Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/v7xbsCROsO2MbuE9UwU0B__Qrug.roa
File: v7xbsCROsO2MbuE9UwU0B__Qrug.roa (raw, json)
Hash identifier: jCAaO9QdtJabTsyOLEVBcqZmMxtQhkEo4Y5qTf+e+S0=
Subject key identifier: BF:BC:5B:B0:24:4E:B0:ED:8C:6E:E1:3D:53:05:34:07:FF:D0:AE:E8
Certificate issuer: /CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Certificate serial: 01942826F7E17BD877F5556AEEDD6A0C0269
Authority key identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/v7xbsCROsO2MbuE9UwU0B__Qrug.roa
Signing time: Thu 02 Jan 2025 17:53:49 +0000
ROA not before: Thu 02 Jan 2025 17:53:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213166
IP address blocks: 91.194.110.0/24 maxlen: 24
2a0f:ea81::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:f7:e1:7b:d8:77:f5:55:6a:ee:dd:6a:0c:02:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Validity
Not Before: Jan 2 17:53:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfbc5bb0244eb0ed8c6ee13d53053407ffd0aee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fb:7c:ef:9b:fe:39:6f:a9:ad:0b:9b:30:7c:
04:45:77:f3:58:2d:bd:75:bc:0f:0d:b3:e7:ad:c3:
3c:29:36:3b:00:fa:da:47:1f:40:61:16:0e:56:74:
52:3e:51:6b:37:04:76:f2:c7:53:46:fe:1d:0c:a6:
f7:e5:42:e6:2a:00:51:80:f2:99:29:fc:21:f0:b5:
af:11:f9:31:f4:3f:de:14:12:62:01:75:24:9d:94:
6a:6f:ef:8f:ed:78:03:64:59:4f:97:fa:29:4b:97:
a9:84:8a:80:6f:29:c9:a3:a6:63:49:77:8d:e7:c2:
82:a0:44:df:3b:8d:08:e7:2c:3c:ec:1b:c3:1e:d1:
2b:6b:62:83:20:c8:20:5b:de:fa:3c:21:d8:45:ce:
08:46:70:70:42:69:b4:97:9f:d8:ff:17:e5:51:90:
6b:13:17:46:a4:70:b9:52:44:ea:66:2f:d7:dd:a1:
47:23:08:9d:df:67:eb:42:ee:e9:82:64:14:d8:24:
1e:f5:71:92:f7:f8:a0:6d:5b:ca:0c:29:a0:f7:4f:
83:8b:d4:83:a7:9b:54:92:cd:4c:77:79:09:86:ca:
50:d6:1a:cc:34:5f:03:38:01:96:7b:f3:01:de:9f:
9c:8a:da:1b:04:95:49:06:3e:1a:f3:bc:e4:98:ec:
06:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BC:5B:B0:24:4E:B0:ED:8C:6E:E1:3D:53:05:34:07:FF:D0:AE:E8
X509v3 Authority Key Identifier:
keyid:F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/v7xbsCROsO2MbuE9UwU0B__Qrug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.110.0/24
IPv6:
2a0f:ea81::/32
Signature Algorithm: sha256WithRSAEncryption
a0:4e:a4:2d:9f:fc:51:13:ff:35:61:5b:92:18:41:39:00:f5:
5a:eb:06:88:76:69:c0:6f:00:3d:91:03:5e:1e:96:4d:ca:e0:
54:dd:ae:62:07:4d:fb:ec:8c:7e:f9:27:3f:d9:ef:a5:28:56:
97:07:70:53:1d:e4:54:42:a6:ee:00:1f:33:ae:a4:58:46:e7:
58:4a:9d:a8:59:18:40:f5:4d:fa:c5:1e:34:90:eb:0d:f6:06:
e9:26:8c:47:ee:d4:0f:63:d5:61:a5:da:ae:cb:54:e8:e7:0e:
20:4f:ad:61:88:50:b8:9e:59:e6:e3:62:3d:3f:90:86:0b:21:
4b:d6:8c:36:78:cd:23:02:ca:fc:28:8f:9c:df:9b:bc:2b:5d:
cc:b0:1b:f5:54:f5:41:ea:7c:20:18:19:9f:1a:8b:15:2c:a7:
d0:2d:5f:38:08:d6:53:51:9a:0c:12:b5:e9:15:68:0f:c5:9d:
b1:6a:46:1f:81:74:92:b7:4d:e4:af:cb:17:5e:01:b9:70:35:
16:78:e6:ef:22:f2:0f:c9:43:37:03:e7:01:2b:e1:e2:cd:94:
c8:de:cd:bf:15:6e:b1:7c:0c:75:eb:63:57:bd:8f:8d:d3:b0:
a9:8e:cf:b7:31:68:43:a3:e5:9d:1f:49:a2:77:d5:6b:af:a9:
85:2a:5a:c0
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZQoJvfhe9h39VVq7t1qDAJpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1Y2Y3M2IzZTQ1Zjc3MmZhZTFiOTE1NjkwYjMxNzM0NGMz
ZjQ0MmIwHhcNMjUwMTAyMTc1MzQ5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiZmJjNWJiMDI0NGViMGVkOGM2ZWUxM2Q1MzA1MzQwN2ZmZDBhZWU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ft875v+OW+prQubMHwERXfzWC29
dbwPDbPnrcM8KTY7APraRx9AYRYOVnRSPlFrNwR28sdTRv4dDKb35ULmKgBRgPKZ
Kfwh8LWvEfkx9D/eFBJiAXUknZRqb++P7XgDZFlPl/opS5ephIqAbynJo6ZjSXeN
58KCoETfO40I5yw87BvDHtEra2KDIMggW976PCHYRc4IRnBwQmm0l5/Y/xflUZBr
ExdGpHC5UkTqZi/X3aFHIwid32frQu7pgmQU2CQe9XGS9/igbVvKDCmg90+Di9SD
p5tUks1Md3kJhspQ1hrMNF8DOAGWe/MB3p+citobBJVJBj4a87zkmOwG3QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFL+8W7AkTrDtjG7hPVMFNAf/0K7oMB8GA1UdIwQY
MBaAFPXPc7PkX3cvrhuRVpCzFzRMP0QrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS8zYmU4NjUtNWM3OS00N2MwLWFhNGQt
MWM2NTRlMDJkNzVkLzEvdjd4YnNDUk9zTzJNYnVFOVV3VTBCX19RcnVnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS8zYmU4NjUtNWM3OS00N2MwLWFhNGQtMWM2NTRlMDJkNzVk
LzEvOWM5enMtUmZkeS11RzVGV2tMTVhORXdfUkNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQAW8JuMA0E
AgACMAcDBQAqD+qBMA0GCSqGSIb3DQEBCwUAA4IBAQCgTqQtn/xRE/81YVuSGEE5
APVa6waIdmnAbwA9kQNeHpZNyuBU3a5iB0377Ix++Sc/2e+lKFaXB3BTHeRUQqbu
AB8zrqRYRudYSp2oWRhA9U36xR40kOsN9gbpJoxH7tQPY9Vhpdquy1To5w4gT61h
iFC4nlnm42I9P5CGCyFL1ow2eM0jAsr8KI+c35u8K13MsBv1VPVB6nwgGBmfGosV
LKfQLV84CNZTUZoMErXpFWgPxZ2xakYfgXSSt03kr8sXXgG5cDUWeObvIvIPyUM3
A+cBK+HizZTI3s2/FW6xfAx162NXvY+N07Cpjs+3MWhDo+WdH0mid9Vrr6mFKlrA
-----END CERTIFICATE-----
Generated at Fri Apr 25 08:06:44 2025 by rpki-client