Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/FkyY0Sz6P-vEspCfDc5ti5faixQ.roa
File: FkyY0Sz6P-vEspCfDc5ti5faixQ.roa (raw, json)
Hash identifier: cTxtXDf2i+J5oFdILpbffZQpgT6dU26M1jcBVWXO1g8=
Subject key identifier: 16:4C:98:D1:2C:FA:3F:EB:C4:B2:90:9F:0D:CE:6D:8B:97:DA:8B:14
Certificate issuer: /CN=8b9facca22cc0c60e237a7b20416a260045a5c68
Certificate serial: 0194221FBA5E4B26500AA428983C9564A741
Authority key identifier: 8B:9F:AC:CA:22:CC:0C:60:E2:37:A7:B2:04:16:A2:60:04:5A:5C:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5-syiLMDGDiN6eyBBaiYARaXGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/FkyY0Sz6P-vEspCfDc5ti5faixQ.roa
Signing time: Wed 01 Jan 2025 13:48:12 +0000
ROA not before: Wed 01 Jan 2025 13:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15404
IP address blocks: 91.212.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ba:5e:4b:26:50:0a:a4:28:98:3c:95:64:a7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b9facca22cc0c60e237a7b20416a260045a5c68
Validity
Not Before: Jan 1 13:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=164c98d12cfa3febc4b2909f0dce6d8b97da8b14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7f:68:e1:ac:da:b8:56:c1:cc:d7:05:93:55:
ec:0f:e4:ce:79:ae:e1:2d:b9:bf:77:20:b6:0c:07:
dd:46:9a:08:54:f5:3e:86:d7:fd:ad:01:99:4f:ce:
29:56:c9:81:52:3c:5d:47:ed:c7:78:3b:66:bb:f5:
32:21:b9:1f:76:24:12:2d:9b:ff:19:6e:13:93:ad:
0a:81:48:06:49:16:2a:62:7b:e7:f3:90:6b:ac:37:
bb:3a:e5:45:34:78:24:e3:e6:81:3c:fa:a0:76:f2:
df:eb:12:4c:f6:55:93:6b:aa:ac:2f:17:a2:ac:79:
27:b2:67:c8:f9:e9:86:57:b0:68:99:cb:47:2d:ad:
34:01:f0:a5:82:46:35:c0:02:11:ff:21:8b:9d:f7:
a0:e7:51:fa:25:e7:10:e9:85:de:7d:64:83:bb:9e:
c3:12:2e:6b:25:5e:4a:d3:5e:6b:4a:88:24:d7:35:
31:0d:06:26:81:f7:45:61:2a:23:d3:ce:6a:85:e8:
64:b7:01:6e:be:bd:f0:9e:9c:87:53:16:e0:f7:75:
2f:4d:10:ea:2f:07:93:3a:df:8a:e2:48:c3:93:9e:
e8:90:56:10:0b:94:8d:26:29:c3:97:b7:8a:2f:67:
90:f9:d6:61:8f:fe:ec:45:da:c6:4d:7e:1a:9b:2e:
33:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4C:98:D1:2C:FA:3F:EB:C4:B2:90:9F:0D:CE:6D:8B:97:DA:8B:14
X509v3 Authority Key Identifier:
keyid:8B:9F:AC:CA:22:CC:0C:60:E2:37:A7:B2:04:16:A2:60:04:5A:5C:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5-syiLMDGDiN6eyBBaiYARaXGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/FkyY0Sz6P-vEspCfDc5ti5faixQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/a3af20-a4a9-4e2e-b344-30b1886d797a/1/i5-syiLMDGDiN6eyBBaiYARaXGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.113.0/24
Signature Algorithm: sha256WithRSAEncryption
47:49:9d:4c:ec:53:79:97:47:e3:86:66:de:be:a9:02:44:c9:
51:14:48:6c:07:03:51:0d:ef:51:6c:29:5f:43:14:ad:fb:68:
24:6e:b4:78:54:aa:10:d1:ab:fc:67:2f:e2:e2:f4:41:0c:8d:
cd:10:9f:50:76:08:1a:25:09:22:69:47:38:f0:e6:2e:5b:9d:
ab:e7:e3:58:50:e0:25:50:8e:00:82:4b:b4:c3:fb:60:66:53:
19:21:1d:e9:3f:0d:87:88:1c:0d:26:4b:90:aa:d2:51:50:26:
7a:b4:6c:b1:12:a4:69:79:69:23:75:b2:40:1c:62:3a:81:72:
9c:bd:d3:c0:7c:94:b5:dc:e0:b4:ed:d9:f6:4d:f0:19:73:0b:
0b:c1:66:b2:2c:f2:73:81:5d:04:f7:32:ca:e9:fa:d3:2c:50:
6e:1a:0f:dc:b3:f4:61:90:a8:3e:de:be:94:74:b2:b5:ce:a2:
e0:67:89:db:76:fd:fb:03:1f:94:22:ac:dc:0c:1a:2b:c7:6d:
8b:4a:8c:78:bd:de:41:e9:9a:43:c5:7f:b5:91:4e:e9:4f:63:
13:9a:de:b5:8c:52:17:f4:83:e7:cf:55:dd:67:93:c4:3d:a6:
94:ac:3a:c4:1c:64:1f:1c:3d:20:a8:1a:b5:d8:3d:b8:dc:22:
25:57:de:52
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQiH7peSyZQCqQomDyVZKdBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOWZhY2NhMjJjYzBjNjBlMjM3YTdiMjA0MTZhMjYwMDQ1
YTVjNjgwHhcNMjUwMTAxMTM0ODEyWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjRjOThkMTJjZmEzZmViYzRiMjkwOWYwZGNlNmQ4Yjk3ZGE4YjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6n9o4azauFbBzNcFk1XsD+TOea7h
Lbm/dyC2DAfdRpoIVPU+htf9rQGZT84pVsmBUjxdR+3HeDtmu/UyIbkfdiQSLZv/
GW4Tk60KgUgGSRYqYnvn85BrrDe7OuVFNHgk4+aBPPqgdvLf6xJM9lWTa6qsLxei
rHknsmfI+emGV7BomctHLa00AfClgkY1wAIR/yGLnfeg51H6JecQ6YXefWSDu57D
Ei5rJV5K015rSogk1zUxDQYmgfdFYSoj085qhehktwFuvr3wnpyHUxbg93UvTRDq
LweTOt+K4kjDk57okFYQC5SNJinDl7eKL2eQ+dZhj/7sRdrGTX4amy4z5QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBZMmNEs+j/rxLKQnw3ObYuX2osUMB8GA1UdIwQY
MBaAFIufrMoizAxg4jensgQWomAEWlxoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTUtc3lpTE1ER0RpTjZleUJCYWlZQVJhWEdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9hM2FmMjAtYTRhOS00ZTJlLWIzNDQt
MzBiMTg4NmQ3OTdhLzEvRmt5WTBTejZQLXZFc3BDZkRjNXRpNWZhaXhRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9hM2FmMjAtYTRhOS00ZTJlLWIzNDQtMzBiMTg4NmQ3OTdh
LzEvaTUtc3lpTE1ER0RpTjZleUJCYWlZQVJhWEdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9RxMA0G
CSqGSIb3DQEBCwUAA4IBAQBHSZ1M7FN5l0fjhmbevqkCRMlRFEhsBwNRDe9RbClf
QxSt+2gkbrR4VKoQ0av8Zy/i4vRBDI3NEJ9QdggaJQkiaUc48OYuW52r5+NYUOAl
UI4Agku0w/tgZlMZIR3pPw2HiBwNJkuQqtJRUCZ6tGyxEqRpeWkjdbJAHGI6gXKc
vdPAfJS13OC07dn2TfAZcwsLwWayLPJzgV0E9zLK6frTLFBuGg/cs/RhkKg+3r6U
dLK1zqLgZ4nbdv37Ax+UIqzcDBorx22LSox4vd5B6ZpDxX+1kU7pT2MTmt61jFIX
9IPnz1XdZ5PEPaaUrDrEHGQfHD0gqBq12D243CIlV95S
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:55:11 2025 by rpki-client