Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/juTNVsKtR118cxI6QcWd767caRM.roa
File: juTNVsKtR118cxI6QcWd767caRM.roa (raw, json)
Hash identifier: MCsaWupCkvlIsE0i3wi2ave3G1GEJt2KTaWMIAFFXxI=
Subject key identifier: 8E:E4:CD:56:C2:AD:47:5D:7C:73:12:3A:41:C5:9D:EF:AE:DC:69:13
Certificate issuer: /CN=c91820b50007e41c53dd6029b37954d3572f4c29
Certificate serial: 019422200E2CE3D670267E982664A5D370E9
Authority key identifier: C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/juTNVsKtR118cxI6QcWd767caRM.roa
Signing time: Wed 01 Jan 2025 13:48:33 +0000
ROA not before: Wed 01 Jan 2025 13:48:33 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48642
IP address blocks: 91.193.148.0/22 maxlen: 22
91.223.170.0/24 maxlen: 24
195.206.226.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:20:0e:2c:e3:d6:70:26:7e:98:26:64:a5:d3:70:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c91820b50007e41c53dd6029b37954d3572f4c29
Validity
Not Before: Jan 1 13:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8ee4cd56c2ad475d7c73123a41c59defaedc6913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:29:90:8c:a9:23:51:c1:b8:f5:2e:97:0a:78:
e2:a3:8c:f5:f7:cc:09:2a:59:99:63:6c:b4:42:c0:
33:4a:5c:61:0b:0b:9f:83:a2:ab:03:8a:c2:c7:1f:
82:76:db:02:db:97:30:85:6a:81:57:97:e1:59:e6:
d7:16:f6:93:dd:a2:9c:d6:bd:b5:cc:e7:82:61:9f:
e0:51:c8:f1:fd:93:36:c1:a1:f4:8b:30:29:c4:0b:
e7:61:90:2e:d4:ba:20:62:6b:9b:40:f2:0a:96:ef:
67:14:b8:a2:79:82:1e:de:43:60:95:5a:be:3e:ea:
fd:b0:4a:5c:3d:e3:95:64:a0:f1:25:40:ee:b6:47:
0b:dd:1a:20:6a:e2:26:1b:b8:81:3f:24:63:4e:b8:
91:00:c9:27:7d:39:17:6e:c3:06:77:5d:8b:0a:1d:
95:9e:05:ab:70:1e:24:a8:ff:e1:10:40:1a:aa:d0:
3d:6a:79:86:e7:37:b7:01:66:bb:07:fb:54:fe:e5:
7f:f7:32:ff:dd:de:39:ec:ab:41:f7:8c:40:6e:dc:
ab:37:4c:c2:ec:51:5f:ba:54:27:1a:2d:a0:e4:32:
b3:e7:b5:82:8c:cc:70:6b:0c:6b:b8:07:06:a6:fe:
f1:34:91:cd:8d:aa:01:39:62:eb:91:86:8c:19:73:
01:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E4:CD:56:C2:AD:47:5D:7C:73:12:3A:41:C5:9D:EF:AE:DC:69:13
X509v3 Authority Key Identifier:
keyid:C9:18:20:B5:00:07:E4:1C:53:DD:60:29:B3:79:54:D3:57:2F:4C:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yRggtQAH5BxT3WAps3lU01cvTCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/juTNVsKtR118cxI6QcWd767caRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/ea7121-5414-4484-9185-eec14c971c4d/1/yRggtQAH5BxT3WAps3lU01cvTCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.148.0/22
91.223.170.0/24
195.206.226.0/23
Signature Algorithm: sha256WithRSAEncryption
3b:6a:ae:54:31:17:37:41:04:12:c2:06:9c:dd:00:63:b2:c1:
10:26:68:3c:cc:2d:c5:6c:0e:0c:7d:79:43:58:12:bf:fc:81:
29:04:b5:70:0e:76:eb:72:29:4b:b2:57:65:40:89:1b:a8:41:
b3:0d:6d:0b:05:5d:58:f7:ee:eb:fb:15:f6:de:ab:ac:d7:9b:
23:e2:24:81:b5:e1:22:e2:f8:40:5d:5e:2c:08:b5:22:ee:4e:
34:e7:ed:82:b5:89:1c:4a:3e:3a:c2:0f:76:14:f2:28:5d:59:
b0:b8:7e:75:95:25:4f:80:02:a7:0a:3b:49:62:85:34:c5:f6:
49:79:5b:0c:b0:ae:67:05:e1:59:a1:db:79:40:bc:15:d9:97:
74:68:2e:14:32:ec:39:c0:77:ee:c8:42:8d:89:f4:1d:c9:58:
5a:f2:73:39:65:ad:b4:3a:d6:32:69:0c:a0:9f:2e:9d:1c:59:
51:6b:54:b4:fa:4a:1a:18:f5:86:54:cd:79:ad:29:93:2f:b2:
58:9d:e7:02:44:e2:a5:9b:36:86:d9:00:a1:86:d6:0a:69:21:
f0:30:49:7e:72:e1:e8:64:d9:37:b9:26:6a:9c:a2:e3:b9:e4:
70:47:32:fb:3c:07:dd:0d:e6:4b:e4:a6:64:0f:59:15:e4:71:
fc:25:70:90
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZQiIA4s49ZwJn6YJmSl03DpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM5MTgyMGI1MDAwN2U0MWM1M2RkNjAyOWIzNzk1NGQzNTcy
ZjRjMjkwHhcNMjUwMTAxMTM0ODMzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWU0Y2Q1NmMyYWQ0NzVkN2M3MzEyM2E0MWM1OWRlZmFlZGM2OTEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCmQjKkjUcG49S6XCnjio4z198wJ
KlmZY2y0QsAzSlxhCwufg6KrA4rCxx+CdtsC25cwhWqBV5fhWebXFvaT3aKc1r21
zOeCYZ/gUcjx/ZM2waH0izApxAvnYZAu1LogYmubQPIKlu9nFLiieYIe3kNglVq+
Pur9sEpcPeOVZKDxJUDutkcL3RogauImG7iBPyRjTriRAMknfTkXbsMGd12LCh2V
ngWrcB4kqP/hEEAaqtA9anmG5ze3AWa7B/tU/uV/9zL/3d457KtB94xAbtyrN0zC
7FFfulQnGi2g5DKz57WCjMxwawxruAcGpv7xNJHNjaoBOWLrkYaMGXMB+wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFI7kzVbCrUddfHMSOkHFne+u3GkTMB8GA1UdIwQY
MBaAFMkYILUAB+QcU91gKbN5VNNXL0wpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveVJnZ3RRQUg1QnhUM1dBcHMzbFUwMWN2VENrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9lYTcxMjEtNTQxNC00NDg0LTkxODUt
ZWVjMTRjOTcxYzRkLzEvanVUTlZzS3RSMTE4Y3hJNlFjV2Q3NjdjYVJNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9lYTcxMjEtNTQxNC00NDg0LTkxODUtZWVjMTRjOTcxYzRk
LzEveVJnZ3RRQUg1QnhUM1dBcHMzbFUwMWN2VENrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCW8GUAwQA
W9+qAwQBw87iMA0GCSqGSIb3DQEBCwUAA4IBAQA7aq5UMRc3QQQSwgac3QBjssEQ
Jmg8zC3FbA4MfXlDWBK//IEpBLVwDnbrcilLsldlQIkbqEGzDW0LBV1Y9+7r+xX2
3qus15sj4iSBteEi4vhAXV4sCLUi7k405+2CtYkcSj46wg92FPIoXVmwuH51lSVP
gAKnCjtJYoU0xfZJeVsMsK5nBeFZodt5QLwV2Zd0aC4UMuw5wHfuyEKNifQdyVha
8nM5Za20OtYyaQygny6dHFlRa1S0+koaGPWGVM15rSmTL7JYnecCROKlmzaG2QCh
htYKaSHwMEl+cuHoZNk3uSZqnKLjueRwRzL7PAfdDeZL5KZkD1kV5HH8JXCQ
-----END CERTIFICATE-----
Generated at Sat Apr 26 02:08:10 2025 by rpki-client