Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c7120e-d797-4b5c-a5a7-16b55ed49053/1/dhIOBecSZMDCYPcf-yW3kIYMTX8.roa
File: dhIOBecSZMDCYPcf-yW3kIYMTX8.roa (raw, json)
Hash identifier: 7zy01Zfzuc/iGTv72I9sEW0RWlm16tZ0HIkzv1OhGHQ=
Subject key identifier: 76:12:0E:05:E7:12:64:C0:C2:60:F7:1F:FB:25:B7:90:86:0C:4D:7F
Certificate issuer: /CN=e4e1770df8c6e803fceb364c868e3246e4d33742
Certificate serial: 0184AA0F76599E9F311C0AC5C38C9C0A5EDE
Authority key identifier: E4:E1:77:0D:F8:C6:E8:03:FC:EB:36:4C:86:8E:32:46:E4:D3:37:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5OF3DfjG6AP86zZMho4yRuTTN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c7120e-d797-4b5c-a5a7-16b55ed49053/1/dhIOBecSZMDCYPcf-yW3kIYMTX8.roa
Signing time: Thu 24 Nov 2022 14:34:10 +0000
ROA not before: Thu 24 Nov 2022 14:34:10 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57122
IP address blocks: 91.230.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:aa:0f:76:59:9e:9f:31:1c:0a:c5:c3:8c:9c:0a:5e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4e1770df8c6e803fceb364c868e3246e4d33742
Validity
Not Before: Nov 24 14:34:10 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=76120e05e71264c0c260f71ffb25b790860c4d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ef:17:85:f8:f5:cd:8c:c3:8c:e9:c8:10:5d:
2c:5e:3e:48:41:75:1f:2c:24:9e:54:52:bb:07:29:
e9:20:b2:fb:14:38:81:65:6a:dd:03:54:46:f2:83:
0d:3b:64:29:51:7e:7c:fd:23:20:a0:5f:64:7f:c5:
ef:89:25:ea:40:ca:47:7f:be:f4:ae:f9:6c:35:37:
ee:52:f3:be:cd:91:0a:fe:84:b5:84:22:c8:50:e3:
7b:22:0b:07:35:1f:b5:38:41:95:9e:62:d6:35:07:
28:30:5e:b8:97:56:ae:48:db:34:2d:82:6b:db:08:
08:af:85:b2:05:d3:48:78:09:f8:b7:85:05:98:41:
77:a4:4e:0c:82:d5:5f:a1:df:ec:e0:96:d5:c3:27:
fc:a9:8f:85:b8:1b:79:e8:7b:ea:f0:67:18:e8:98:
99:3b:b5:56:4b:df:83:2d:3e:fe:ef:31:22:07:7c:
24:75:97:53:83:e9:b0:d7:c8:01:72:50:c9:41:6a:
44:c0:6c:54:65:83:62:ee:2d:7d:d5:2e:99:ff:ec:
f5:97:4b:bb:b6:f7:bf:11:e0:47:76:53:06:5f:26:
ba:df:40:2b:d2:a3:74:85:7f:16:ea:d7:55:08:98:
a8:7a:9a:af:10:ff:4c:cd:7e:ae:c5:12:11:68:85:
03:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:12:0E:05:E7:12:64:C0:C2:60:F7:1F:FB:25:B7:90:86:0C:4D:7F
X509v3 Authority Key Identifier:
keyid:E4:E1:77:0D:F8:C6:E8:03:FC:EB:36:4C:86:8E:32:46:E4:D3:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5OF3DfjG6AP86zZMho4yRuTTN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c7120e-d797-4b5c-a5a7-16b55ed49053/1/dhIOBecSZMDCYPcf-yW3kIYMTX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c7120e-d797-4b5c-a5a7-16b55ed49053/1/5OF3DfjG6AP86zZMho4yRuTTN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.231.0/24
Signature Algorithm: sha256WithRSAEncryption
82:28:78:6c:db:da:97:fd:bb:d3:f7:fb:cf:53:64:b7:6a:11:
ed:ce:59:37:6e:a6:2c:9c:f7:a3:10:da:29:8d:6b:02:2e:7a:
e1:01:78:ea:88:d1:0c:e9:bd:04:15:6a:b2:77:a8:2f:21:98:
f7:46:52:49:92:9d:38:65:0d:35:5c:b8:88:98:f1:28:93:d7:
17:e4:50:23:01:8c:ba:a5:ee:bd:85:89:78:e5:a8:1f:93:39:
2c:60:0f:df:94:ff:49:94:af:55:4f:17:10:a6:d6:cb:9f:b9:
f6:a8:3e:1d:67:49:c7:03:4a:6e:69:3a:27:93:30:67:e2:4a:
03:c1:7c:47:2b:0e:0a:8b:ab:21:0a:27:ba:c8:46:ad:6e:4b:
74:d2:52:dd:ca:c6:b9:ac:04:ea:a3:ca:a6:7e:43:9d:64:c8:
63:cc:22:d3:5d:8c:3f:b7:61:fa:cb:43:f4:bb:05:d9:c8:f2:
79:f6:76:e0:7a:0a:62:98:f6:f3:8f:56:4a:43:2e:56:9f:63:
7d:2e:2d:11:7d:3d:71:d7:12:2d:f3:1b:b8:b5:6d:b5:9f:98:
c1:25:cf:32:c3:59:16:b3:61:76:0d:1e:c0:b3:bb:20:39:db:
76:1e:8c:a3:18:29:8e:5b:f5:d6:ef:68:fe:fa:8e:c9:92:1c:
16:f8:96:22
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYSqD3ZZnp8xHArFw4ycCl7eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU0ZTE3NzBkZjhjNmU4MDNmY2ViMzY0Yzg2OGUzMjQ2ZTRk
MzM3NDIwHhcNMjIxMTI0MTQzNDEwWhcNMjMwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3NjEyMGUwNWU3MTI2NGMwYzI2MGY3MWZmYjI1Yjc5MDg2MGM0ZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAge8Xhfj1zYzDjOnIEF0sXj5IQXUf
LCSeVFK7BynpILL7FDiBZWrdA1RG8oMNO2QpUX58/SMgoF9kf8XviSXqQMpHf770
rvlsNTfuUvO+zZEK/oS1hCLIUON7IgsHNR+1OEGVnmLWNQcoMF64l1auSNs0LYJr
2wgIr4WyBdNIeAn4t4UFmEF3pE4MgtVfod/s4JbVwyf8qY+FuBt56Hvq8GcY6JiZ
O7VWS9+DLT7+7zEiB3wkdZdTg+mw18gBclDJQWpEwGxUZYNi7i191S6Z/+z1l0u7
tve/EeBHdlMGXya630Ar0qN0hX8W6tdVCJioepqvEP9MzX6uxRIRaIUDQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFHYSDgXnEmTAwmD3H/slt5CGDE1/MB8GA1UdIwQY
MBaAFOThdw34xugD/Os2TIaOMkbk0zdCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNU9GM0Rmakc2QVA4NnpaTWhvNHlSdVRUTjBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC9jNzEyMGUtZDc5Ny00YjVjLWE1YTct
MTZiNTVlZDQ5MDUzLzEvZGhJT0JlY1NaTURDWVBjZi15VzNrSVlNVFg4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC9jNzEyMGUtZDc5Ny00YjVjLWE1YTctMTZiNTVlZDQ5MDUz
LzEvNU9GM0Rmakc2QVA4NnpaTWhvNHlSdVRUTjBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW+bnMA0G
CSqGSIb3DQEBCwUAA4IBAQCCKHhs29qX/bvT9/vPU2S3ahHtzlk3bqYsnPejENop
jWsCLnrhAXjqiNEM6b0EFWqyd6gvIZj3RlJJkp04ZQ01XLiImPEok9cX5FAjAYy6
pe69hYl45agfkzksYA/flP9JlK9VTxcQptbLn7n2qD4dZ0nHA0puaTonkzBn4koD
wXxHKw4Ki6shCie6yEatbkt00lLdysa5rATqo8qmfkOdZMhjzCLTXYw/t2H6y0P0
uwXZyPJ59nbgegpimPbzj1ZKQy5Wn2N9Li0RfT1x1xIt8xu4tW21n5jBJc8yw1kW
s2F2DR7As7sgOdt2HoyjGCmOW/XW72j++o7JkhwW+JYi
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:19:28 2025 by rpki-client