Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/2pNXf0uuaUo_v6geF9VahBwgrbc.roa
File: 2pNXf0uuaUo_v6geF9VahBwgrbc.roa (raw, json)
Hash identifier: yalFfTBWkYIk5wuNVfUk7Fs0lLBWm9jkqivyXm/tu/w=
Subject key identifier: DA:93:57:7F:4B:AE:69:4A:3F:BF:A8:1E:17:D5:5A:84:1C:20:AD:B7
Certificate issuer: /CN=39eea846551c6e419b947e0da107eecb0070419a
Certificate serial: 0194266B72D35F2CF60A4EC9D4FCAB501D30
Authority key identifier: 39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/2pNXf0uuaUo_v6geF9VahBwgrbc.roa
Signing time: Thu 02 Jan 2025 09:49:23 +0000
ROA not before: Thu 02 Jan 2025 09:49:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 21232
IP address blocks: 91.229.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:72:d3:5f:2c:f6:0a:4e:c9:d4:fc:ab:50:1d:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39eea846551c6e419b947e0da107eecb0070419a
Validity
Not Before: Jan 2 09:49:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da93577f4bae694a3fbfa81e17d55a841c20adb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:09:30:ce:ae:35:0c:1e:d0:0a:bc:fb:ec:50:
02:e6:e7:a3:a0:a3:0e:ac:37:6a:d7:a9:82:da:67:
5c:16:82:af:cb:67:18:ee:32:f8:c8:01:7b:5d:04:
f4:6d:6a:a2:4a:bd:49:4a:d5:d4:dd:55:be:26:60:
f7:13:22:5c:ef:96:94:0d:38:40:87:d3:f9:32:15:
54:cc:61:12:bf:de:36:9e:47:89:5f:ae:06:41:85:
ad:9d:72:0d:fb:cd:18:95:c9:de:ce:5f:4f:58:1b:
d8:a4:3b:e4:bb:5f:0a:23:c3:9c:83:b5:0b:5a:68:
6a:8a:01:82:3c:53:6e:41:d5:72:15:c7:75:4b:2f:
92:41:bc:67:44:cd:71:f6:61:d2:99:1e:e9:11:9c:
15:16:a6:e0:3d:92:7e:40:9d:0d:d3:26:b8:28:5a:
50:38:94:15:e1:f3:07:be:ca:eb:01:01:81:1a:89:
34:55:92:a2:cb:ff:10:30:5b:97:47:d7:98:29:2b:
30:44:a4:e3:2a:eb:fa:a9:37:26:6f:79:1b:94:fc:
4c:af:ca:9d:14:4d:a0:a2:46:90:2e:1a:a8:0c:0a:
67:08:fd:36:ba:6c:68:f4:84:fb:2a:94:bb:4c:9d:
f3:43:71:c5:00:bf:7b:48:8b:e9:42:82:29:61:19:
ac:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:93:57:7F:4B:AE:69:4A:3F:BF:A8:1E:17:D5:5A:84:1C:20:AD:B7
X509v3 Authority Key Identifier:
keyid:39:EE:A8:46:55:1C:6E:41:9B:94:7E:0D:A1:07:EE:CB:00:70:41:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oe6oRlUcbkGblH4NoQfuywBwQZo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/2pNXf0uuaUo_v6geF9VahBwgrbc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/09d329-7ffe-451b-bc82-2831a4850645/1/Oe6oRlUcbkGblH4NoQfuywBwQZo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.80.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:b2:d4:6c:7a:73:33:e8:d7:cf:af:34:ee:59:f2:de:44:a7:
34:07:96:d1:7d:31:0c:eb:99:52:49:eb:a5:7b:9c:e9:c6:3e:
f8:03:cf:95:29:31:7f:4f:33:57:d9:10:77:a0:2f:09:c2:60:
29:02:9e:8b:c9:44:df:34:7a:8c:cc:db:ac:9a:89:52:63:12:
e7:a4:54:fc:c4:0e:1a:10:87:b8:36:cf:95:1a:85:6d:ca:2f:
ce:ca:af:41:39:d7:34:5e:75:10:bb:7d:54:4c:2a:e7:d2:01:
d0:8e:1b:62:b6:b0:9c:5a:65:db:20:00:ee:2a:ca:3f:98:39:
50:42:b5:c5:2b:d1:af:2c:8f:cf:f7:24:c1:b4:ee:37:f5:98:
9d:e9:a2:d8:37:c1:4c:3e:4c:04:a3:0a:a4:55:d9:b6:47:de:
6c:8d:52:30:93:75:f0:c7:33:65:dc:35:89:51:28:2c:f4:4d:
2d:18:be:63:16:1b:95:c0:57:03:c2:fb:5c:e6:5c:1c:1d:28:
6d:13:f9:ef:d9:e2:b9:fc:76:f1:63:74:fa:ff:c6:0c:46:48:
01:d9:83:19:3d:43:74:a4:cf:6a:f5:8a:6e:23:0d:9b:84:f4:
dc:3e:2e:db:c1:5a:07:4d:74:e0:b5:b8:19:d8:6c:20:3b:67:
9c:7e:0a:81
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQma3LTXyz2Ck7J1PyrUB0wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM5ZWVhODQ2NTUxYzZlNDE5Yjk0N2UwZGExMDdlZWNiMDA3
MDQxOWEwHhcNMjUwMTAyMDk0OTIzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkYTkzNTc3ZjRiYWU2OTRhM2ZiZmE4MWUxN2Q1NWE4NDFjMjBhZGI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwkwzq41DB7QCrz77FAC5uejoKMO
rDdq16mC2mdcFoKvy2cY7jL4yAF7XQT0bWqiSr1JStXU3VW+JmD3EyJc75aUDThA
h9P5MhVUzGESv942nkeJX64GQYWtnXIN+80Ylcnezl9PWBvYpDvku18KI8Ocg7UL
WmhqigGCPFNuQdVyFcd1Sy+SQbxnRM1x9mHSmR7pEZwVFqbgPZJ+QJ0N0ya4KFpQ
OJQV4fMHvsrrAQGBGok0VZKiy/8QMFuXR9eYKSswRKTjKuv6qTcmb3kblPxMr8qd
FE2gokaQLhqoDApnCP02umxo9IT7KpS7TJ3zQ3HFAL97SIvpQoIpYRmswQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNqTV39LrmlKP7+oHhfVWoQcIK23MB8GA1UdIwQY
MBaAFDnuqEZVHG5Bm5R+DaEH7ssAcEGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8wOWQzMjktN2ZmZS00NTFiLWJjODIt
MjgzMWE0ODUwNjQ1LzEvMnBOWGYwdXVhVW9fdjZnZUY5VmFoQndncmJjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi8wOWQzMjktN2ZmZS00NTFiLWJjODItMjgzMWE0ODUwNjQ1
LzEvT2U2b1JsVWNia0dibEg0Tm9RZnV5d0J3UVpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCW+VQMA0G
CSqGSIb3DQEBCwUAA4IBAQB8stRsenMz6NfPrzTuWfLeRKc0B5bRfTEM65lSSeul
e5zpxj74A8+VKTF/TzNX2RB3oC8JwmApAp6LyUTfNHqMzNusmolSYxLnpFT8xA4a
EIe4Ns+VGoVtyi/Oyq9BOdc0XnUQu31UTCrn0gHQjhtitrCcWmXbIADuKso/mDlQ
QrXFK9GvLI/P9yTBtO439Zid6aLYN8FMPkwEowqkVdm2R95sjVIwk3XwxzNl3DWJ
USgs9E0tGL5jFhuVwFcDwvtc5lwcHShtE/nv2eK5/HbxY3T6/8YMRkgB2YMZPUN0
pM9q9YpuIw2bhPTcPi7bwVoHTXTgtbgZ2GwgO2ecfgqB
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:40:13 2025 by rpki-client