Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/IdMP5mSXjXy5RCG7h8iUYBC-7wU.roa
File: IdMP5mSXjXy5RCG7h8iUYBC-7wU.roa (raw, json)
Hash identifier: Ak+0cLrZuuXp8cAQmKH4z3k18zZ0o3zgplicC1IedBk=
Subject key identifier: 21:D3:0F:E6:64:97:8D:7C:B9:44:21:BB:87:C8:94:60:10:BE:EF:05
Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Certificate serial: 019422FC32A0B1A81ED6212FF05A8ACC342B
Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/IdMP5mSXjXy5RCG7h8iUYBC-7wU.roa
Signing time: Wed 01 Jan 2025 17:49:00 +0000
ROA not before: Wed 01 Jan 2025 17:49:00 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203259
IP address blocks: 91.240.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:32:a0:b1:a8:1e:d6:21:2f:f0:5a:8a:cc:34:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Validity
Not Before: Jan 1 17:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21d30fe664978d7cb94421bb87c8946010beef05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:43:90:d1:bd:0a:5b:f9:c6:23:60:1d:4d:3e:
f2:09:3c:d0:55:43:08:20:1e:ca:1f:83:7e:d5:2d:
49:c3:51:f6:ad:9f:1a:32:6b:1e:6c:b5:f2:a0:1d:
3f:af:59:07:49:d7:d4:b4:4d:a9:56:0b:b9:e7:cc:
a6:f2:df:87:4d:56:a0:2e:1d:1b:41:8e:c0:a3:1a:
56:8e:19:4d:43:13:13:d5:56:13:3c:f8:a1:13:f3:
db:46:41:de:13:0e:81:6d:1b:b6:f8:62:ca:c6:d9:
ad:c8:95:66:69:a2:a9:90:83:d1:db:d7:0d:a1:21:
5b:7e:f5:4d:7d:9d:74:1b:3f:44:6c:eb:f1:c9:5a:
71:d1:05:87:9c:05:37:f4:f4:7f:b4:54:00:93:5e:
b2:08:5a:33:4d:fe:db:91:1c:a0:4c:ef:8b:72:4f:
b1:09:b4:c1:3f:62:22:16:75:1e:80:ed:89:08:0b:
94:26:8b:4c:ff:53:2a:11:a8:00:67:1e:d1:9f:fd:
a9:21:79:5f:ef:c1:f3:f7:25:e6:a3:37:90:3a:a9:
29:6c:c3:0e:36:0f:a8:2a:18:17:2d:96:3c:09:68:
df:96:4d:bf:ab:ad:ff:87:70:d5:de:7f:26:bf:14:
c7:37:47:a4:ec:af:49:80:7c:37:41:29:8d:80:5c:
7e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D3:0F:E6:64:97:8D:7C:B9:44:21:BB:87:C8:94:60:10:BE:EF:05
X509v3 Authority Key Identifier:
keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/IdMP5mSXjXy5RCG7h8iUYBC-7wU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.232.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:e2:1e:c9:04:ed:f5:25:21:ab:46:b7:3e:f2:3c:49:84:96:
0f:34:4a:aa:8c:5f:ef:e0:20:03:98:a3:56:50:70:a8:ff:c9:
38:04:af:1f:0a:69:b6:49:d1:55:09:f1:4f:58:bd:5a:13:a0:
8a:1f:a9:5c:41:af:88:4d:7d:6d:b0:29:5f:6a:95:76:70:8a:
ae:4f:b5:11:9f:73:73:2e:8a:53:34:c0:1f:7e:81:5e:4c:84:
c1:23:67:86:eb:a6:2a:ee:13:cb:42:38:a3:8f:9c:b2:ed:2b:
5f:30:00:22:dc:ac:d6:34:38:3e:55:c0:c3:ec:5f:0a:8a:c1:
6e:a9:20:96:ed:f6:a3:1e:10:9b:64:e2:8f:90:d1:dc:12:e7:
71:18:f3:8e:f4:fe:48:7c:66:5c:30:b0:9a:25:a1:f8:3f:19:
bd:22:00:cf:30:51:fb:21:a2:4f:3d:77:dc:cf:24:d8:0a:9a:
54:c5:30:9d:4c:9a:35:80:f5:a6:db:b2:da:3d:6e:6e:29:c6:
f8:04:bc:cc:22:d0:eb:10:5f:17:eb:e2:c9:08:e5:da:8a:87:
fc:39:b1:b6:b3:45:f5:f6:b3:f9:c7:46:a5:7f:81:86:f5:b9:
1d:71:39:5e:39:e5:ca:48:6d:ea:9f:25:44:cd:a2:fe:1f:af:
8c:88:06:c1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQi/DKgsage1iEv8FqKzDQrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4Y2VmNzIyZGFiZTU5NzVjYTRmOWJhODYxNjM4OGVjNmM2
NTZhMjAwHhcNMjUwMTAxMTc0OTAwWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMWQzMGZlNjY0OTc4ZDdjYjk0NDIxYmI4N2M4OTQ2MDEwYmVlZjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUOQ0b0KW/nGI2AdTT7yCTzQVUMI
IB7KH4N+1S1Jw1H2rZ8aMmsebLXyoB0/r1kHSdfUtE2pVgu558ym8t+HTVagLh0b
QY7AoxpWjhlNQxMT1VYTPPihE/PbRkHeEw6BbRu2+GLKxtmtyJVmaaKpkIPR29cN
oSFbfvVNfZ10Gz9EbOvxyVpx0QWHnAU39PR/tFQAk16yCFozTf7bkRygTO+Lck+x
CbTBP2IiFnUegO2JCAuUJotM/1MqEagAZx7Rn/2pIXlf78Hz9yXmozeQOqkpbMMO
Ng+oKhgXLZY8CWjflk2/q63/h3DV3n8mvxTHN0ek7K9JgHw3QSmNgFx+BQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCHTD+Zkl418uUQhu4fIlGAQvu8FMB8GA1UdIwQY
MBaAFGjO9yLavll1yk+bqGFjiOxsZWogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83OTBjMTUtMjA1OC00YzM5LTkwY2It
Y2Q2NzdhYjQzMWFhLzEvSWRNUDVtU1hqWHk1UkNHN2g4aVVZQkMtN3dVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi83OTBjMTUtMjA1OC00YzM5LTkwY2ItY2Q2NzdhYjQzMWFh
LzEvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/DoMA0G
CSqGSIb3DQEBCwUAA4IBAQCj4h7JBO31JSGrRrc+8jxJhJYPNEqqjF/v4CADmKNW
UHCo/8k4BK8fCmm2SdFVCfFPWL1aE6CKH6lcQa+ITX1tsClfapV2cIquT7URn3Nz
LopTNMAffoFeTITBI2eG66Yq7hPLQjijj5yy7StfMAAi3KzWNDg+VcDD7F8KisFu
qSCW7fajHhCbZOKPkNHcEudxGPOO9P5IfGZcMLCaJaH4Pxm9IgDPMFH7IaJPPXfc
zyTYCppUxTCdTJo1gPWm27LaPW5uKcb4BLzMItDrEF8X6+LJCOXaiof8ObG2s0X1
9rP5x0alf4GG9bkdcTleOeXKSG3qnyVEzaL+H6+MiAbB
-----END CERTIFICATE-----
Generated at Fri Apr 25 12:24:06 2025 by rpki-client