Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/07dc14-932a-4cc3-badd-8157a1cbf139/1/AM2uTsG2Uvji2Y0Khcgb0n_lUlc.roa
File: AM2uTsG2Uvji2Y0Khcgb0n_lUlc.roa (raw, json)
Hash identifier: 4u4x4damg7eGc1Im+b5uf3VBJGXhJAwZy1LjfZAdwXE=
Subject key identifier: 00:CD:AE:4E:C1:B6:52:F8:E2:D9:8D:0A:85:C8:1B:D2:7F:E5:52:57
Certificate issuer: /CN=e6cf91e7b949fd843d88ecfce2d1554d6ae981d9
Certificate serial: 01856D0ABC47CB0C09CE54CE428DDD4AA9DD
Authority key identifier: E6:CF:91:E7:B9:49:FD:84:3D:88:EC:FC:E2:D1:55:4D:6A:E9:81:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5s-R57lJ_YQ9iOz84tFVTWrpgdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/07dc14-932a-4cc3-badd-8157a1cbf139/1/AM2uTsG2Uvji2Y0Khcgb0n_lUlc.roa
Signing time: Sun 01 Jan 2023 11:14:58 +0000
ROA not before: Sun 01 Jan 2023 11:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58061
IP address blocks: 91.242.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:bc:47:cb:0c:09:ce:54:ce:42:8d:dd:4a:a9:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6cf91e7b949fd843d88ecfce2d1554d6ae981d9
Validity
Not Before: Jan 1 11:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=00cdae4ec1b652f8e2d98d0a85c81bd27fe55257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:c7:74:d5:56:3c:11:a8:b1:18:a0:9b:df:
8b:71:97:e0:4c:2b:e8:78:4b:82:cf:56:1c:62:66:
b0:11:4e:91:b4:ac:b7:e5:98:0a:30:6d:ce:ee:07:
bd:52:d9:01:1b:7e:48:12:22:e1:d2:47:1e:d3:98:
71:d8:a8:14:3b:d9:8d:2c:f2:03:1f:1b:39:5a:a8:
5b:52:e5:93:88:41:85:78:67:f3:94:ad:6b:fb:33:
24:56:80:47:d4:ba:fc:87:e5:f4:fc:2b:83:e8:17:
d3:88:3c:ec:06:19:da:71:57:1a:4f:13:2e:b6:25:
fb:e9:52:9a:72:e9:73:f3:ce:45:86:12:45:8f:6b:
07:e3:1c:62:f2:a3:3e:0d:0b:a1:af:c4:4c:4b:ad:
c2:5c:43:2c:93:7a:43:95:b4:b5:5f:1e:a5:63:cc:
b3:7f:78:8d:38:5e:20:86:1b:45:85:46:ae:e8:4b:
f7:05:5a:29:55:fb:a8:a9:0b:eb:48:e3:00:d2:6b:
f9:10:ed:fa:14:8f:81:4d:9d:86:16:48:cd:a3:88:
98:74:79:8d:48:68:1a:1d:ea:a3:7c:bb:95:01:14:
26:fb:c5:6a:3c:1f:f1:72:03:32:4f:fd:b4:24:27:
d8:21:06:ab:d3:55:96:47:8f:4d:8b:d4:6d:9e:56:
07:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:CD:AE:4E:C1:B6:52:F8:E2:D9:8D:0A:85:C8:1B:D2:7F:E5:52:57
X509v3 Authority Key Identifier:
keyid:E6:CF:91:E7:B9:49:FD:84:3D:88:EC:FC:E2:D1:55:4D:6A:E9:81:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5s-R57lJ_YQ9iOz84tFVTWrpgdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/07dc14-932a-4cc3-badd-8157a1cbf139/1/AM2uTsG2Uvji2Y0Khcgb0n_lUlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/07dc14-932a-4cc3-badd-8157a1cbf139/1/5s-R57lJ_YQ9iOz84tFVTWrpgdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.236.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:c5:cc:82:37:3e:29:7d:e7:9e:83:1c:14:d9:4b:e0:90:c1:
a5:e3:da:de:66:98:7c:0f:0a:a6:6a:b3:87:37:98:66:41:fd:
1f:66:24:d3:36:7c:dd:2d:d2:d8:8e:b0:ad:fc:58:a4:2c:b5:
35:f3:d5:24:e5:f1:6a:a4:9f:50:72:4f:bd:81:f6:95:6a:0e:
60:5f:d9:4c:6f:1e:f5:73:41:42:c1:d6:3a:d5:89:4b:b0:c4:
e0:de:ad:fa:c1:b9:60:39:92:c0:ca:b4:9a:f4:cb:60:a0:5b:
f0:c4:22:8d:db:12:a0:52:9e:1e:5d:c5:71:48:e4:0d:6e:e8:
f6:46:71:d5:43:26:77:73:01:01:6b:2a:53:1a:ce:88:d4:0d:
68:76:82:cd:42:00:3e:f1:69:14:ae:24:7b:7e:75:6c:bf:0d:
8b:4a:ff:2b:14:3f:cf:83:9b:b3:8b:4f:b8:63:f1:4f:29:c0:
64:3a:90:9b:ed:8a:71:f8:a8:11:67:0d:f5:40:01:a2:16:37:
79:e8:58:45:a3:26:74:77:8a:db:96:2b:60:9e:fb:31:fc:3e:
36:a1:01:f3:05:f2:c0:08:e3:91:b1:54:66:30:34:da:e8:6e:
94:b1:bc:6c:de:b9:6c:3b:74:1e:0b:27:43:26:14:a7:d6:86:
9d:5a:9f:6f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVtCrxHywwJzlTOQo3dSqndMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU2Y2Y5MWU3Yjk0OWZkODQzZDg4ZWNmY2UyZDE1NTRkNmFl
OTgxZDkwHhcNMjMwMTAxMTExNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMGNkYWU0ZWMxYjY1MmY4ZTJkOThkMGE4NWM4MWJkMjdmZTU1MjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLXHdNVWPBGosRigm9+LcZfgTCvo
eEuCz1YcYmawEU6RtKy35ZgKMG3O7ge9UtkBG35IEiLh0kce05hx2KgUO9mNLPID
Hxs5WqhbUuWTiEGFeGfzlK1r+zMkVoBH1Lr8h+X0/CuD6BfTiDzsBhnacVcaTxMu
tiX76VKaculz885FhhJFj2sH4xxi8qM+DQuhr8RMS63CXEMsk3pDlbS1Xx6lY8yz
f3iNOF4ghhtFhUau6Ev3BVopVfuoqQvrSOMA0mv5EO36FI+BTZ2GFkjNo4iYdHmN
SGgaHeqjfLuVARQm+8VqPB/xcgMyT/20JCfYIQar01WWR49Ni9RtnlYH4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFADNrk7BtlL44tmNCoXIG9J/5VJXMB8GA1UdIwQY
MBaAFObPkee5Sf2EPYjs/OLRVU1q6YHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNXMtUjU3bEpfWVE5aU96ODR0RlZUV3JwZ2RrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wN2RjMTQtOTMyYS00Y2MzLWJhZGQt
ODE1N2ExY2JmMTM5LzEvQU0ydVRzRzJVdmppMlkwS2hjZ2Iwbl9sVWxjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wN2RjMTQtOTMyYS00Y2MzLWJhZGQtODE1N2ExY2JmMTM5
LzEvNXMtUjU3bEpfWVE5aU96ODR0RlZUV3JwZ2RrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/LsMA0G
CSqGSIb3DQEBCwUAA4IBAQAuxcyCNz4pfeeegxwU2UvgkMGl49reZph8DwqmarOH
N5hmQf0fZiTTNnzdLdLYjrCt/FikLLU189Uk5fFqpJ9Qck+9gfaVag5gX9lMbx71
c0FCwdY61YlLsMTg3q36wblgOZLAyrSa9MtgoFvwxCKN2xKgUp4eXcVxSOQNbuj2
RnHVQyZ3cwEBaypTGs6I1A1odoLNQgA+8WkUriR7fnVsvw2LSv8rFD/Pg5uzi0+4
Y/FPKcBkOpCb7Ypx+KgRZw31QAGiFjd56FhFoyZ0d4rblitgnvsx/D42oQHzBfLA
COORsVRmMDTa6G6Usbxs3rlsO3QeCydDJhSn1oadWp9v
-----END CERTIFICATE-----
Generated at Tue Apr 29 21:40:53 2025 by rpki-client