Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/BU9JhoqrTpIQsWIouXHlxP2UwJc.roa
File: BU9JhoqrTpIQsWIouXHlxP2UwJc.roa (raw, json)
Hash identifier: eExBD31OYoCxpTQ9bbvDSg8Lx/R1p5NUbz4eD5SEWnA=
Subject key identifier: 05:4F:49:86:8A:AB:4E:92:10:B1:62:28:B9:71:E5:C4:FD:94:C0:97
Certificate issuer: /CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Certificate serial: 019426D9E482B93C7C6CB6438BE3B3833337
Authority key identifier: 83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/BU9JhoqrTpIQsWIouXHlxP2UwJc.roa
Signing time: Thu 02 Jan 2025 11:50:01 +0000
ROA not before: Thu 02 Jan 2025 11:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49692
IP address blocks: 91.213.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e4:82:b9:3c:7c:6c:b6:43:8b:e3:b3:83:33:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8348cce4fb6d36140eb7d56fed289b3871fc4d74
Validity
Not Before: Jan 2 11:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=054f49868aab4e9210b16228b971e5c4fd94c097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ae:d9:79:79:ce:b1:81:64:fb:e2:22:e0:c8:
80:6f:40:2d:cf:f1:fd:60:df:59:ed:c1:d9:f2:f8:
b4:70:77:59:a0:29:24:db:19:bd:a8:5b:a3:ae:a8:
dc:f2:70:16:1d:1a:4b:9e:2e:16:e0:57:9e:92:d9:
3d:8a:63:21:03:93:34:7f:ce:a4:73:bc:f4:d2:1c:
f4:d9:0d:f6:f6:77:23:34:ec:6b:9e:da:0f:b3:4c:
de:b3:94:31:14:a1:aa:a2:b0:80:52:f2:31:19:8f:
a6:c9:93:95:36:d4:a3:4f:b4:40:74:62:54:f8:94:
a6:cc:73:61:31:17:fc:83:a7:5d:ff:a4:ed:d6:43:
f7:14:8e:ca:1c:99:ce:49:7f:37:58:16:bf:94:a1:
41:8d:33:dc:ec:9d:21:7e:21:4f:8a:46:ea:38:64:
5d:b3:29:d2:bb:f9:6c:d2:25:c9:b0:e9:7b:69:37:
34:e3:f9:db:a0:96:74:24:8f:3a:89:c9:ae:56:f0:
df:60:cc:a0:eb:e8:cc:fb:ed:b4:26:be:71:0f:7a:
c8:6e:4e:43:4f:38:04:42:fb:d6:1f:7e:bd:57:48:
3c:04:f4:59:80:f8:69:93:5e:c6:c9:e7:2d:f6:a4:
43:45:18:2e:b5:1a:a3:13:2d:d5:b3:ac:9d:bc:13:
2d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4F:49:86:8A:AB:4E:92:10:B1:62:28:B9:71:E5:C4:FD:94:C0:97
X509v3 Authority Key Identifier:
keyid:83:48:CC:E4:FB:6D:36:14:0E:B7:D5:6F:ED:28:9B:38:71:FC:4D:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g0jM5PttNhQOt9Vv7SibOHH8TXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/BU9JhoqrTpIQsWIouXHlxP2UwJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/afae7c-6ebf-4543-bc2f-b8c3dd76613e/1/g0jM5PttNhQOt9Vv7SibOHH8TXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.180.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ce:ec:2f:47:cd:d1:47:36:2d:06:50:81:a2:8d:f6:6e:7f:
26:02:f7:f0:62:c3:84:16:60:4d:0d:f9:79:01:02:45:17:8c:
68:f4:bb:e2:11:ba:1d:7d:e8:88:f6:c0:36:2f:ea:b0:56:fa:
0f:6f:58:7f:e8:be:05:9e:78:58:7e:c5:68:e2:65:17:87:6c:
9a:71:5e:09:a6:e4:02:b7:fc:8a:47:e3:96:3e:94:49:29:e7:
59:f8:79:d7:06:22:8d:6d:37:f5:c6:92:a0:20:ea:85:08:f9:
6b:21:63:64:52:dc:01:04:a4:2b:e0:ff:e5:24:9a:52:dd:dc:
fd:fd:3e:9d:23:bd:2f:f0:c0:6c:1c:76:da:cc:bd:3e:b8:b0:
e2:fa:3f:60:af:66:ee:47:14:90:81:8a:68:6c:80:16:70:bd:
95:a7:d7:db:87:4e:e0:6a:fd:1f:c2:95:dc:7b:3a:5d:95:9b:
e3:53:4d:dd:8f:89:47:22:a6:38:99:f7:72:46:8f:6a:55:a2:
c7:60:0d:9c:68:f8:de:ae:37:37:9f:bb:6c:8d:73:af:d7:91:
cc:52:87:a0:bf:b0:dc:53:78:53:0c:21:36:a8:c3:bf:92:fe:
71:45:e0:d1:49:59:5f:06:2d:04:94:4b:65:03:51:34:96:db:
ed:48:0e:e4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQm2eSCuTx8bLZDi+OzgzM3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzNDhjY2U0ZmI2ZDM2MTQwZWI3ZDU2ZmVkMjg5YjM4NzFm
YzRkNzQwHhcNMjUwMTAyMTE1MDAxWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNTRmNDk4NjhhYWI0ZTkyMTBiMTYyMjhiOTcxZTVjNGZkOTRjMDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3a7ZeXnOsYFk++Ii4MiAb0Atz/H9
YN9Z7cHZ8vi0cHdZoCkk2xm9qFujrqjc8nAWHRpLni4W4Feektk9imMhA5M0f86k
c7z00hz02Q329ncjNOxrntoPs0zes5QxFKGqorCAUvIxGY+myZOVNtSjT7RAdGJU
+JSmzHNhMRf8g6dd/6Tt1kP3FI7KHJnOSX83WBa/lKFBjTPc7J0hfiFPikbqOGRd
synSu/ls0iXJsOl7aTc04/nboJZ0JI86icmuVvDfYMyg6+jM++20Jr5xD3rIbk5D
TzgEQvvWH369V0g8BPRZgPhpk17Gyect9qRDRRgutRqjEy3Vs6ydvBMtYQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAVPSYaKq06SELFiKLlx5cT9lMCXMB8GA1UdIwQY
MBaAFINIzOT7bTYUDrfVb+0omzhx/E10MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzBqTTVQdHROaFFPdDlWdjdTaWJPSEg4VFhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9hZmFlN2MtNmViZi00NTQzLWJjMmYt
YjhjM2RkNzY2MTNlLzEvQlU5SmhvcXJUcElRc1dJb3VYSGx4UDJVd0pjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMC9hZmFlN2MtNmViZi00NTQzLWJjMmYtYjhjM2RkNzY2MTNl
LzEvZzBqTTVQdHROaFFPdDlWdjdTaWJPSEg4VFhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9W0MA0G
CSqGSIb3DQEBCwUAA4IBAQB9zuwvR83RRzYtBlCBoo32bn8mAvfwYsOEFmBNDfl5
AQJFF4xo9LviEbodfeiI9sA2L+qwVvoPb1h/6L4FnnhYfsVo4mUXh2yacV4JpuQC
t/yKR+OWPpRJKedZ+HnXBiKNbTf1xpKgIOqFCPlrIWNkUtwBBKQr4P/lJJpS3dz9
/T6dI70v8MBsHHbazL0+uLDi+j9gr2buRxSQgYpobIAWcL2Vp9fbh07gav0fwpXc
ezpdlZvjU03dj4lHIqY4mfdyRo9qVaLHYA2caPjerjc3n7tsjXOv15HMUoegv7Dc
U3hTDCE2qMO/kv5xReDRSVlfBi0ElEtlA1E0ltvtSA7k
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:50:57 2025 by rpki-client