Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/1-_Px5n1Sga5Zt8S-x1iB09Td3qo.roa
File: 1-_Px5n1Sga5Zt8S-x1iB09Td3qo.roa (raw, json)
Hash identifier: 23ZQeG0ng9+MyZlvY3tVFGHtF3ECWQ2rfUxxtpg8t4c=
Subject key identifier: FB:F3:F1:E6:7D:52:81:AE:59:B7:C4:BE:C7:58:81:D3:D4:DD:DE:AA
Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial: 0194A7C7A510D07A562C202EA12267D58EBB
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/1-_Px5n1Sga5Zt8S-x1iB09Td3qo.roa
Signing time: Mon 27 Jan 2025 12:41:06 +0000
ROA not before: Mon 27 Jan 2025 12:41:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213567
IP address blocks: 91.199.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:a7:c7:a5:10:d0:7a:56:2c:20:2e:a1:22:67:d5:8e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
Validity
Not Before: Jan 27 12:41:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fbf3f1e67d5281ae59b7c4bec75881d3d4dddeaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ae:bc:21:0e:eb:5b:8c:ef:80:36:96:f0:4f:
80:bd:86:d7:04:67:11:c3:58:85:60:76:d2:3a:85:
8b:96:4d:da:69:b2:ea:36:d1:e0:c8:dc:94:22:21:
7d:bc:e1:e3:f0:6e:7d:07:51:ac:aa:ce:4c:fb:e3:
8d:d4:78:fd:09:1b:d0:0d:5d:a6:7b:7a:e4:35:fe:
dd:70:55:0a:48:2b:21:30:4d:dc:2d:21:d7:2d:40:
f2:e6:00:99:27:27:8b:b8:78:91:fe:1b:2f:87:4e:
41:a7:9c:d2:48:da:d3:06:06:72:5c:20:90:f5:2e:
ca:ff:a2:a8:49:0a:9f:c7:8c:11:33:df:b7:b0:c4:
aa:ba:e4:87:95:2d:4b:98:4c:9c:49:85:28:67:3a:
bf:10:d9:de:1d:c0:ed:9e:8c:af:6b:e3:79:6d:77:
69:e4:fc:a4:6c:63:db:3f:69:69:ad:23:d3:56:a7:
39:b2:7f:b7:d0:6c:92:87:80:0d:23:ba:8d:0c:b4:
c2:35:c5:e4:20:8f:a4:f6:12:ba:ab:e5:6c:38:0f:
7f:48:7a:60:f9:9d:da:6f:04:90:6b:09:39:b1:e8:
f6:35:93:fc:f3:2a:a8:2f:63:f2:24:4f:66:c3:1a:
19:c6:a2:4f:38:b3:de:c1:2f:39:5b:36:69:d4:7a:
19:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:F3:F1:E6:7D:52:81:AE:59:B7:C4:BE:C7:58:81:D3:D4:DD:DE:AA
X509v3 Authority Key Identifier:
keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/1-_Px5n1Sga5Zt8S-x1iB09Td3qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.40.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:87:73:ae:8c:84:65:f8:67:e1:90:60:0b:86:38:40:d1:1c:
c8:3a:61:34:79:c8:0c:92:d0:e3:56:13:9c:07:fe:6c:bc:f1:
1a:76:4d:13:15:88:48:a0:8d:e9:2a:42:cb:ec:5b:0a:ff:06:
62:bc:55:aa:0c:3f:24:81:6e:0d:ab:ed:52:15:02:09:1d:98:
86:25:e5:f0:85:6a:81:9f:8f:c9:0d:72:00:35:ad:b3:d7:7f:
ec:b6:22:fd:fb:02:8e:07:6a:e9:20:ab:48:7c:ea:63:01:b3:
a0:55:54:e1:c8:a9:35:d3:6f:bf:52:e1:c2:5a:3c:6a:d2:f9:
e2:d3:bf:1d:dd:ea:b8:93:93:38:20:c9:74:25:6a:32:88:ef:
70:63:75:8a:57:90:9d:20:3c:8a:e1:d4:91:c5:07:77:5a:21:
6c:01:c8:1b:db:2f:89:5d:a4:9a:66:10:bc:d8:0d:3d:35:17:
64:b0:9e:45:7c:e9:35:27:d7:45:ac:de:57:f0:e1:21:f3:a7:
06:e3:8e:2e:d6:47:a1:09:0d:d2:9e:32:bc:d5:47:fc:5b:78:
2d:01:95:ef:81:2b:91:2c:80:52:b6:b4:ba:e4:03:20:fb:42:
10:d8:e7:3d:fa:6b:77:c9:69:b3:f4:9e:e9:5d:af:cf:10:67:
be:fc:10:4b
-----BEGIN CERTIFICATE-----
MIIE/jCCA+agAwIBAgISAZSnx6UQ0HpWLCAuoSJn1Y67MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTE0ZGZmMzZiOTQ4YjU2YzIxMWQyNWYzOTg3NTFkMzVi
OTNjYzIwHhcNMjUwMTI3MTI0MTA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYmYzZjFlNjdkNTI4MWFlNTliN2M0YmVjNzU4ODFkM2Q0ZGRkZWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0668IQ7rW4zvgDaW8E+AvYbXBGcR
w1iFYHbSOoWLlk3aabLqNtHgyNyUIiF9vOHj8G59B1Gsqs5M++ON1Hj9CRvQDV2m
e3rkNf7dcFUKSCshME3cLSHXLUDy5gCZJyeLuHiR/hsvh05Bp5zSSNrTBgZyXCCQ
9S7K/6KoSQqfx4wRM9+3sMSquuSHlS1LmEycSYUoZzq/ENneHcDtnoyva+N5bXdp
5PykbGPbP2lprSPTVqc5sn+30GySh4ANI7qNDLTCNcXkII+k9hK6q+VsOA9/SHpg
+Z3abwSQawk5sej2NZP88yqoL2PyJE9mwxoZxqJPOLPewS85WzZp1HoZjQIDAQAB
o4ICCjCCAgYwHQYDVR0OBBYEFPvz8eZ9UoGuWbfEvsdYgdPU3d6qMB8GA1UdIwQY
MBaAFLkRTf82uUi1bCEdJfOYdR01uTzCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJGTl96YTVTTFZzSVIwbDg1aDFIVFc1UE1JLmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC8zYzY4NzYtOTZhZS00OGFmLWFlN2Et
ZmYwNWQ0NDZlN2ZkLzEvMS1fUHg1bjFTZ2E1WnQ4Uy14MWlCMDlUZDNxby5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvYTAvM2M2ODc2LTk2YWUtNDhhZi1hZTdhLWZmMDVkNDQ2ZTdm
ZC8xL3VSRk5femE1U0xWc0lSMGw4NWgxSFRXNVBNSS5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAFvHKDAN
BgkqhkiG9w0BAQsFAAOCAQEAX4dzroyEZfhn4ZBgC4Y4QNEcyDphNHnIDJLQ41YT
nAf+bLzxGnZNExWISKCN6SpCy+xbCv8GYrxVqgw/JIFuDavtUhUCCR2YhiXl8IVq
gZ+PyQ1yADWts9d/7LYi/fsCjgdq6SCrSHzqYwGzoFVU4cipNdNvv1Lhwlo8atL5
4tO/Hd3quJOTOCDJdCVqMojvcGN1ileQnSA8iuHUkcUHd1ohbAHIG9sviV2kmmYQ
vNgNPTUXZLCeRXzpNSfXRazeV/DhIfOnBuOOLtZHoQkN0p4yvNVH/Ft4LQGV74Er
kSyAUra0uuQDIPtCENjnPfprd8lps/Se6V2vzxBnvvwQSw==
-----END CERTIFICATE-----
Generated at Fri Apr 25 13:17:46 2025 by rpki-client