Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/E6k1jw4wXKpNwPeTnRfj4VbFPUQ.roa
File: E6k1jw4wXKpNwPeTnRfj4VbFPUQ.roa (raw, json)
Hash identifier: hTQ5VP+ecunyC7viVfskT54aK8ITC6qcoUrC0ZEyNns=
Subject key identifier: 13:A9:35:8F:0E:30:5C:AA:4D:C0:F7:93:9D:17:E3:E1:56:C5:3D:44
Certificate issuer: /CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Certificate serial: 019424B37D553F5E638D0230CB8574ECB52E
Authority key identifier: 34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/E6k1jw4wXKpNwPeTnRfj4VbFPUQ.roa
Signing time: Thu 02 Jan 2025 01:48:50 +0000
ROA not before: Thu 02 Jan 2025 01:48:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197086
IP address blocks: 91.217.205.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:7d:55:3f:5e:63:8d:02:30:cb:85:74:ec:b5:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e4f60b0e508726dde68c1c255d04bd21a3a183
Validity
Not Before: Jan 2 01:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=13a9358f0e305caa4dc0f7939d17e3e156c53d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:4f:f0:13:bb:3a:a8:48:58:48:97:fb:60:47:
59:4c:62:7a:6a:72:fd:3d:55:52:b8:52:b5:69:72:
e2:cd:89:ba:c2:e1:39:cb:03:44:8e:2a:56:f9:6a:
12:74:39:b8:a7:cc:e7:65:f0:41:b1:c9:b1:f1:f0:
de:37:e3:52:a4:8c:5d:dc:f0:31:2a:2a:48:b8:e9:
e2:7e:bf:78:a4:17:de:19:5b:5d:25:e3:18:8e:e2:
ba:3d:ec:77:88:dd:51:21:82:3f:43:41:bc:86:d5:
ea:6b:1d:08:37:b5:8f:90:cb:48:76:b2:c8:f3:b3:
3f:05:a7:f1:ef:2f:e1:d4:a4:7c:10:fe:c5:90:5b:
39:fe:c3:ab:cc:b5:29:55:4b:96:c6:3a:47:e7:9d:
34:8b:76:4b:73:58:fb:8f:fa:aa:a5:8b:d5:09:9b:
4e:ff:af:d8:5b:7f:e7:14:f0:83:0a:f4:97:3e:be:
85:99:3d:53:58:81:60:7d:59:19:fc:51:65:0c:5a:
f7:63:81:0f:ef:42:4d:ed:f0:1b:c0:81:1a:22:c2:
1d:7b:f4:16:aa:97:fb:81:06:d9:cd:55:7e:25:53:
5e:da:1c:9e:64:d6:0c:a4:f7:67:28:ee:32:6a:ec:
32:c9:17:19:2a:2c:02:ca:58:6c:21:9f:d6:a5:38:
d5:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:A9:35:8F:0E:30:5C:AA:4D:C0:F7:93:9D:17:E3:E1:56:C5:3D:44
X509v3 Authority Key Identifier:
keyid:34:E4:F6:0B:0E:50:87:26:DD:E6:8C:1C:25:5D:04:BD:21:A3:A1:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOT2Cw5Qhybd5owcJV0EvSGjoYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/E6k1jw4wXKpNwPeTnRfj4VbFPUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/af3da0-af92-41b8-87bf-d58b094df06c/1/NOT2Cw5Qhybd5owcJV0EvSGjoYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.205.0/24
Signature Algorithm: sha256WithRSAEncryption
57:cd:96:65:bf:0c:d3:29:4e:09:a2:ea:e0:d2:c9:73:f1:92:
33:d2:19:ea:55:22:3c:2c:77:f6:00:31:18:6a:f2:e4:22:8d:
6e:94:64:41:35:93:3b:3a:3b:5c:ca:43:b1:39:53:3f:69:b8:
73:cd:d1:53:17:60:a2:1c:80:28:6a:64:aa:e6:b8:6c:37:c9:
ab:3e:68:99:d1:50:47:45:24:7a:66:27:3e:9d:7b:2b:bf:7b:
d6:18:1d:ec:af:8a:f1:ea:4a:3f:3d:38:24:36:20:13:35:5d:
0c:f6:00:1a:a6:11:26:d0:a2:a5:62:90:7c:41:22:cb:af:ca:
c9:ff:ac:27:20:b2:eb:7d:9d:24:d0:1b:33:ad:b0:11:23:06:
b9:f9:5a:1b:96:62:7f:e8:29:f8:ee:0f:f6:f8:10:e6:eb:77:
0e:4f:eb:15:3c:ee:c1:18:b3:19:b5:e7:4c:2c:7a:7f:9d:d5:
cf:8d:94:51:8b:6b:55:a4:9f:5a:a9:9a:49:91:bf:4c:d7:7b:
67:bd:92:51:88:0c:fe:d1:a1:0c:52:93:2e:26:21:d3:59:6d:
ce:a5:1f:6f:05:df:4b:41:19:22:71:b2:26:44:4b:b9:60:d0:
eb:de:0f:c0:60:4f:74:ff:aa:c5:b9:b4:c3:de:0d:3a:27:51:
3a:6e:0b:9d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks31VP15jjQIwy4V07LUuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZTRmNjBiMGU1MDg3MjZkZGU2OGMxYzI1NWQwNGJkMjFh
M2ExODMwHhcNMjUwMTAyMDE0ODUwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxM2E5MzU4ZjBlMzA1Y2FhNGRjMGY3OTM5ZDE3ZTNlMTU2YzUzZDQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE/wE7s6qEhYSJf7YEdZTGJ6anL9
PVVSuFK1aXLizYm6wuE5ywNEjipW+WoSdDm4p8znZfBBscmx8fDeN+NSpIxd3PAx
KipIuOnifr94pBfeGVtdJeMYjuK6Pex3iN1RIYI/Q0G8htXqax0IN7WPkMtIdrLI
87M/Bafx7y/h1KR8EP7FkFs5/sOrzLUpVUuWxjpH5500i3ZLc1j7j/qqpYvVCZtO
/6/YW3/nFPCDCvSXPr6FmT1TWIFgfVkZ/FFlDFr3Y4EP70JN7fAbwIEaIsIde/QW
qpf7gQbZzVV+JVNe2hyeZNYMpPdnKO4yauwyyRcZKiwCylhsIZ/WpTjVCQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBOpNY8OMFyqTcD3k50X4+FWxT1EMB8GA1UdIwQY
MBaAFDTk9gsOUIcm3eaMHCVdBL0ho6GDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk9UMkN3NVFoeWJkNW93Y0pWMEV2U0dqb1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hZjNkYTAtYWY5Mi00MWI4LTg3YmYt
ZDU4YjA5NGRmMDZjLzEvRTZrMWp3NHdYS3BOd1BlVG5SZmo0VmJGUFVRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hZjNkYTAtYWY5Mi00MWI4LTg3YmYtZDU4YjA5NGRmMDZj
LzEvTk9UMkN3NVFoeWJkNW93Y0pWMEV2U0dqb1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9nNMA0G
CSqGSIb3DQEBCwUAA4IBAQBXzZZlvwzTKU4Jourg0slz8ZIz0hnqVSI8LHf2ADEY
avLkIo1ulGRBNZM7OjtcykOxOVM/abhzzdFTF2CiHIAoamSq5rhsN8mrPmiZ0VBH
RSR6Zic+nXsrv3vWGB3sr4rx6ko/PTgkNiATNV0M9gAaphEm0KKlYpB8QSLLr8rJ
/6wnILLrfZ0k0BszrbARIwa5+VoblmJ/6Cn47g/2+BDm63cOT+sVPO7BGLMZtedM
LHp/ndXPjZRRi2tVpJ9aqZpJkb9M13tnvZJRiAz+0aEMUpMuJiHTWW3OpR9vBd9L
QRkicbImREu5YNDr3g/AYE90/6rFubTD3g06J1E6bgud
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:55:45 2025 by rpki-client