Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/Ja_97273VAEHJD8U1oqoC_9aF9c.roa
File: Ja_97273VAEHJD8U1oqoC_9aF9c.roa (raw, json)
Hash identifier: vJfC/52sLPqoQGFApNLbUAegOgUUxIE6GeG0+RQdWv8=
Subject key identifier: 25:AF:FD:EF:6E:F7:54:01:07:24:3F:14:D6:8A:A8:0B:FF:5A:17:D7
Certificate issuer: /CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Certificate serial: 019423D6F4F88ADD62ADE118B9E66F08C559
Authority key identifier: AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/Ja_97273VAEHJD8U1oqoC_9aF9c.roa
Signing time: Wed 01 Jan 2025 21:47:57 +0000
ROA not before: Wed 01 Jan 2025 21:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57442
IP address blocks: 91.232.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:f4:f8:8a:dd:62:ad:e1:18:b9:e6:6f:08:c5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad10cdd0b8b73304c985fde1b10e40182bf13902
Validity
Not Before: Jan 1 21:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=25affdef6ef7540107243f14d68aa80bff5a17d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0a:b8:45:62:4f:51:04:fe:e7:47:db:c1:3e:
e4:8e:5c:4d:25:34:3e:50:f2:4f:3f:7d:26:34:15:
21:d1:b9:d0:7c:1f:89:58:64:1c:8a:7d:db:63:67:
6a:90:a0:93:63:97:7a:78:5d:57:3a:25:c8:59:c6:
42:51:60:98:98:8b:6f:f1:8f:66:59:4c:8f:a8:bc:
e6:fa:cf:27:66:f2:00:1c:1a:fd:eb:a3:b8:4f:ae:
8b:77:31:9d:32:05:05:2e:39:cb:46:3c:7a:09:8a:
71:06:08:ef:bc:d7:a5:44:1c:4c:52:81:88:d0:23:
82:5e:f9:77:cf:6a:b9:0a:1c:bd:31:5f:ee:cf:9f:
e5:6f:a3:75:f7:ad:56:9d:20:09:a7:37:06:59:5d:
61:f8:9c:14:ee:b7:d6:ed:38:60:f7:b1:81:0a:d8:
1b:4b:e7:2e:08:39:91:05:93:a7:5c:b0:04:74:02:
3d:20:fa:91:97:76:fa:81:4d:07:2c:26:ea:25:67:
5e:d0:90:d0:cc:fe:27:05:1d:2a:b2:a3:e1:00:dc:
90:ef:5c:75:ad:83:65:8c:03:db:c1:de:65:d3:60:
d1:64:03:c7:ce:60:f6:31:82:d3:d1:d8:5b:32:4c:
ec:ea:e7:4b:92:15:1f:a4:ff:86:d6:f5:5f:c3:07:
5f:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:AF:FD:EF:6E:F7:54:01:07:24:3F:14:D6:8A:A8:0B:FF:5A:17:D7
X509v3 Authority Key Identifier:
keyid:AD:10:CD:D0:B8:B7:33:04:C9:85:FD:E1:B1:0E:40:18:2B:F1:39:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/Ja_97273VAEHJD8U1oqoC_9aF9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/deb874-f90b-42c4-bcd2-47bbf21eac9f/1/rRDN0Li3MwTJhf3hsQ5AGCvxOQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.21.0/24
Signature Algorithm: sha256WithRSAEncryption
55:b9:c7:aa:40:c4:67:82:cc:0f:71:7d:26:dd:1e:38:ec:86:
80:ce:ce:3b:96:81:11:89:f5:50:52:97:a6:63:88:f9:50:b8:
3c:e6:84:36:05:e9:ab:2a:2f:d0:84:95:7c:13:b0:82:9b:de:
60:c4:93:3a:5c:ad:9d:22:5f:a7:70:73:20:7e:5d:c0:93:4f:
e0:75:ca:de:40:40:ef:aa:02:a5:a3:03:d3:d0:db:bf:e6:13:
05:f1:1b:f6:e9:16:b8:a9:69:2a:a8:0f:3c:a4:72:78:25:47:
02:26:3d:c6:d1:c6:40:38:e9:4e:18:e2:8b:f4:c3:cd:8c:78:
ae:21:f9:8d:8b:4d:7e:8b:49:63:46:66:c2:64:ac:0f:cf:9a:
75:64:96:aa:dd:2f:1c:43:db:85:17:e4:75:f2:09:83:3d:06:
f0:49:67:9a:06:44:67:44:e8:31:b8:9a:e6:1c:3c:23:94:cd:
ab:a7:a4:15:21:4a:34:58:06:ef:92:1c:5b:d2:d0:fb:13:a7:
11:7b:af:da:ba:b1:e6:12:0a:13:78:f5:b2:c8:8c:3b:14:e1:
7b:b0:a9:a6:ce:f1:20:3f:eb:74:3d:48:42:32:c9:6c:ff:76:
e8:cb:c8:3f:01:d7:96:d1:8c:68:b0:92:c3:61:4c:06:e3:2a:
12:5f:a3:5d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQj1vT4it1ireEYueZvCMVZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMTBjZGQwYjhiNzMzMDRjOTg1ZmRlMWIxMGU0MDE4MmJm
MTM5MDIwHhcNMjUwMTAxMjE0NzU3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNWFmZmRlZjZlZjc1NDAxMDcyNDNmMTRkNjhhYTgwYmZmNWExN2Q3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgq4RWJPUQT+50fbwT7kjlxNJTQ+
UPJPP30mNBUh0bnQfB+JWGQcin3bY2dqkKCTY5d6eF1XOiXIWcZCUWCYmItv8Y9m
WUyPqLzm+s8nZvIAHBr966O4T66LdzGdMgUFLjnLRjx6CYpxBgjvvNelRBxMUoGI
0COCXvl3z2q5Chy9MV/uz5/lb6N1961WnSAJpzcGWV1h+JwU7rfW7Thg97GBCtgb
S+cuCDmRBZOnXLAEdAI9IPqRl3b6gU0HLCbqJWde0JDQzP4nBR0qsqPhANyQ71x1
rYNljAPbwd5l02DRZAPHzmD2MYLT0dhbMkzs6udLkhUfpP+G1vVfwwdffwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCWv/e9u91QBByQ/FNaKqAv/WhfXMB8GA1UdIwQY
MBaAFK0QzdC4tzMEyYX94bEOQBgr8TkCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclJETjBMaTNNd1RKaGYzaHNRNUFHQ3Z4T1FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9kZWI4NzQtZjkwYi00MmM0LWJjZDIt
NDdiYmYyMWVhYzlmLzEvSmFfOTcyNzNWQUVISkQ4VTFvcW9DXzlhRjljLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9kZWI4NzQtZjkwYi00MmM0LWJjZDItNDdiYmYyMWVhYzlm
LzEvclJETjBMaTNNd1RKaGYzaHNRNUFHQ3Z4T1FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+gVMA0G
CSqGSIb3DQEBCwUAA4IBAQBVuceqQMRngswPcX0m3R447IaAzs47loERifVQUpem
Y4j5ULg85oQ2BemrKi/QhJV8E7CCm95gxJM6XK2dIl+ncHMgfl3Ak0/gdcreQEDv
qgKlowPT0Nu/5hMF8Rv26Ra4qWkqqA88pHJ4JUcCJj3G0cZAOOlOGOKL9MPNjHiu
IfmNi01+i0ljRmbCZKwPz5p1ZJaq3S8cQ9uFF+R18gmDPQbwSWeaBkRnROgxuJrm
HDwjlM2rp6QVIUo0WAbvkhxb0tD7E6cRe6/aurHmEgoTePWyyIw7FOF7sKmmzvEg
P+t0PUhCMsls/3boy8g/AdeW0YxosJLDYUwG4yoSX6Nd
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:05:29 2025 by rpki-client