Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/8reTSTj3AwMaAQKMOvOjjWzjRZU.roa
File: 8reTSTj3AwMaAQKMOvOjjWzjRZU.roa (raw, json)
Hash identifier: l5w2EwX064H88HHHHAQh4ec4rfO96cZ19m2IwMvLv2c=
Subject key identifier: F2:B7:93:49:38:F7:03:03:1A:01:02:8C:3A:F3:A3:8D:6C:E3:45:95
Certificate issuer: /CN=7908de202e174cb23746dcbdeea8a9d449580019
Certificate serial: 019425FDB34123D5EDB976052B870439C657
Authority key identifier: 79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/8reTSTj3AwMaAQKMOvOjjWzjRZU.roa
Signing time: Thu 02 Jan 2025 07:49:30 +0000
ROA not before: Thu 02 Jan 2025 07:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42981
IP address blocks: 91.196.8.0/22 maxlen: 24
185.153.36.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:b3:41:23:d5:ed:b9:76:05:2b:87:04:39:c6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7908de202e174cb23746dcbdeea8a9d449580019
Validity
Not Before: Jan 2 07:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f2b7934938f703031a01028c3af3a38d6ce34595
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ce:da:e7:b9:44:db:b9:83:cf:06:b2:6c:69:
29:0c:8d:67:f5:8b:44:09:50:5e:46:a4:4f:d8:5e:
c9:78:4c:45:a0:8a:0f:79:fd:05:49:11:3a:6b:2c:
c7:b5:11:5a:64:ed:79:a5:10:e2:37:3f:ac:fe:8e:
7b:bb:ae:52:92:20:5a:20:2f:26:e3:1d:0a:f4:6d:
a3:44:ae:68:73:84:cf:56:bc:db:8b:72:d1:08:63:
a0:f1:31:86:f8:1b:b0:a2:5d:32:4d:2d:41:8f:d0:
95:3c:26:bd:2d:43:47:10:38:2c:f4:cb:9b:1b:e1:
f6:79:53:4c:61:e7:bf:2d:f7:0c:25:2d:d2:2c:41:
d0:00:ee:c4:d8:53:34:9d:7a:73:72:ce:a9:df:c8:
04:c0:e1:a2:ab:ad:80:0a:03:5e:c5:85:27:03:94:
15:23:72:9f:2a:84:9e:ba:df:96:24:ea:1c:ef:0b:
f8:6f:fd:60:b8:11:48:47:3c:be:30:47:e3:d4:f7:
4f:a6:24:e6:a8:f3:da:38:40:2a:8e:fe:64:4c:c5:
a3:21:54:6c:92:f0:00:e6:3c:c6:10:89:f5:b3:87:
49:57:a1:da:c2:d7:7e:3f:c0:1c:b5:14:f8:61:33:
8f:b8:ab:a4:09:4c:5c:52:10:e8:60:68:7d:ef:58:
ac:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:B7:93:49:38:F7:03:03:1A:01:02:8C:3A:F3:A3:8D:6C:E3:45:95
X509v3 Authority Key Identifier:
keyid:79:08:DE:20:2E:17:4C:B2:37:46:DC:BD:EE:A8:A9:D4:49:58:00:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eQjeIC4XTLI3Rty97qip1ElYABk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/8reTSTj3AwMaAQKMOvOjjWzjRZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/ab1c11-9d9f-4c58-9993-561d5ff8dc0e/1/eQjeIC4XTLI3Rty97qip1ElYABk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.8.0/22
185.153.36.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:fc:48:84:d4:30:d8:ad:19:85:a3:11:80:87:da:f4:37:7d:
42:56:48:61:cc:b8:c7:ad:0e:d9:13:72:44:c2:48:21:c4:21:
21:1f:b5:9b:41:90:87:c2:0b:9b:2c:5f:72:c8:38:c3:54:c0:
6b:a8:da:f0:7d:ff:b7:0a:22:d7:cc:a5:7b:be:83:66:21:2b:
bf:dd:2b:1c:a1:dc:ec:04:40:b7:0c:ba:4f:6f:8e:f4:a7:b7:
09:72:d3:89:65:00:1e:77:b8:78:47:c0:4f:05:f8:8a:c5:a7:
f3:72:bb:69:49:01:de:ed:f3:69:6d:3b:b0:d1:8a:56:20:05:
b0:5b:78:e3:df:3d:59:c8:b1:5c:01:d2:34:84:55:16:6b:9f:
3c:34:07:d5:08:41:e4:72:62:f9:6b:48:34:fe:26:b7:7f:48:
74:a4:c0:5c:53:3e:04:46:7c:54:e2:9c:7b:ef:66:df:83:b9:
1c:84:19:14:52:a7:54:66:53:a6:79:24:fe:ec:2a:d2:23:42:
af:30:c6:c3:62:e1:5e:3d:e5:bf:7f:a8:35:1f:83:f1:e9:04:
26:42:db:d9:2b:57:da:31:1e:1b:08:8e:d0:0d:67:f8:10:06:
f8:53:e9:7a:f6:66:1e:e8:3f:23:f6:26:0a:65:bc:e1:b6:02:
47:4f:c6:1b
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZQl/bNBI9XtuXYFK4cEOcZXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MDhkZTIwMmUxNzRjYjIzNzQ2ZGNiZGVlYThhOWQ0NDk1
ODAwMTkwHhcNMjUwMTAyMDc0OTMwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMmI3OTM0OTM4ZjcwMzAzMWEwMTAyOGMzYWYzYTM4ZDZjZTM0NTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6M7a57lE27mDzwaybGkpDI1n9YtE
CVBeRqRP2F7JeExFoIoPef0FSRE6ayzHtRFaZO15pRDiNz+s/o57u65SkiBaIC8m
4x0K9G2jRK5oc4TPVrzbi3LRCGOg8TGG+Buwol0yTS1Bj9CVPCa9LUNHEDgs9Mub
G+H2eVNMYee/LfcMJS3SLEHQAO7E2FM0nXpzcs6p38gEwOGiq62ACgNexYUnA5QV
I3KfKoSeut+WJOoc7wv4b/1guBFIRzy+MEfj1PdPpiTmqPPaOEAqjv5kTMWjIVRs
kvAA5jzGEIn1s4dJV6Hawtd+P8ActRT4YTOPuKukCUxcUhDoYGh971isuQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFPK3k0k49wMDGgECjDrzo41s40WVMB8GA1UdIwQY
MBaAFHkI3iAuF0yyN0bcve6oqdRJWAAZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVFqZUlDNFhUTEkzUnR5OTdxaXAxRWxZQUJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS9hYjFjMTEtOWQ5Zi00YzU4LTk5OTMt
NTYxZDVmZjhkYzBlLzEvOHJlVFNUajNBd01hQVFLTU92T2pqV3pqUlpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS9hYjFjMTEtOWQ5Zi00YzU4LTk5OTMtNTYxZDVmZjhkYzBl
LzEvZVFqZUlDNFhUTEkzUnR5OTdxaXAxRWxZQUJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW8QIAwQC
uZkkMA0GCSqGSIb3DQEBCwUAA4IBAQAK/EiE1DDYrRmFoxGAh9r0N31CVkhhzLjH
rQ7ZE3JEwkghxCEhH7WbQZCHwgubLF9yyDjDVMBrqNrwff+3CiLXzKV7voNmISu/
3SscodzsBEC3DLpPb470p7cJctOJZQAed7h4R8BPBfiKxafzcrtpSQHe7fNpbTuw
0YpWIAWwW3jj3z1ZyLFcAdI0hFUWa588NAfVCEHkcmL5a0g0/ia3f0h0pMBcUz4E
RnxU4px772bfg7kchBkUUqdUZlOmeST+7CrSI0KvMMbDYuFePeW/f6g1H4Px6QQm
QtvZK1faMR4bCI7QDWf4EAb4U+l69mYe6D8j9iYKZbzhtgJHT8Yb
-----END CERTIFICATE-----
Generated at Fri Apr 25 02:30:41 2025 by rpki-client