Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/Ms3efVN_XUHd4QxKef3_YdRpvGM.roa
File: Ms3efVN_XUHd4QxKef3_YdRpvGM.roa (raw, json)
Hash identifier: JqLniVKizln7qKYMvWy43G4dVpEgMo9SnC/GlXkBUPw=
Subject key identifier: 32:CD:DE:7D:53:7F:5D:41:DD:E1:0C:4A:79:FD:FF:61:D4:69:BC:63
Certificate issuer: /CN=932460b78f6e8f4662aec7858e92051e856099f5
Certificate serial: 01941FFA349D62DAF6820EF20120EA5BDB82
Authority key identifier: 93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/Ms3efVN_XUHd4QxKef3_YdRpvGM.roa
Signing time: Wed 01 Jan 2025 03:47:58 +0000
ROA not before: Wed 01 Jan 2025 03:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47836
IP address blocks: 91.208.175.0/24 maxlen: 24
185.161.88.0/22 maxlen: 24
2a00:ddc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:34:9d:62:da:f6:82:0e:f2:01:20:ea:5b:db:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=932460b78f6e8f4662aec7858e92051e856099f5
Validity
Not Before: Jan 1 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=32cdde7d537f5d41dde10c4a79fdff61d469bc63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:39:05:8b:b9:b0:54:ef:0f:69:55:4b:10:1c:
02:cd:06:c9:af:8d:17:97:03:ea:ad:43:b2:01:ca:
29:fb:c4:43:3f:58:7d:7f:48:49:38:1b:9c:7a:80:
29:b6:51:99:51:77:2a:40:9a:1f:ea:a4:e0:2a:73:
2d:da:54:1a:e7:3a:99:ad:fa:35:a0:fa:81:41:b9:
85:bf:9c:04:fd:9f:24:d6:22:40:0a:b6:0f:05:4b:
50:97:bb:e6:4e:ad:3c:51:fe:b0:5a:8c:95:f5:1d:
eb:e0:d3:33:39:54:0a:e1:3d:47:3d:f2:f9:40:c3:
a2:eb:5d:d0:02:65:68:e7:8e:e7:ee:3f:47:04:0d:
14:a0:9e:10:c2:27:2f:bc:b1:5e:ad:8e:12:6c:ff:
d2:df:c7:b0:72:b5:c1:31:14:e4:2b:cd:8b:4a:60:
ce:16:e4:23:79:ab:7e:ce:c7:19:c0:cf:f1:39:e9:
90:b4:4f:fc:3b:4c:a5:d9:dd:d1:1d:f7:01:6a:38:
03:01:e6:73:10:57:c9:bb:15:47:a1:24:a6:cd:be:
2e:ed:7f:7e:28:69:15:e5:20:d8:f2:47:62:de:a3:
07:1f:bd:bb:62:71:67:db:19:c2:31:83:e1:12:43:
b9:f6:e5:17:6e:07:2a:8b:8e:00:ba:63:3f:ac:f3:
bd:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:CD:DE:7D:53:7F:5D:41:DD:E1:0C:4A:79:FD:FF:61:D4:69:BC:63
X509v3 Authority Key Identifier:
keyid:93:24:60:B7:8F:6E:8F:46:62:AE:C7:85:8E:92:05:1E:85:60:99:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyRgt49uj0ZirseFjpIFHoVgmfU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/Ms3efVN_XUHd4QxKef3_YdRpvGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/c251f1-cb70-4283-8433-8c9fcbb3ec52/1/kyRgt49uj0ZirseFjpIFHoVgmfU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.175.0/24
185.161.88.0/22
IPv6:
2a00:ddc0::/32
Signature Algorithm: sha256WithRSAEncryption
8a:11:c6:33:6c:1d:7b:e7:cf:07:5b:eb:5d:7e:47:a6:ce:79:
f6:17:15:36:34:88:2b:2f:76:e1:4e:2a:64:02:eb:6e:dd:9d:
f9:16:ed:bd:48:83:cf:62:b6:69:6a:50:97:f7:d5:99:95:70:
89:99:f1:7f:a6:6e:8a:34:00:b4:ff:7e:31:e3:74:7a:c3:1b:
49:81:a7:cc:7d:ab:ed:34:f7:a6:39:4e:89:c2:b5:36:ba:f1:
e9:4e:bd:a9:85:25:13:c6:7d:81:aa:cf:ef:69:23:23:86:0c:
09:84:af:d4:1c:da:57:99:42:d6:cd:61:87:a2:53:da:1d:74:
03:1e:19:e6:61:f0:f5:32:ed:f6:82:39:ef:70:76:31:3b:a7:
f3:13:09:83:8f:d4:af:ac:6d:7b:d5:fd:73:3e:5b:52:fa:e1:
92:22:ba:ce:46:a3:da:d8:4b:a4:ce:91:43:23:73:aa:db:85:
60:d7:a5:45:d7:f3:50:d7:14:95:ca:00:eb:74:66:c9:2a:58:
b5:90:14:62:66:65:ae:db:b4:ea:4d:f9:aa:25:c1:9f:17:62:
9b:99:f1:68:74:00:f3:81:a9:fc:ae:07:45:85:1a:14:8c:70:
1e:33:2f:07:1d:b9:94:ac:41:78:14:a2:ec:81:02:bc:b2:3a:
c0:ec:1d:d6
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZQf+jSdYtr2gg7yASDqW9uCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzMjQ2MGI3OGY2ZThmNDY2MmFlYzc4NThlOTIwNTFlODU2
MDk5ZjUwHhcNMjUwMTAxMDM0NzU4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzMmNkZGU3ZDUzN2Y1ZDQxZGRlMTBjNGE3OWZkZmY2MWQ0NjliYzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DkFi7mwVO8PaVVLEBwCzQbJr40X
lwPqrUOyAcop+8RDP1h9f0hJOBuceoAptlGZUXcqQJof6qTgKnMt2lQa5zqZrfo1
oPqBQbmFv5wE/Z8k1iJACrYPBUtQl7vmTq08Uf6wWoyV9R3r4NMzOVQK4T1HPfL5
QMOi613QAmVo547n7j9HBA0UoJ4QwicvvLFerY4SbP/S38ewcrXBMRTkK82LSmDO
FuQjeat+zscZwM/xOemQtE/8O0yl2d3RHfcBajgDAeZzEFfJuxVHoSSmzb4u7X9+
KGkV5SDY8kdi3qMHH727YnFn2xnCMYPhEkO59uUXbgcqi44AumM/rPO9SQIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFDLN3n1Tf11B3eEMSnn9/2HUabxjMB8GA1UdIwQY
MBaAFJMkYLePbo9GYq7HhY6SBR6FYJn1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva3lSZ3Q0OXVqMFppcnNlRmpwSUZIb1ZnbWZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9jMjUxZjEtY2I3MC00MjgzLTg0MzMt
OGM5ZmNiYjNlYzUyLzEvTXMzZWZWTl9YVUhkNFF4S2VmM19ZZFJwdkdNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9jMjUxZjEtY2I3MC00MjgzLTg0MzMtOGM5ZmNiYjNlYzUy
LzEva3lSZ3Q0OXVqMFppcnNlRmpwSUZIb1ZnbWZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAW9CvAwQC
uaFYMA0EAgACMAcDBQAqAN3AMA0GCSqGSIb3DQEBCwUAA4IBAQCKEcYzbB17588H
W+tdfkemznn2FxU2NIgrL3bhTipkAutu3Z35Fu29SIPPYrZpalCX99WZlXCJmfF/
pm6KNAC0/34x43R6wxtJgafMfavtNPemOU6JwrU2uvHpTr2phSUTxn2Bqs/vaSMj
hgwJhK/UHNpXmULWzWGHolPaHXQDHhnmYfD1Mu32gjnvcHYxO6fzEwmDj9SvrG17
1f1zPltS+uGSIrrORqPa2EukzpFDI3Oq24Vg16VF1/NQ1xSVygDrdGbJKli1kBRi
ZmWu27TqTfmqJcGfF2KbmfFodADzgan8rgdFhRoUjHAeMy8HHbmUrEF4FKLsgQK8
sjrA7B3W
-----END CERTIFICATE-----
Generated at Fri Apr 25 05:58:26 2025 by rpki-client