Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/I1R3to4OG_lNOOBtkQLneyBTnz8.roa
File: I1R3to4OG_lNOOBtkQLneyBTnz8.roa (raw, json)
Hash identifier: FMbiRiL06k35Wxnm+65HlWTTvYTK4mOLvCtx0FDCwp4=
Subject key identifier: 23:54:77:B6:8E:0E:1B:F9:4D:38:E0:6D:91:02:E7:7B:20:53:9F:3F
Certificate issuer: /CN=21506035b32cc33af0589c55be849775e92c4693
Certificate serial: 019424B3F1071E1935D4E781733C39DBFE62
Authority key identifier: 21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/I1R3to4OG_lNOOBtkQLneyBTnz8.roa
Signing time: Thu 02 Jan 2025 01:49:19 +0000
ROA not before: Thu 02 Jan 2025 01:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44480
IP address blocks: 91.199.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f1:07:1e:19:35:d4:e7:81:73:3c:39:db:fe:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21506035b32cc33af0589c55be849775e92c4693
Validity
Not Before: Jan 2 01:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=235477b68e0e1bf94d38e06d9102e77b20539f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:14:48:ad:bc:8d:b4:58:fb:74:37:c9:44:d4:
08:ec:be:bd:f0:ef:4a:7a:d4:70:53:c3:0f:7d:8d:
0f:18:aa:26:2c:f7:e5:97:c1:24:6e:5e:79:46:7e:
6d:e2:03:81:de:20:4b:87:a0:f2:57:1e:ea:ae:fd:
22:20:c4:39:cd:d4:52:a3:05:4b:28:1c:05:4c:5b:
46:1f:cb:0f:c5:a3:16:07:a4:9b:9f:19:3c:5b:aa:
90:70:9a:b9:e8:f8:b0:06:20:53:6d:d9:00:32:ae:
46:ed:30:a0:e6:99:a0:55:85:f1:7b:84:82:96:c4:
80:88:be:aa:b0:5f:a9:89:20:43:41:8f:3e:12:71:
9d:cf:43:1c:85:de:34:70:b1:12:67:39:4b:1e:f2:
8e:63:10:be:72:1d:49:eb:e0:b9:6f:06:6d:68:ef:
1a:7c:ba:f9:ae:5a:49:1e:e4:a8:a3:55:8c:9a:59:
4a:20:d4:88:c2:77:8e:c3:5e:d3:55:0a:fc:41:25:
cb:91:86:bb:d1:5f:83:11:c2:44:77:e7:2c:3c:49:
6d:5a:80:b8:9d:29:b4:cc:82:79:31:dd:21:06:73:
b2:09:46:20:1d:c5:be:1f:d8:b9:c7:f5:ea:4b:dc:
c4:9d:21:38:50:1c:10:56:99:55:38:f0:43:79:7d:
61:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:54:77:B6:8E:0E:1B:F9:4D:38:E0:6D:91:02:E7:7B:20:53:9F:3F
X509v3 Authority Key Identifier:
keyid:21:50:60:35:B3:2C:C3:3A:F0:58:9C:55:BE:84:97:75:E9:2C:46:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IVBgNbMswzrwWJxVvoSXdeksRpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/I1R3to4OG_lNOOBtkQLneyBTnz8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3244-835d-472d-bf0e-0c7a87196c35/1/IVBgNbMswzrwWJxVvoSXdeksRpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.129.0/24
Signature Algorithm: sha256WithRSAEncryption
03:49:71:a4:39:aa:6a:97:2d:70:a4:21:35:4e:d8:1c:52:cf:
35:74:94:50:ab:cc:b4:a0:a7:67:5e:44:7f:80:6a:d3:c2:c5:
fa:55:19:83:f8:53:cd:66:fb:75:49:d5:4d:64:2f:e9:f8:8f:
54:33:41:b7:14:fe:65:7a:18:e0:a8:86:17:16:7c:49:5e:f0:
ca:67:2a:93:4c:7a:e3:0d:54:6a:87:06:86:b4:d0:f8:84:48:
80:00:1e:c7:ca:43:17:73:0b:c2:0b:f5:c6:9e:c7:8d:10:3c:
8a:96:99:2a:3c:08:38:96:20:ed:f6:e1:32:af:6d:76:58:12:
f3:93:bd:a4:db:ec:2a:e2:80:51:19:db:9a:f7:60:db:82:a0:
89:e9:24:ea:39:d8:e3:a6:4e:c8:08:8e:57:b5:42:21:a9:5f:
32:a7:10:98:f5:b1:8f:50:81:f2:c1:25:6b:b1:28:97:ae:99:
31:a9:79:6a:24:50:ae:b4:fe:c2:0d:9a:81:db:d5:87:7d:db:
7a:e0:07:06:95:bf:53:a6:62:fb:cf:3d:8c:48:db:4d:c8:be:
4c:ac:91:d7:85:ea:61:bf:1b:a8:fb:7f:18:d6:5b:34:2c:70:
6a:5a:41:5c:e9:bf:e0:e1:88:48:c4:79:dd:6d:9f:16:11:cc:
49:17:57:f6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQks/EHHhk11OeBczw52/5iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxNTA2MDM1YjMyY2MzM2FmMDU4OWM1NWJlODQ5Nzc1ZTky
YzQ2OTMwHhcNMjUwMTAyMDE0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMzU0NzdiNjhlMGUxYmY5NGQzOGUwNmQ5MTAyZTc3YjIwNTM5ZjNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BRIrbyNtFj7dDfJRNQI7L698O9K
etRwU8MPfY0PGKomLPfll8Ekbl55Rn5t4gOB3iBLh6DyVx7qrv0iIMQ5zdRSowVL
KBwFTFtGH8sPxaMWB6Sbnxk8W6qQcJq56PiwBiBTbdkAMq5G7TCg5pmgVYXxe4SC
lsSAiL6qsF+piSBDQY8+EnGdz0Mchd40cLESZzlLHvKOYxC+ch1J6+C5bwZtaO8a
fLr5rlpJHuSoo1WMmllKINSIwneOw17TVQr8QSXLkYa70V+DEcJEd+csPEltWoC4
nSm0zIJ5Md0hBnOyCUYgHcW+H9i5x/XqS9zEnSE4UBwQVplVOPBDeX1h8QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCNUd7aODhv5TTjgbZEC53sgU58/MB8GA1UdIwQY
MBaAFCFQYDWzLMM68FicVb6El3XpLEaTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSVZCZ05iTXN3enJ3V0p4VnZvU1hkZWtzUnBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi81YzMyNDQtODM1ZC00NzJkLWJmMGUt
MGM3YTg3MTk2YzM1LzEvSTFSM3RvNE9HX2xOT09CdGtRTG5leUJUbno4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi81YzMyNDQtODM1ZC00NzJkLWJmMGUtMGM3YTg3MTk2YzM1
LzEvSVZCZ05iTXN3enJ3V0p4VnZvU1hkZWtzUnBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8eBMA0G
CSqGSIb3DQEBCwUAA4IBAQADSXGkOapqly1wpCE1TtgcUs81dJRQq8y0oKdnXkR/
gGrTwsX6VRmD+FPNZvt1SdVNZC/p+I9UM0G3FP5lehjgqIYXFnxJXvDKZyqTTHrj
DVRqhwaGtND4hEiAAB7HykMXcwvCC/XGnseNEDyKlpkqPAg4liDt9uEyr212WBLz
k72k2+wq4oBRGdua92DbgqCJ6STqOdjjpk7ICI5XtUIhqV8ypxCY9bGPUIHywSVr
sSiXrpkxqXlqJFCutP7CDZqB29WHfdt64AcGlb9TpmL7zz2MSNtNyL5MrJHXheph
vxuo+38Y1ls0LHBqWkFc6b/g4YhIxHndbZ8WEcxJF1f2
-----END CERTIFICATE-----
Generated at Fri Apr 25 03:26:59 2025 by rpki-client