Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/90MpyMjejn8BVfnOvp9B2efMpAo.roa
File: 90MpyMjejn8BVfnOvp9B2efMpAo.roa (raw, json)
Hash identifier: +1qkeaeQeVF9arn8AjD2PEk/vuhE20HryZwNFKUrxng=
Subject key identifier: F7:43:29:C8:C8:DE:8E:7F:01:55:F9:CE:BE:9F:41:D9:E7:CC:A4:0A
Certificate issuer: /CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Certificate serial: 01942747ECC0F91E0A11891799E8293E00B2
Authority key identifier: 84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/90MpyMjejn8BVfnOvp9B2efMpAo.roa
Signing time: Thu 02 Jan 2025 13:50:12 +0000
ROA not before: Thu 02 Jan 2025 13:50:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43943
IP address blocks: 213.91.176.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:ec:c0:f9:1e:0a:11:89:17:99:e8:29:3e:00:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84b2f4fa5163af96168e88fbf9cb4ed1ed8fb4c4
Validity
Not Before: Jan 2 13:50:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f74329c8c8de8e7f0155f9cebe9f41d9e7cca40a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:45:c1:ea:7e:83:67:b6:dc:fe:8b:99:dc:45:
10:b2:29:c7:69:4f:cf:a3:7d:de:ec:03:88:98:5c:
c7:ca:14:53:ba:7e:c0:d1:96:86:89:ee:4e:ac:cf:
a3:fe:05:0f:11:af:e1:29:5d:49:bb:c0:51:b4:33:
e9:df:4e:3e:bc:7e:a2:fb:fe:79:b5:9c:a0:51:17:
27:1e:97:10:ae:ed:e7:c0:f6:85:02:7f:7f:94:0c:
cb:8a:9b:a7:5d:ad:61:f3:b4:1b:e7:3c:cb:94:74:
35:52:5b:f7:70:77:8d:38:8a:c2:82:df:15:3f:3c:
37:63:d3:72:df:0b:8a:cb:70:1c:54:fe:b6:6d:02:
c2:b5:dd:a5:a9:2b:9f:73:4e:0b:66:1b:88:ef:8e:
18:aa:70:0a:cc:2a:67:41:5c:65:82:31:0e:98:cb:
8b:88:9b:1f:74:53:96:74:fe:20:41:20:ba:91:e4:
3b:ce:58:13:79:07:c5:03:21:22:4a:30:52:b6:86:
71:8e:80:dd:d2:b0:d6:13:56:ea:60:f0:d5:72:12:
3f:55:a0:5f:e7:61:2e:0f:e0:32:d3:f9:19:07:2b:
b0:3b:aa:8e:cf:82:87:38:bf:44:05:ab:0e:f1:ff:
82:ce:d7:c0:f0:b2:71:dd:49:b3:d9:34:22:d7:bf:
2b:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:43:29:C8:C8:DE:8E:7F:01:55:F9:CE:BE:9F:41:D9:E7:CC:A4:0A
X509v3 Authority Key Identifier:
keyid:84:B2:F4:FA:51:63:AF:96:16:8E:88:FB:F9:CB:4E:D1:ED:8F:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/90MpyMjejn8BVfnOvp9B2efMpAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/4aa789-878b-472b-b847-872ba2d9f44c/1/hLL0-lFjr5YWjoj7-ctO0e2PtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.91.176.0/24
Signature Algorithm: sha256WithRSAEncryption
56:14:a7:83:8b:2f:06:dc:50:4e:9e:fb:4c:68:f0:6e:e3:bc:
b1:a7:f5:d0:22:fc:1d:c1:6a:a4:7a:f2:3a:ef:80:68:c4:bc:
9a:e6:c5:41:e5:1b:72:48:d2:17:a2:30:95:0c:db:f0:65:bb:
4d:f2:5b:7e:93:3f:cf:3f:60:88:67:12:e5:8c:b8:1f:fa:09:
04:a6:2e:0d:f9:aa:dd:04:60:89:ea:15:27:a6:e4:56:4c:0b:
7a:ff:77:32:4a:b5:d3:04:36:cf:04:b2:ed:18:18:ed:d5:35:
16:8e:7e:70:13:a0:65:9b:90:73:d8:b6:1d:aa:ab:92:16:6d:
ca:67:5c:9e:7d:8a:f2:dd:ee:7c:d6:7f:e9:25:b9:a2:1d:a1:
39:2f:fb:07:6a:74:13:76:36:51:58:bb:5c:b9:64:5f:14:7b:
2b:d5:7f:03:02:27:3a:75:4d:05:f9:9c:e3:bc:31:93:d1:be:
b2:6c:1b:52:89:90:de:90:39:59:70:58:b4:c6:70:b0:93:15:
af:f6:13:19:14:1b:1f:da:75:26:53:5a:98:d6:da:f4:b6:87:
4c:be:7a:35:10:ed:bc:7a:13:2a:a9:1b:b4:62:a3:c6:86:bd:
e0:89:9b:c3:5a:70:c1:0b:73:fb:9f:1c:77:20:ae:01:bd:7e:
bd:dd:48:9b
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR+zA+R4KEYkXmegpPgCyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0YjJmNGZhNTE2M2FmOTYxNjhlODhmYmY5Y2I0ZWQxZWQ4
ZmI0YzQwHhcNMjUwMTAyMTM1MDEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNzQzMjljOGM4ZGU4ZTdmMDE1NWY5Y2ViZTlmNDFkOWU3Y2NhNDBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0XB6n6DZ7bc/ouZ3EUQsinHaU/P
o33e7AOImFzHyhRTun7A0ZaGie5OrM+j/gUPEa/hKV1Ju8BRtDPp304+vH6i+/55
tZygURcnHpcQru3nwPaFAn9/lAzLipunXa1h87Qb5zzLlHQ1Ulv3cHeNOIrCgt8V
Pzw3Y9Ny3wuKy3AcVP62bQLCtd2lqSufc04LZhuI744YqnAKzCpnQVxlgjEOmMuL
iJsfdFOWdP4gQSC6keQ7zlgTeQfFAyEiSjBStoZxjoDd0rDWE1bqYPDVchI/VaBf
52EuD+Ay0/kZByuwO6qOz4KHOL9EBasO8f+CztfA8LJx3Umz2TQi178rVQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPdDKcjI3o5/AVX5zr6fQdnnzKQKMB8GA1UdIwQY
MBaAFISy9PpRY6+WFo6I+/nLTtHtj7TEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDct
ODcyYmEyZDlmNDRjLzEvOTBNcHlNamVqbjhCVmZuT3ZwOUIyZWZNcEFvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80YWE3ODktODc4Yi00NzJiLWI4NDctODcyYmEyZDlmNDRj
LzEvaExMMC1sRmpyNVlXam9qNy1jdE8wZTJQdE1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA1VuwMA0G
CSqGSIb3DQEBCwUAA4IBAQBWFKeDiy8G3FBOnvtMaPBu47yxp/XQIvwdwWqkevI6
74BoxLya5sVB5RtySNIXojCVDNvwZbtN8lt+kz/PP2CIZxLljLgf+gkEpi4N+ard
BGCJ6hUnpuRWTAt6/3cySrXTBDbPBLLtGBjt1TUWjn5wE6Blm5Bz2LYdqquSFm3K
Z1yefYry3e581n/pJbmiHaE5L/sHanQTdjZRWLtcuWRfFHsr1X8DAic6dU0F+Zzj
vDGT0b6ybBtSiZDekDlZcFi0xnCwkxWv9hMZFBsf2nUmU1qY1tr0todMvno1EO28
ehMqqRu0YqPGhr3giZvDWnDBC3P7nxx3IK4BvX693Uib
-----END CERTIFICATE-----
Generated at Fri Apr 25 06:59:30 2025 by rpki-client