Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/q9fcvPSCGF87XIMkqAi6UV4OZNg.roa
File: q9fcvPSCGF87XIMkqAi6UV4OZNg.roa (raw, json)
Hash identifier: tkmW6OPW8Rw8o76e0nZ8YOnHGwglb96QyBZechqQT9g=
Subject key identifier: AB:D7:DC:BC:F4:82:18:5F:3B:5C:83:24:A8:08:BA:51:5E:0E:64:D8
Certificate issuer: /CN=dfabd142e894168883ce45227317f9fa5022194f
Certificate serial: 0194228D287D86F95ADC1F505745FA40A7D1
Authority key identifier: DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/q9fcvPSCGF87XIMkqAi6UV4OZNg.roa
Signing time: Wed 01 Jan 2025 15:47:43 +0000
ROA not before: Wed 01 Jan 2025 15:47:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49853
IP address blocks: 91.212.134.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:28:7d:86:f9:5a:dc:1f:50:57:45:fa:40:a7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfabd142e894168883ce45227317f9fa5022194f
Validity
Not Before: Jan 1 15:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=abd7dcbcf482185f3b5c8324a808ba515e0e64d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6d:74:e0:f7:61:9b:3b:a9:ab:a8:31:a6:8a:
8c:62:8c:5d:7d:37:02:7e:c9:90:ca:6a:73:16:be:
ae:34:91:38:5b:4d:5c:cf:e3:dc:53:bf:39:42:e8:
5c:30:15:df:7f:14:bc:fd:7b:da:b7:b8:60:89:dd:
a6:a7:0e:ac:7e:06:f4:9a:a7:f2:37:23:cb:bf:22:
d0:18:6c:71:99:fa:16:e1:d2:46:78:9a:da:35:79:
7f:5a:d3:68:6b:7f:2b:e7:37:3b:3e:21:f5:c4:92:
b1:bd:8b:3e:0d:f1:dd:83:9d:aa:7d:6b:69:2a:cb:
92:0e:35:c3:cc:0f:7b:36:3c:48:b7:6e:83:2d:fb:
00:0c:d8:1c:60:74:50:04:10:2e:1c:1c:08:30:53:
d1:d0:e7:e9:37:d4:0c:23:13:b5:2a:37:0e:6a:99:
75:b1:23:2f:a3:4a:d3:71:71:d5:a0:35:07:54:f8:
a7:cc:70:73:c0:39:bb:32:5c:14:d4:ff:19:81:f2:
64:fb:e6:16:b7:2d:15:7f:98:18:45:8d:3b:c6:91:
31:e6:76:42:4c:e7:b7:c5:a3:8f:3d:6c:05:9c:ab:
1b:67:6d:dc:86:42:88:a0:7c:a6:ae:a0:46:8a:90:
f7:0d:cd:9b:f2:78:cb:f9:9e:5a:a3:0d:1c:a5:d8:
c5:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D7:DC:BC:F4:82:18:5F:3B:5C:83:24:A8:08:BA:51:5E:0E:64:D8
X509v3 Authority Key Identifier:
keyid:DF:AB:D1:42:E8:94:16:88:83:CE:45:22:73:17:F9:FA:50:22:19:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36vRQuiUFoiDzkUicxf5-lAiGU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/q9fcvPSCGF87XIMkqAi6UV4OZNg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/e38fc3-ea13-4013-9284-3a8ac4dc3eef/1/36vRQuiUFoiDzkUicxf5-lAiGU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.134.0/24
Signature Algorithm: sha256WithRSAEncryption
be:9f:a5:43:24:78:e3:3e:d2:92:f8:8b:d5:8c:e0:1c:1a:64:
00:93:14:3a:ee:9d:86:09:84:5c:da:62:b5:44:76:c7:01:2d:
b3:4b:b6:a4:cf:40:43:47:10:15:c2:cf:25:d4:5a:fe:15:cf:
86:53:77:86:96:aa:bf:81:70:10:b7:08:2a:72:fd:8b:eb:95:
fc:d8:75:68:94:84:d8:21:42:3e:78:b6:32:05:08:e6:43:af:
da:b8:ee:74:e2:c4:42:e9:a2:3e:8b:21:17:2b:20:d2:ee:7f:
f5:48:50:c4:4b:eb:42:e0:c0:e9:14:d1:6d:0a:d0:70:be:5d:
6d:94:91:cc:e9:7c:9a:fc:24:67:37:51:0c:cf:f3:ff:bc:35:
bf:e3:1f:5d:ab:66:cf:64:8e:b7:ef:cf:0e:bf:24:7d:5b:31:
4d:50:9a:60:df:3c:fa:06:91:e3:b7:c3:a7:f8:8d:f5:b3:f9:
8f:d8:93:4a:7d:9d:49:ef:68:e1:86:e5:00:68:1e:32:06:ee:
71:be:fd:02:1f:7f:0c:36:3a:de:76:7e:2c:de:da:8a:1d:1b:
17:f4:94:86:f7:0e:4c:46:ee:b3:3b:e1:86:fb:ab:3e:89:d6:
65:3f:2c:b6:4d:f8:e6:62:5f:94:32:d9:b1:22:82:f1:a2:67:
d3:26:91:30
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQijSh9hvla3B9QV0X6QKfRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYWJkMTQyZTg5NDE2ODg4M2NlNDUyMjczMTdmOWZhNTAy
MjE5NGYwHhcNMjUwMTAxMTU0NzQzWhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmQ3ZGNiY2Y0ODIxODVmM2I1YzgzMjRhODA4YmE1MTVlMGU2NGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAum104Pdhmzupq6gxpoqMYoxdfTcC
fsmQympzFr6uNJE4W01cz+PcU785QuhcMBXffxS8/Xvat7hgid2mpw6sfgb0mqfy
NyPLvyLQGGxxmfoW4dJGeJraNXl/WtNoa38r5zc7PiH1xJKxvYs+DfHdg52qfWtp
KsuSDjXDzA97NjxIt26DLfsADNgcYHRQBBAuHBwIMFPR0OfpN9QMIxO1KjcOapl1
sSMvo0rTcXHVoDUHVPinzHBzwDm7MlwU1P8ZgfJk++YWty0Vf5gYRY07xpEx5nZC
TOe3xaOPPWwFnKsbZ23chkKIoHymrqBGipD3Dc2b8njL+Z5aow0cpdjF/QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKvX3Lz0ghhfO1yDJKgIulFeDmTYMB8GA1UdIwQY
MBaAFN+r0ULolBaIg85FInMX+fpQIhlPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzZ2UlF1aVVGb2lEemtVaWN4ZjUtbEFpR1U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9lMzhmYzMtZWExMy00MDEzLTkyODQt
M2E4YWM0ZGMzZWVmLzEvcTlmY3ZQU0NHRjg3WElNa3FBaTZVVjRPWk5nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9lMzhmYzMtZWExMy00MDEzLTkyODQtM2E4YWM0ZGMzZWVm
LzEvMzZ2UlF1aVVGb2lEemtVaWN4ZjUtbEFpR1U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9SGMA0G
CSqGSIb3DQEBCwUAA4IBAQC+n6VDJHjjPtKS+IvVjOAcGmQAkxQ67p2GCYRc2mK1
RHbHAS2zS7akz0BDRxAVws8l1Fr+Fc+GU3eGlqq/gXAQtwgqcv2L65X82HVolITY
IUI+eLYyBQjmQ6/auO504sRC6aI+iyEXKyDS7n/1SFDES+tC4MDpFNFtCtBwvl1t
lJHM6Xya/CRnN1EMz/P/vDW/4x9dq2bPZI63788OvyR9WzFNUJpg3zz6BpHjt8On
+I31s/mP2JNKfZ1J72jhhuUAaB4yBu5xvv0CH38MNjredn4s3tqKHRsX9JSG9w5M
Ru6zO+GG+6s+idZlPyy2TfjmYl+UMtmxIoLxomfTJpEw
-----END CERTIFICATE-----
Generated at Fri Apr 25 19:55:33 2025 by rpki-client