/ipQ4XqSuTpQi-re2ZW_sK3VHNnQ.roa
File: ipQ4XqSuTpQi-re2ZW_sK3VHNnQ.roa (raw, json)
Hash identifier: poFgPveu8J3ZCztPp1XhAex84n6Kit4aGgJE9uzT+QM=
Subject key identifier: 8A:94:38:5E:A4:AE:4E:94:22:FA:B7:B6:65:6F:EC:2B:75:47:36:74
Certificate issuer: /CN=927105c9d1fb0690554971f464ca21f4a45c106a
Certificate serial: 019420D64868AA29E3F7B839359864D13B92
Authority key identifier: 92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/ipQ4XqSuTpQi-re2ZW_sK3VHNnQ.roa
Signing time: Wed 01 Jan 2025 07:48:21 +0000
ROA not before: Wed 01 Jan 2025 07:48:21 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49123
IP address blocks: 91.212.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:48:68:aa:29:e3:f7:b8:39:35:98:64:d1:3b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=927105c9d1fb0690554971f464ca21f4a45c106a
Validity
Not Before: Jan 1 07:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8a94385ea4ae4e9422fab7b6656fec2b75473674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:48:34:11:8e:68:31:ef:c2:56:30:f8:8a:6d:
c5:d7:4f:b4:b3:ac:2c:8e:c1:0b:0e:93:99:93:79:
78:ee:44:79:e5:58:6d:b4:73:41:9d:62:c9:4e:72:
3a:d3:de:ce:c9:35:20:8d:5d:5e:09:f8:4b:c7:79:
f7:3b:f0:dc:e6:a2:9e:37:8f:72:f8:fc:12:56:8a:
5c:95:92:1f:c5:14:23:cb:5e:d5:e5:42:c3:3a:8a:
ca:19:64:7c:9d:1d:09:4d:e8:70:68:fe:c2:45:19:
ac:47:57:8d:dc:01:1d:bd:8d:2c:0d:17:6a:97:cb:
a8:e6:94:e4:c4:a4:7b:f7:67:da:05:47:aa:c2:e6:
9a:fb:45:bc:7e:20:84:08:41:66:93:fa:07:5f:66:
ce:0e:8a:e1:b0:ce:9c:d0:c8:72:f3:a4:91:4c:f3:
37:63:30:ed:8a:7e:8b:7b:41:8a:30:bd:eb:92:6f:
07:76:8a:fb:97:75:ac:e4:f1:7d:42:24:78:61:8e:
0e:14:c0:5a:2a:12:a1:69:de:83:7c:56:2d:c9:ba:
7b:57:8e:be:4b:7e:9c:62:87:fe:1c:0f:99:d2:21:
b6:da:dc:30:f3:74:f6:20:6b:b0:e1:c5:7e:aa:c5:
ec:f0:71:2b:37:22:b1:23:09:64:c7:f5:d3:61:4e:
9d:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:94:38:5E:A4:AE:4E:94:22:FA:B7:B6:65:6F:EC:2B:75:47:36:74
X509v3 Authority Key Identifier:
keyid:92:71:05:C9:D1:FB:06:90:55:49:71:F4:64:CA:21:F4:A4:5C:10:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/knEFydH7BpBVSXH0ZMoh9KRcEGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/ipQ4XqSuTpQi-re2ZW_sK3VHNnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/0c9d80-43a5-453a-ad25-4ee92ee1e0cd/1/knEFydH7BpBVSXH0ZMoh9KRcEGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.143.0/24
Signature Algorithm: sha256WithRSAEncryption
06:23:a1:d6:0f:01:9a:57:5c:78:4b:ef:09:db:6b:bc:69:30:
48:2e:c9:26:0e:89:2e:15:7f:b3:62:93:b2:10:ce:fd:9f:e6:
e7:76:7e:17:5e:3a:6c:77:c0:d6:bf:67:23:84:ad:6a:10:69:
40:56:38:15:d7:08:7d:d5:4a:88:54:64:07:82:05:19:e8:f9:
6e:39:e5:4b:36:6b:bb:26:fb:f5:56:90:2a:38:fc:61:60:b3:
f2:f1:4f:e1:06:f3:73:e8:fe:e0:9c:98:69:5c:fc:da:d5:ef:
90:e2:50:b1:3e:8d:f9:2e:6e:b2:0b:fd:94:a9:f9:73:dd:6f:
b0:10:32:1e:83:9e:12:68:ad:6c:8b:2a:14:0e:fc:e4:66:f1:
e3:fb:64:c5:51:ed:6d:24:be:97:50:5f:d1:a1:80:a2:b3:22:
3f:42:72:79:80:68:85:aa:70:83:a9:4e:6d:7d:7b:c9:ea:a4:
58:7f:00:6e:cf:27:d6:a4:5d:72:99:ea:6a:08:fb:85:91:08:
f9:49:15:0a:8d:4a:a0:32:64:1b:b0:28:b1:16:7d:48:ff:60:
03:55:50:cb:0f:ad:a5:92:81:aa:d8:ec:36:ba:69:02:ca:3f:
2e:e5:af:48:49:ac:0e:20:3c:a6:79:6e:aa:a4:6c:99:89:2b:
54:eb:02:95
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQg1khoqinj97g5NZhk0TuSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkyNzEwNWM5ZDFmYjA2OTA1NTQ5NzFmNDY0Y2EyMWY0YTQ1
YzEwNmEwHhcNMjUwMTAxMDc0ODIxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YTk0Mzg1ZWE0YWU0ZTk0MjJmYWI3YjY2NTZmZWMyYjc1NDczNjc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2kg0EY5oMe/CVjD4im3F10+0s6ws
jsELDpOZk3l47kR55VhttHNBnWLJTnI6097OyTUgjV1eCfhLx3n3O/Dc5qKeN49y
+PwSVopclZIfxRQjy17V5ULDOorKGWR8nR0JTehwaP7CRRmsR1eN3AEdvY0sDRdq
l8uo5pTkxKR792faBUeqwuaa+0W8fiCECEFmk/oHX2bODorhsM6c0Mhy86SRTPM3
YzDtin6Le0GKML3rkm8Hdor7l3Ws5PF9QiR4YY4OFMBaKhKhad6DfFYtybp7V46+
S36cYof+HA+Z0iG22tww83T2IGuw4cV+qsXs8HErNyKxIwlkx/XTYU6dLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIqUOF6krk6UIvq3tmVv7Ct1RzZ0MB8GA1UdIwQY
MBaAFJJxBcnR+waQVUlx9GTKIfSkXBBqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva25FRnlkSDdCcEJWU1hIMFpNb2g5S1JjRUdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wYzlkODAtNDNhNS00NTNhLWFkMjUt
NGVlOTJlZTFlMGNkLzEvaXBRNFhxU3VUcFFpLXJlMlpXX3NLM1ZITm5RLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8wYzlkODAtNDNhNS00NTNhLWFkMjUtNGVlOTJlZTFlMGNk
LzEva25FRnlkSDdCcEJWU1hIMFpNb2g5S1JjRUdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9SPMA0G
CSqGSIb3DQEBCwUAA4IBAQAGI6HWDwGaV1x4S+8J22u8aTBILskmDokuFX+zYpOy
EM79n+bndn4XXjpsd8DWv2cjhK1qEGlAVjgV1wh91UqIVGQHggUZ6PluOeVLNmu7
Jvv1VpAqOPxhYLPy8U/hBvNz6P7gnJhpXPza1e+Q4lCxPo35Lm6yC/2Uqflz3W+w
EDIeg54SaK1siyoUDvzkZvHj+2TFUe1tJL6XUF/RoYCisyI/QnJ5gGiFqnCDqU5t
fXvJ6qRYfwBuzyfWpF1ymepqCPuFkQj5SRUKjUqgMmQbsCixFn1I/2ADVVDLD62l
koGq2Ow2umkCyj8u5a9ISawOIDymeW6qpGyZiStU6wKV
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:41:00 2025 by rpki-client