Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/A9HLbHsUVCz4mZG_qcgV52S3cjY.roa
File: A9HLbHsUVCz4mZG_qcgV52S3cjY.roa (raw, json)
Hash identifier: QiiDAc5mZiyBApn+xdI0AS7IRuLW6Jz+L47fc+cKRn8=
Subject key identifier: 03:D1:CB:6C:7B:14:54:2C:F8:99:91:BF:A9:C8:15:E7:64:B7:72:36
Certificate issuer: /CN=46d713ada8dabcf77681c0ca42d9969e447c8ea7
Certificate serial: 019567B91DAF269C0AF44216A65859593CCA
Authority key identifier: 46:D7:13:AD:A8:DA:BC:F7:76:81:C0:CA:42:D9:96:9E:44:7C:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtcTrajavPd2gcDKQtmWnkR8jqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/A9HLbHsUVCz4mZG_qcgV52S3cjY.roa
Signing time: Wed 05 Mar 2025 19:12:19 +0000
ROA not before: Wed 05 Mar 2025 19:12:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 4515
IP address blocks: 91.209.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:67:b9:1d:af:26:9c:0a:f4:42:16:a6:58:59:59:3c:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d713ada8dabcf77681c0ca42d9969e447c8ea7
Validity
Not Before: Mar 5 19:12:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03d1cb6c7b14542cf89991bfa9c815e764b77236
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ba:7f:c5:33:a6:f2:91:cf:37:43:98:19:7f:
86:13:bd:9b:ce:4a:e3:5f:cf:d3:a3:2b:ea:f2:16:
fc:79:1c:e6:db:95:5f:4c:88:81:0f:5f:ca:c8:c7:
e4:71:6f:5c:54:17:19:0d:47:7e:9b:51:6a:fc:89:
f8:d9:1a:a3:90:5a:f2:96:58:fc:93:f8:10:c5:28:
61:47:5b:e0:33:6e:eb:9a:48:e5:3b:58:d1:b5:ef:
c1:fd:53:f4:95:77:f5:45:4f:71:c3:3e:fb:e4:32:
83:b0:f7:cd:76:45:2f:88:ec:37:78:a4:5f:3d:e7:
21:20:de:c3:e5:a1:48:59:c2:60:2f:98:9e:b0:de:
22:11:dd:c9:16:26:ce:9d:b6:44:94:ab:2f:a9:bd:
3d:02:9e:6f:45:79:c5:66:d2:80:f3:42:11:8d:fe:
5f:b5:79:4a:85:a5:7b:75:d2:db:49:c6:78:ba:67:
54:88:fa:dc:42:78:3b:43:d2:77:99:08:89:07:24:
56:39:2b:69:b3:bf:b7:2b:e2:14:fc:e3:17:ea:ed:
68:eb:42:a0:1a:68:b6:bc:6c:a5:e2:86:3b:52:7e:
9b:6c:a2:5b:11:7b:af:cf:b0:ba:be:05:23:df:2b:
13:59:f2:e7:f0:6a:01:a1:67:4c:74:db:4d:05:ab:
b9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D1:CB:6C:7B:14:54:2C:F8:99:91:BF:A9:C8:15:E7:64:B7:72:36
X509v3 Authority Key Identifier:
keyid:46:D7:13:AD:A8:DA:BC:F7:76:81:C0:CA:42:D9:96:9E:44:7C:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtcTrajavPd2gcDKQtmWnkR8jqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/A9HLbHsUVCz4mZG_qcgV52S3cjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/RtcTrajavPd2gcDKQtmWnkR8jqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.40.0/24
Signature Algorithm: sha256WithRSAEncryption
88:c3:e9:6c:86:dc:25:f2:05:87:e9:02:0f:38:40:13:1b:ac:
65:52:44:f5:eb:4f:24:85:45:0b:3c:26:4c:b0:ea:8a:5c:2a:
df:9a:10:32:12:b5:13:bb:dd:47:a0:1c:17:27:75:42:37:fb:
fd:76:5d:9c:73:fa:ef:d4:92:a1:e2:2c:4c:45:38:b5:fc:34:
3c:49:3a:c3:9d:9c:f9:50:d7:1b:7f:3f:59:ad:92:44:b0:d5:
3c:2d:19:b3:5e:df:9a:1f:12:e1:33:ba:29:2b:1c:06:38:08:
78:46:d9:e2:3b:d5:5b:cc:56:a2:68:ae:85:91:59:ad:f4:de:
56:ad:86:d5:1f:7f:8e:0d:f3:fe:f5:f8:a5:25:9c:aa:e0:7a:
4d:1a:52:27:43:19:54:a3:23:9b:45:8b:23:2f:0a:c2:9a:9d:
ea:7c:7f:56:14:84:fd:5e:97:98:a8:c8:e6:a2:26:f5:5c:34:
5d:3a:fb:86:5b:ca:78:04:44:aa:02:4f:dc:04:d8:d3:29:4a:
4d:c4:42:20:7d:59:d8:8c:6f:f2:a1:09:f0:ac:00:2a:c0:c9:
65:60:b3:02:ec:36:ce:ee:b2:d0:f8:33:79:4b:c3:54:80:d1:
3e:4e:8e:e7:35:d9:3d:c2:89:48:bd:5a:10:ad:fd:b3:ce:59:
45:0e:7a:18
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZVnuR2vJpwK9EIWplhZWTzKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2ZDcxM2FkYThkYWJjZjc3NjgxYzBjYTQyZDk5NjllNDQ3
YzhlYTcwHhcNMjUwMzA1MTkxMjE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwM2QxY2I2YzdiMTQ1NDJjZjg5OTkxYmZhOWM4MTVlNzY0Yjc3MjM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLp/xTOm8pHPN0OYGX+GE72bzkrj
X8/Toyvq8hb8eRzm25VfTIiBD1/KyMfkcW9cVBcZDUd+m1Fq/In42RqjkFryllj8
k/gQxShhR1vgM27rmkjlO1jRte/B/VP0lXf1RU9xwz775DKDsPfNdkUviOw3eKRf
PechIN7D5aFIWcJgL5iesN4iEd3JFibOnbZElKsvqb09Ap5vRXnFZtKA80IRjf5f
tXlKhaV7ddLbScZ4umdUiPrcQng7Q9J3mQiJByRWOStps7+3K+IU/OMX6u1o60Kg
Gmi2vGyl4oY7Un6bbKJbEXuvz7C6vgUj3ysTWfLn8GoBoWdMdNtNBau5NwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAPRy2x7FFQs+JmRv6nIFedkt3I2MB8GA1UdIwQY
MBaAFEbXE62o2rz3doHAykLZlp5EfI6nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnRjVHJhamF2UGQyZ2NES1F0bVdua1I4anFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS84OWYwZjYtYTVhYy00NjdiLWE0YWQt
YmUyMThjZWY0YTExLzEvQTlITGJIc1VWQ3o0bVpHX3FjZ1Y1MlMzY2pZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS84OWYwZjYtYTVhYy00NjdiLWE0YWQtYmUyMThjZWY0YTEx
LzEvUnRjVHJhamF2UGQyZ2NES1F0bVdua1I4anFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW9EoMA0G
CSqGSIb3DQEBCwUAA4IBAQCIw+lshtwl8gWH6QIPOEATG6xlUkT1608khUULPCZM
sOqKXCrfmhAyErUTu91HoBwXJ3VCN/v9dl2cc/rv1JKh4ixMRTi1/DQ8STrDnZz5
UNcbfz9ZrZJEsNU8LRmzXt+aHxLhM7opKxwGOAh4RtniO9VbzFaiaK6FkVmt9N5W
rYbVH3+ODfP+9filJZyq4HpNGlInQxlUoyObRYsjLwrCmp3qfH9WFIT9XpeYqMjm
oib1XDRdOvuGW8p4BESqAk/cBNjTKUpNxEIgfVnYjG/yoQnwrAAqwMllYLMC7DbO
7rLQ+DN5S8NUgNE+To7nNdk9wolIvVoQrf2zzllFDnoY
-----END CERTIFICATE-----
Generated at Wed Apr 30 00:58:52 2025 by rpki-client