Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f5b954-65b9-437a-b499-9c28e1cd197e/1/PIDLalnTO2xsgo1L7eezgfyMt5s.roa
File: PIDLalnTO2xsgo1L7eezgfyMt5s.roa (raw, json)
Hash identifier: HOVsTEj47yHbKgz3cS5c4e39f1p4se6Iww1BDccvc44=
Subject key identifier: 3C:80:CB:6A:59:D3:3B:6C:6C:82:8D:4B:ED:E7:B3:81:FC:8C:B7:9B
Certificate issuer: /CN=3d3257a4cc2d989b3126d8b2cfdbbc2015e08bb4
Certificate serial: 018CC348F222DA890DC7AE513772BE144D11
Authority key identifier: 3D:32:57:A4:CC:2D:98:9B:31:26:D8:B2:CF:DB:BC:20:15:E0:8B:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PTJXpMwtmJsxJtiyz9u8IBXgi7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f5b954-65b9-437a-b499-9c28e1cd197e/1/PIDLalnTO2xsgo1L7eezgfyMt5s.roa
Signing time: Mon 01 Jan 2024 04:29:46 +0000
ROA not before: Mon 01 Jan 2024 04:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16509
IP address blocks: 91.230.237.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:48:f2:22:da:89:0d:c7:ae:51:37:72:be:14:4d:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d3257a4cc2d989b3126d8b2cfdbbc2015e08bb4
Validity
Not Before: Jan 1 04:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c80cb6a59d33b6c6c828d4bede7b381fc8cb79b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:db:96:82:27:18:4a:27:87:45:3d:e4:5d:ff:
ad:32:ec:5b:30:51:57:ac:30:39:55:95:7b:0f:35:
0a:1d:53:fa:d8:b9:ee:a6:49:82:91:e9:69:db:2d:
15:2a:92:89:0b:0e:1c:56:a7:c2:c5:bd:bb:b6:24:
84:e9:92:60:f1:df:9a:56:d7:90:71:d0:06:71:39:
f2:47:9d:ec:99:81:fc:d9:ce:a8:76:9e:c0:92:f9:
1d:13:08:0a:01:05:a1:aa:46:48:b5:1f:dd:35:76:
26:c2:17:dc:2f:b6:b7:c0:45:61:86:53:d6:b8:77:
0d:56:41:dc:69:a1:a6:05:69:0f:74:54:ce:66:42:
e1:04:d4:17:88:d1:68:26:9e:41:7b:b7:2d:81:97:
e5:e5:cd:ea:06:f8:cc:c3:c1:e4:7a:f1:09:41:42:
ff:72:e2:a4:aa:57:f4:93:99:bd:e1:8c:3e:29:01:
b2:d2:76:a7:65:f7:37:f6:22:68:01:7c:cb:c5:c2:
e4:67:83:66:77:c5:76:d4:47:31:f1:27:52:c9:5e:
ba:07:e2:81:66:9f:38:92:e0:d7:24:d9:33:6a:08:
dc:a1:f1:f1:b1:42:69:7f:2b:0d:df:a2:c7:52:25:
2a:19:e4:fe:be:e5:c9:27:f8:81:5e:6b:5f:09:a0:
60:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:80:CB:6A:59:D3:3B:6C:6C:82:8D:4B:ED:E7:B3:81:FC:8C:B7:9B
X509v3 Authority Key Identifier:
keyid:3D:32:57:A4:CC:2D:98:9B:31:26:D8:B2:CF:DB:BC:20:15:E0:8B:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PTJXpMwtmJsxJtiyz9u8IBXgi7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f5b954-65b9-437a-b499-9c28e1cd197e/1/PIDLalnTO2xsgo1L7eezgfyMt5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f5b954-65b9-437a-b499-9c28e1cd197e/1/PTJXpMwtmJsxJtiyz9u8IBXgi7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.237.0/24
Signature Algorithm: sha256WithRSAEncryption
77:a1:f6:7e:77:24:72:cd:5f:73:89:d9:7c:fd:d7:47:91:17:
d9:3e:09:c0:98:7b:c2:43:b6:82:08:72:75:dc:7f:48:61:89:
c2:51:8d:a2:e2:70:88:c0:da:1b:a8:b3:ff:70:d0:9b:bd:11:
77:72:ff:b4:e1:c5:58:d6:96:82:0b:0a:47:39:bb:0d:13:cf:
5c:b8:81:74:ab:93:35:37:f4:4c:80:61:af:51:38:6a:e8:ff:
5e:6b:1a:28:d7:c6:83:6e:30:07:66:94:0c:55:e3:c1:41:39:
db:9b:7c:ac:a0:62:62:31:a9:42:66:4d:07:98:05:83:6e:9e:
d1:fc:20:ad:a8:7c:5c:39:c9:7c:f1:da:48:e5:7d:16:59:89:
82:4a:a2:89:12:94:b6:0d:5b:9b:76:e9:a9:20:76:5f:44:53:
03:8f:b9:84:3f:4a:17:cc:42:a3:71:c4:91:15:aa:c8:29:e2:
4c:fe:bc:36:3c:cb:4e:99:9d:a8:78:9d:c3:e8:46:d8:e5:f2:
2d:7a:d8:2d:fc:f3:f7:5f:6b:c6:c0:80:e3:c1:49:24:bd:28:
81:c9:22:dd:5c:ed:d4:8e:66:8f:a9:cc:3d:7a:a5:e3:f9:4b:
a3:ad:f2:a7:a5:c3:5f:bb:70:27:ce:c8:c2:e4:0b:34:6d:a3:
85:79:42:df
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYzDSPIi2okNx65RN3K+FE0RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMzI1N2E0Y2MyZDk4OWIzMTI2ZDhiMmNmZGJiYzIwMTVl
MDhiYjQwHhcNMjQwMTAxMDQyOTQ2WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzgwY2I2YTU5ZDMzYjZjNmM4MjhkNGJlZGU3YjM4MWZjOGNiNzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk9uWgicYSieHRT3kXf+tMuxbMFFX
rDA5VZV7DzUKHVP62LnupkmCkelp2y0VKpKJCw4cVqfCxb27tiSE6ZJg8d+aVteQ
cdAGcTnyR53smYH82c6odp7AkvkdEwgKAQWhqkZItR/dNXYmwhfcL7a3wEVhhlPW
uHcNVkHcaaGmBWkPdFTOZkLhBNQXiNFoJp5Be7ctgZfl5c3qBvjMw8HkevEJQUL/
cuKkqlf0k5m94Yw+KQGy0nanZfc39iJoAXzLxcLkZ4Nmd8V21Ecx8SdSyV66B+KB
Zp84kuDXJNkzagjcofHxsUJpfysN36LHUiUqGeT+vuXJJ/iBXmtfCaBgmQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDyAy2pZ0ztsbIKNS+3ns4H8jLebMB8GA1UdIwQY
MBaAFD0yV6TMLZibMSbYss/bvCAV4Iu0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFRKWHBNd3RtSnN4SnRpeXo5dThJQlhnaTdRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9mNWI5NTQtNjViOS00MzdhLWI0OTkt
OWMyOGUxY2QxOTdlLzEvUElETGFsblRPMnhzZ28xTDdlZXpnZnlNdDVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9mNWI5NTQtNjViOS00MzdhLWI0OTktOWMyOGUxY2QxOTdl
LzEvUFRKWHBNd3RtSnN4SnRpeXo5dThJQlhnaTdRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+btMA0G
CSqGSIb3DQEBCwUAA4IBAQB3ofZ+dyRyzV9zidl8/ddHkRfZPgnAmHvCQ7aCCHJ1
3H9IYYnCUY2i4nCIwNobqLP/cNCbvRF3cv+04cVY1paCCwpHObsNE89cuIF0q5M1
N/RMgGGvUThq6P9eaxoo18aDbjAHZpQMVePBQTnbm3ysoGJiMalCZk0HmAWDbp7R
/CCtqHxcOcl88dpI5X0WWYmCSqKJEpS2DVubdumpIHZfRFMDj7mEP0oXzEKjccSR
FarIKeJM/rw2PMtOmZ2oeJ3D6EbY5fItetgt/PP3X2vGwIDjwUkkvSiBySLdXO3U
jmaPqcw9eqXj+UujrfKnpcNfu3AnzsjC5As0baOFeULf
-----END CERTIFICATE-----
Generated at Tue Apr 29 08:33:16 2025 by rpki-client