Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/8Y6Q2v0-REHI1gmazit98GpTJPE.roa
File: 8Y6Q2v0-REHI1gmazit98GpTJPE.roa (raw, json)
Hash identifier: xBU9ylDqAg1w623IA6Nf6iXifL+fGTtFgjAMDSUmDkw=
Subject key identifier: F1:8E:90:DA:FD:3E:44:41:C8:D6:09:9A:CE:2B:7D:F0:6A:53:24:F1
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747F78E5500ED5C3D1287955B0B0747
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/8Y6Q2v0-REHI1gmazit98GpTJPE.roa
Signing time: Thu 02 Jan 2025 13:50:15 +0000
ROA not before: Thu 02 Jan 2025 13:50:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197304
IP address blocks: 213.91.136.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f7:8e:55:00:ed:5c:3d:12:87:95:5b:0b:07:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f18e90dafd3e4441c8d6099ace2b7df06a5324f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a2:d8:6d:2e:fb:2e:61:48:bc:38:31:79:2d:
60:a3:3a:63:ad:2f:2c:3c:20:32:ed:1d:4d:ba:45:
8a:34:92:47:a8:88:e5:97:cb:a5:2f:7d:d4:03:51:
d5:1f:76:81:67:02:3d:38:73:cc:bd:ff:65:5b:c4:
cf:cd:a1:4d:88:42:95:23:87:7e:80:43:15:9c:45:
5a:d1:ee:8a:7c:a7:14:c7:5a:35:f0:4e:6e:a9:cf:
47:09:c9:2b:6f:9f:2d:53:31:4f:bc:3b:7c:63:47:
47:1d:01:72:fb:7a:e6:8b:d2:74:f4:e2:f0:fd:1c:
ce:90:a5:c0:8f:01:f8:30:0f:20:6c:84:2e:6b:85:
09:20:32:14:ba:35:af:6f:cd:fb:f9:fe:04:31:85:
42:e2:db:ea:c4:58:d1:66:e5:29:cf:9a:5a:74:ff:
a7:73:86:89:de:cc:17:39:a4:60:1a:35:f5:21:94:
c1:a2:40:88:4a:b0:f6:04:0f:34:88:20:0c:e0:c5:
76:ac:38:47:66:cf:f5:ec:b5:49:16:10:9a:a8:5e:
5a:a0:94:ee:60:28:4d:47:c8:c9:55:f7:ba:fd:83:
4a:9c:dc:f9:37:d5:05:5c:51:b9:de:24:66:54:1e:
ed:7b:d4:1f:d0:9d:b0:c9:22:6e:a0:d7:9f:e6:82:
47:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8E:90:DA:FD:3E:44:41:C8:D6:09:9A:CE:2B:7D:F0:6A:53:24:F1
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/8Y6Q2v0-REHI1gmazit98GpTJPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.91.136.0/23
Signature Algorithm: sha256WithRSAEncryption
66:55:2a:95:11:ac:d8:78:49:51:a5:a4:d6:cf:62:2e:2d:b5:
59:b7:13:dc:ec:d9:5d:34:40:f2:12:2b:30:3b:08:e2:fa:f7:
9e:d9:27:3d:34:d2:9c:8a:eb:bc:01:be:2d:f7:94:e6:79:74:
7c:d7:dc:90:3c:0d:4d:6c:a2:e9:61:ee:bd:c7:83:34:ab:93:
9b:d2:94:a6:75:b7:01:75:a0:34:97:f8:f6:99:ae:56:dc:46:
61:d3:a8:dc:be:a2:a3:9a:f7:29:41:26:22:5c:45:ec:44:2f:
eb:85:90:12:64:4c:c7:5f:fc:3f:4f:c1:1f:85:5a:35:e3:8c:
63:43:82:16:05:58:d3:c6:dc:d1:bd:1e:ea:11:6e:c4:25:e3:
03:21:b4:b1:5d:2c:fa:82:42:5e:8b:e4:63:7c:73:09:f2:96:
90:03:0f:3a:f1:df:1f:e6:12:61:71:f4:c7:05:a1:00:4d:aa:
1b:d5:e0:aa:a6:97:f8:36:cf:8e:02:86:7d:a9:03:33:7d:b0:
ea:2f:1b:48:01:2e:83:58:b5:48:97:8e:8d:ae:76:6d:71:f7:
f9:bd:37:99:e7:1d:2a:fb:41:79:d3:25:ad:ab:03:08:05:88:
72:e4:4a:c8:fa:1d:d6:91:87:35:71:bb:3d:a4:0e:79:62:95:
fd:d7:74:33
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR/eOVQDtXD0Sh5VbCwdHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjUwMTAyMTM1MDE1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMThlOTBkYWZkM2U0NDQxYzhkNjA5OWFjZTJiN2RmMDZhNTMyNGYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6LYbS77LmFIvDgxeS1gozpjrS8s
PCAy7R1NukWKNJJHqIjll8ulL33UA1HVH3aBZwI9OHPMvf9lW8TPzaFNiEKVI4d+
gEMVnEVa0e6KfKcUx1o18E5uqc9HCckrb58tUzFPvDt8Y0dHHQFy+3rmi9J09OLw
/RzOkKXAjwH4MA8gbIQua4UJIDIUujWvb837+f4EMYVC4tvqxFjRZuUpz5padP+n
c4aJ3swXOaRgGjX1IZTBokCISrD2BA80iCAM4MV2rDhHZs/17LVJFhCaqF5aoJTu
YChNR8jJVfe6/YNKnNz5N9UFXFG53iRmVB7te9Qf0J2wySJuoNef5oJH4QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPGOkNr9PkRByNYJms4rffBqUyTxMB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvOFk2UTJ2MC1SRUhJMWdtYXppdDk4R3BUSlBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB1VuIMA0G
CSqGSIb3DQEBCwUAA4IBAQBmVSqVEazYeElRpaTWz2IuLbVZtxPc7NldNEDyEisw
Owji+vee2Sc9NNKciuu8Ab4t95TmeXR819yQPA1NbKLpYe69x4M0q5Ob0pSmdbcB
daA0l/j2ma5W3EZh06jcvqKjmvcpQSYiXEXsRC/rhZASZEzHX/w/T8EfhVo144xj
Q4IWBVjTxtzRvR7qEW7EJeMDIbSxXSz6gkJei+RjfHMJ8paQAw868d8f5hJhcfTH
BaEATaob1eCqppf4Ns+OAoZ9qQMzfbDqLxtIAS6DWLVIl46NrnZtcff5vTeZ5x0q
+0F50yWtqwMIBYhy5ErI+h3WkYc1cbs9pA55YpX913Qz
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:03:13 2025 by rpki-client