Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/EZbYUKlbHnDupSiI6vHg0ScrIQc.roa
File: EZbYUKlbHnDupSiI6vHg0ScrIQc.roa (raw, json)
Hash identifier: yrslRTQqqMutFqrXn7kHXajy2V9WRPNQRVUgaXrJw9E=
Subject key identifier: 11:96:D8:50:A9:5B:1E:70:EE:A5:28:88:EA:F1:E0:D1:27:2B:21:07
Certificate issuer: /CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Certificate serial: 019421B1CF722FE496FDC4868E7F987351DD
Authority key identifier: A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/EZbYUKlbHnDupSiI6vHg0ScrIQc.roa
Signing time: Wed 01 Jan 2025 11:48:08 +0000
ROA not before: Wed 01 Jan 2025 11:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42927
IP address blocks: 91.198.137.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:cf:72:2f:e4:96:fd:c4:86:8e:7f:98:73:51:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a09608f15b367aee486b856d9e404c3d1e0a5fd4
Validity
Not Before: Jan 1 11:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1196d850a95b1e70eea52888eaf1e0d1272b2107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e7:48:06:95:b1:ad:87:b0:3e:92:cb:be:d5:
71:18:88:d4:77:40:5b:fd:b6:bd:43:4d:65:26:ea:
01:eb:bf:0c:35:75:6a:ea:f0:2c:fd:cd:42:b3:95:
6d:32:a8:8d:99:af:eb:ff:df:29:26:1b:2c:61:36:
26:6d:51:63:45:4f:a3:99:37:ff:4b:25:79:68:19:
89:2d:64:e8:c6:84:f6:ad:9f:5c:4c:20:ef:97:3d:
5d:57:0d:64:a0:24:21:02:bb:fd:a1:86:bd:99:fd:
23:a2:bf:c0:fc:0f:04:2c:bb:07:1c:27:70:55:2e:
b4:6e:72:1b:d6:e5:54:91:34:49:de:64:f5:25:6c:
ba:79:78:49:e3:30:fa:bc:dd:47:39:39:b9:44:53:
40:02:28:ea:a8:04:9f:8a:ac:76:26:c9:70:13:9b:
9d:aa:67:11:8b:50:f9:61:8b:82:d9:02:04:ce:d1:
ea:57:c4:51:4d:d6:21:13:5d:46:03:0d:c0:50:4d:
3f:10:f7:80:32:d1:8d:9a:41:d5:54:c3:f8:6e:fb:
8d:17:9a:51:e1:40:c4:f7:bb:30:15:01:cf:32:4e:
42:81:0d:fc:96:81:82:0d:37:8f:99:5f:ed:90:2f:
87:8b:a3:fa:09:fe:75:74:6c:40:52:f5:31:07:6c:
c9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:96:D8:50:A9:5B:1E:70:EE:A5:28:88:EA:F1:E0:D1:27:2B:21:07
X509v3 Authority Key Identifier:
keyid:A0:96:08:F1:5B:36:7A:EE:48:6B:85:6D:9E:40:4C:3D:1E:0A:5F:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/EZbYUKlbHnDupSiI6vHg0ScrIQc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/81066d-2123-4b6d-8bcf-b8ed66d42782/1/oJYI8Vs2eu5Ia4VtnkBMPR4KX9Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.137.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:88:ab:d1:0e:1a:14:38:b6:14:22:c1:ff:61:0c:73:59:ce:
6d:39:ce:a9:bf:9f:8c:52:f2:41:c8:4f:f8:5e:a2:e6:3c:2f:
f2:b2:16:87:32:15:85:5b:d5:11:dd:86:f1:91:dc:c1:2d:df:
60:37:a6:95:ec:be:8f:08:cd:e0:55:a5:4f:3c:b5:43:55:a2:
ff:b6:ea:aa:4c:3c:c9:41:da:ee:be:4d:28:80:75:1b:9c:7e:
6f:ce:5c:43:25:2e:ac:d9:53:6f:2c:b4:7c:43:76:9b:57:74:
90:ad:ec:ba:2d:10:1a:46:3c:fd:63:8f:93:94:63:67:86:9e:
0e:fc:ba:ff:1b:b3:34:56:5b:b6:27:de:d6:65:ce:54:04:33:
02:6f:12:91:98:81:17:f5:d2:f6:f3:78:d7:9c:87:84:10:0b:
da:23:16:9c:e4:bc:0d:67:06:ff:fb:12:1b:81:5b:ee:7b:55:
b2:38:cd:45:33:4a:39:0b:db:54:a4:2d:fb:10:26:ea:37:1f:
ce:04:1a:43:62:12:17:ed:20:d6:d9:d3:02:76:33:7a:9b:37:
fd:6d:4e:e4:09:b1:bf:d2:b7:33:a8:a6:65:b0:90:3a:a7:e9:
8a:e8:b0:40:37:18:67:56:9e:65:b1:d8:8a:62:9b:b0:5d:af:
ff:51:a5:8e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQhsc9yL+SW/cSGjn+Yc1HdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEwOTYwOGYxNWIzNjdhZWU0ODZiODU2ZDllNDA0YzNkMWUw
YTVmZDQwHhcNMjUwMTAxMTE0ODA4WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMTk2ZDg1MGE5NWIxZTcwZWVhNTI4ODhlYWYxZTBkMTI3MmIyMTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+dIBpWxrYewPpLLvtVxGIjUd0Bb
/ba9Q01lJuoB678MNXVq6vAs/c1Cs5VtMqiNma/r/98pJhssYTYmbVFjRU+jmTf/
SyV5aBmJLWToxoT2rZ9cTCDvlz1dVw1koCQhArv9oYa9mf0jor/A/A8ELLsHHCdw
VS60bnIb1uVUkTRJ3mT1JWy6eXhJ4zD6vN1HOTm5RFNAAijqqASfiqx2JslwE5ud
qmcRi1D5YYuC2QIEztHqV8RRTdYhE11GAw3AUE0/EPeAMtGNmkHVVMP4bvuNF5pR
4UDE97swFQHPMk5CgQ38loGCDTePmV/tkC+Hi6P6Cf51dGxAUvUxB2zJuwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBGW2FCpWx5w7qUoiOrx4NEnKyEHMB8GA1UdIwQY
MBaAFKCWCPFbNnruSGuFbZ5ATD0eCl/UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb0pZSThWczJldTVJYTRWdG5rQk1QUjRLWDlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi84MTA2NmQtMjEyMy00YjZkLThiY2Yt
YjhlZDY2ZDQyNzgyLzEvRVpiWVVLbGJIbkR1cFNpSTZ2SGcwU2NySVFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi84MTA2NmQtMjEyMy00YjZkLThiY2YtYjhlZDY2ZDQyNzgy
LzEvb0pZSThWczJldTVJYTRWdG5rQk1QUjRLWDlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8aJMA0G
CSqGSIb3DQEBCwUAA4IBAQB7iKvRDhoUOLYUIsH/YQxzWc5tOc6pv5+MUvJByE/4
XqLmPC/yshaHMhWFW9UR3YbxkdzBLd9gN6aV7L6PCM3gVaVPPLVDVaL/tuqqTDzJ
Qdruvk0ogHUbnH5vzlxDJS6s2VNvLLR8Q3abV3SQrey6LRAaRjz9Y4+TlGNnhp4O
/Lr/G7M0Vlu2J97WZc5UBDMCbxKRmIEX9dL283jXnIeEEAvaIxac5LwNZwb/+xIb
gVvue1WyOM1FM0o5C9tUpC37ECbqNx/OBBpDYhIX7SDW2dMCdjN6mzf9bU7kCbG/
0rczqKZlsJA6p+mK6LBANxhnVp5lsdiKYpuwXa//UaWO
-----END CERTIFICATE-----
Generated at Fri Apr 25 07:43:02 2025 by rpki-client