Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/6CdL4NVEnOP6dX0O4aaaSJqjuEw.roa
File: 6CdL4NVEnOP6dX0O4aaaSJqjuEw.roa (raw, json)
Hash identifier: opstI2GGEuXqVjNMZSKfqsaiPjOYL/Qa7H9RA+r+awI=
Subject key identifier: E8:27:4B:E0:D5:44:9C:E3:FA:75:7D:0E:E1:A6:9A:48:9A:A3:B8:4C
Certificate issuer: /CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Certificate serial: 01942747E9836D720BAA91EFD41247A871A1
Authority key identifier: C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/6CdL4NVEnOP6dX0O4aaaSJqjuEw.roa
Signing time: Thu 02 Jan 2025 13:50:11 +0000
ROA not before: Thu 02 Jan 2025 13:50:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44085
IP address blocks: 91.199.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:e9:83:6d:72:0b:aa:91:ef:d4:12:47:a8:71:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5b1182d31796fa63ec3c1d9b97cb6aaac34fdd9
Validity
Not Before: Jan 2 13:50:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e8274be0d5449ce3fa757d0ee1a69a489aa3b84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:78:bb:6e:58:e1:e0:e7:4c:5b:53:c2:eb:bd:
cb:bb:5d:c0:43:37:0b:da:cc:a9:99:2f:6e:6e:6f:
ba:81:fd:f7:95:e3:18:03:fe:9f:49:a6:37:64:ff:
a4:6e:01:0a:db:36:39:81:4c:d1:90:f5:47:7c:2f:
70:75:d3:9a:03:47:f5:81:69:36:ad:be:4e:ca:00:
ab:f1:00:95:d1:6c:31:82:c1:2f:01:6d:41:77:b2:
11:79:b3:b3:09:79:2d:93:36:ac:b6:3e:d9:08:fd:
5a:e4:34:bf:7d:42:f5:50:88:84:5d:2d:a3:09:c0:
c2:1e:70:4d:1d:88:ac:97:af:88:c1:2d:b3:06:61:
02:c6:d3:7b:f6:50:2b:a2:f9:f3:16:67:1c:59:03:
c3:22:81:23:d4:e4:ba:90:01:2f:e7:3c:7a:64:d8:
74:8b:71:b1:a3:90:5e:29:36:3e:7c:91:34:7e:22:
66:8a:4e:04:3c:7c:43:34:8c:bc:c7:5c:1f:6e:6a:
07:5e:c3:4c:73:4c:55:34:f7:45:6f:58:36:ee:3e:
9c:b0:06:52:6e:46:06:5a:f8:82:9e:5e:bc:0a:ad:
fe:41:31:81:fa:62:51:c7:27:10:17:18:53:5f:1f:
28:a3:50:b1:22:c1:07:e7:39:a6:3f:ea:aa:df:6e:
9d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:27:4B:E0:D5:44:9C:E3:FA:75:7D:0E:E1:A6:9A:48:9A:A3:B8:4C
X509v3 Authority Key Identifier:
keyid:C5:B1:18:2D:31:79:6F:A6:3E:C3:C1:D9:B9:7C:B6:AA:AC:34:FD:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/6CdL4NVEnOP6dX0O4aaaSJqjuEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0d3032-bda4-4c6b-81c9-92416007158e/1/xbEYLTF5b6Y-w8HZuXy2qqw0_dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.23.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:8b:f4:5c:52:b0:b1:03:a0:77:58:80:a0:35:1d:f4:44:f8:
fe:e8:02:45:ec:66:a6:b6:84:0c:12:dd:e0:dc:6b:63:eb:7e:
d0:07:9f:65:c2:dc:a2:24:f6:e8:22:a1:96:98:2c:da:21:18:
02:76:6a:10:e8:d3:bd:92:14:75:a5:43:81:ee:5c:c3:3d:11:
42:c5:a1:4b:41:f1:85:71:70:b8:e2:f9:bb:0e:c6:51:de:3e:
4f:7f:66:92:69:23:00:96:2e:36:31:5b:88:5b:43:1b:87:6c:
80:cf:f3:50:46:55:e5:0a:06:9b:c4:73:99:01:c7:c6:88:7e:
33:d1:37:d1:5a:51:01:ad:3e:5c:91:3f:29:61:98:8f:2a:99:
6a:63:25:a2:8a:07:39:28:84:84:40:a9:2d:af:be:8e:15:cc:
62:84:60:06:25:63:46:27:67:06:a9:b5:5b:e4:c6:03:92:57:
ba:b2:e9:68:0d:93:d1:cd:38:69:6c:30:02:5a:0f:3f:7a:47:
3a:73:21:e9:26:cd:d0:02:29:84:e2:ee:cc:00:01:b5:35:8f:
40:2b:7c:ce:36:78:9a:e0:04:c3:a4:8a:91:5b:a5:5c:0e:b2:
30:ae:20:82:89:ef:25:d1:ec:55:51:7d:fc:8c:69:a7:ac:24:
44:f4:4b:61
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQnR+mDbXILqpHv1BJHqHGhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM1YjExODJkMzE3OTZmYTYzZWMzYzFkOWI5N2NiNmFhYWMz
NGZkZDkwHhcNMjUwMTAyMTM1MDExWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlODI3NGJlMGQ1NDQ5Y2UzZmE3NTdkMGVlMWE2OWE0ODlhYTNiODRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHi7bljh4OdMW1PC673Lu13AQzcL
2sypmS9ubm+6gf33leMYA/6fSaY3ZP+kbgEK2zY5gUzRkPVHfC9wddOaA0f1gWk2
rb5OygCr8QCV0WwxgsEvAW1Bd7IRebOzCXktkzastj7ZCP1a5DS/fUL1UIiEXS2j
CcDCHnBNHYisl6+IwS2zBmECxtN79lArovnzFmccWQPDIoEj1OS6kAEv5zx6ZNh0
i3Gxo5BeKTY+fJE0fiJmik4EPHxDNIy8x1wfbmoHXsNMc0xVNPdFb1g27j6csAZS
bkYGWviCnl68Cq3+QTGB+mJRxycQFxhTXx8oo1CxIsEH5zmmP+qq326dYwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOgnS+DVRJzj+nV9DuGmmkiao7hMMB8GA1UdIwQY
MBaAFMWxGC0xeW+mPsPB2bl8tqqsNP3ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wZDMwMzItYmRhNC00YzZiLTgxYzkt
OTI0MTYwMDcxNThlLzEvNkNkTDROVkVuT1A2ZFgwTzRhYWFTSnFqdUV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8wZDMwMzItYmRhNC00YzZiLTgxYzktOTI0MTYwMDcxNThl
LzEveGJFWUxURjViNlktdzhIWnVYeTJxcXcwX2RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8cXMA0G
CSqGSIb3DQEBCwUAA4IBAQBti/RcUrCxA6B3WICgNR30RPj+6AJF7GamtoQMEt3g
3Gtj637QB59lwtyiJPboIqGWmCzaIRgCdmoQ6NO9khR1pUOB7lzDPRFCxaFLQfGF
cXC44vm7DsZR3j5Pf2aSaSMAli42MVuIW0Mbh2yAz/NQRlXlCgabxHOZAcfGiH4z
0TfRWlEBrT5ckT8pYZiPKplqYyWiigc5KISEQKktr76OFcxihGAGJWNGJ2cGqbVb
5MYDkle6suloDZPRzThpbDACWg8/ekc6cyHpJs3QAimE4u7MAAG1NY9AK3zONnia
4ATDpIqRW6VcDrIwriCCie8l0exVUX38jGmnrCRE9Eth
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:37:39 2025 by rpki-client