Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ndXzWFrUiV8919PdOfKp5kCnbcc.roa
File: ndXzWFrUiV8919PdOfKp5kCnbcc.roa (raw, json)
Hash identifier: nOye4DYnKoEpHj1JBb9YuqEziPuCapcWY/rbAbDf3Ps=
Subject key identifier: 9D:D5:F3:58:5A:D4:89:5F:3D:D7:D3:DD:39:F2:A9:E6:40:A7:6D:C7
Certificate issuer: /CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Certificate serial: 0194258FAA65F7FF008A6C49E26929DF57D4
Authority key identifier: 9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ndXzWFrUiV8919PdOfKp5kCnbcc.roa
Signing time: Thu 02 Jan 2025 05:49:19 +0000
ROA not before: Thu 02 Jan 2025 05:49:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15440
IP address blocks: 91.244.197.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:aa:65:f7:ff:00:8a:6c:49:e2:69:29:df:57:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b0c0d04225566db95e9ad3b2ef605014975aaa2
Validity
Not Before: Jan 2 05:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9dd5f3585ad4895f3dd7d3dd39f2a9e640a76dc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:45:c5:9d:3c:2f:c3:82:1b:23:54:ef:d8:ea:
b1:50:79:d5:a3:6f:ff:c8:f5:64:68:e2:39:3e:d6:
46:28:42:11:b6:17:f4:91:80:b5:38:0f:4b:6f:62:
bf:86:eb:3c:21:e6:3b:91:c1:ad:54:c7:ed:19:69:
0c:fc:db:56:cb:4c:fa:fa:ea:94:c3:4a:b9:61:06:
4e:d2:6d:de:6f:f7:a1:63:71:e8:1d:08:9c:1a:24:
6d:3c:d3:bc:c6:7c:52:76:0d:80:40:d4:ab:42:9a:
8a:d0:5e:33:2a:7c:8f:0e:3d:f4:10:cf:d8:2d:96:
a4:e2:6e:ef:bf:ac:c9:9b:c4:1a:e6:e4:e6:f3:db:
6c:dd:33:98:3c:87:13:cb:0d:c3:21:2e:18:2e:b9:
bc:d7:15:8b:2f:1b:0c:66:9e:9d:25:93:59:d2:21:
cb:e1:de:ed:ed:b5:d5:e6:fa:73:62:5f:53:16:54:
13:a4:2b:96:dc:3b:6e:13:3b:1b:b1:fc:76:e9:e1:
3a:8c:53:c8:ba:dc:21:23:05:6f:29:3e:81:3d:f9:
34:1d:6a:a9:a2:bf:b0:d9:06:f9:f5:b8:29:1d:1b:
fc:d1:e1:c4:81:01:8b:e4:5f:99:33:ae:20:cb:e8:
f9:d4:49:9f:84:06:13:7c:9d:a2:33:a2:1a:44:79:
77:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:D5:F3:58:5A:D4:89:5F:3D:D7:D3:DD:39:F2:A9:E6:40:A7:6D:C7
X509v3 Authority Key Identifier:
keyid:9B:0C:0D:04:22:55:66:DB:95:E9:AD:3B:2E:F6:05:01:49:75:AA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mwwNBCJVZtuV6a07LvYFAUl1qqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/ndXzWFrUiV8919PdOfKp5kCnbcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/0ec6d2-f1d7-4b0a-ad33-e8ef2f09598e/1/mwwNBCJVZtuV6a07LvYFAUl1qqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.244.197.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b9:ea:0e:b6:b0:d1:59:3f:a4:3e:ce:17:b2:f1:ee:9e:ea:
7b:d2:ab:23:35:1f:5b:31:a2:95:85:c4:20:ea:11:2d:ea:62:
fb:e7:f3:65:a2:18:52:d5:2d:8f:f2:f1:b7:10:36:c9:7b:d8:
e2:12:16:71:27:8f:9b:40:13:18:e5:83:c1:21:94:05:58:e5:
07:14:0b:0b:ec:70:a6:7f:d3:6e:44:b3:7a:17:e1:f0:53:40:
cd:b2:b8:6f:e0:e7:bf:6f:e4:a7:66:ef:07:88:b6:3a:b3:32:
52:6d:aa:be:79:23:4f:d1:12:0d:1e:ed:12:b1:a3:0f:9a:4f:
d3:b1:38:ab:3c:6f:46:51:53:ab:11:f2:af:bd:7b:1e:91:68:
da:b8:76:8a:f2:e2:b4:8c:35:2f:45:70:76:62:17:1f:ff:37:
66:03:c7:f4:ce:0e:fb:7d:d9:b7:f5:fe:60:f4:fe:84:f5:c9:
4c:d9:62:7f:62:5d:77:fc:11:d3:97:b0:a2:93:e5:93:bc:79:
02:5d:ff:ab:69:8d:c8:73:5e:d9:d2:77:f2:81:44:52:d2:d3:
6d:ab:8a:3d:6b:c7:c0:71:81:d6:f9:e5:f4:b2:3a:dc:41:a6:
af:e4:eb:4c:ac:48:d5:60:2e:21:a9:8f:f6:60:53:ac:04:93:
2b:38:d3:1d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZQlj6pl9/8AimxJ4mkp31fUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliMGMwZDA0MjI1NTY2ZGI5NWU5YWQzYjJlZjYwNTAxNDk3
NWFhYTIwHhcNMjUwMTAyMDU0OTE5WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZGQ1ZjM1ODVhZDQ4OTVmM2RkN2QzZGQzOWYyYTllNjQwYTc2ZGM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UXFnTwvw4IbI1Tv2OqxUHnVo2//
yPVkaOI5PtZGKEIRthf0kYC1OA9Lb2K/hus8IeY7kcGtVMftGWkM/NtWy0z6+uqU
w0q5YQZO0m3eb/ehY3HoHQicGiRtPNO8xnxSdg2AQNSrQpqK0F4zKnyPDj30EM/Y
LZak4m7vv6zJm8Qa5uTm89ts3TOYPIcTyw3DIS4YLrm81xWLLxsMZp6dJZNZ0iHL
4d7t7bXV5vpzYl9TFlQTpCuW3DtuEzsbsfx26eE6jFPIutwhIwVvKT6BPfk0HWqp
or+w2Qb59bgpHRv80eHEgQGL5F+ZM64gy+j51EmfhAYTfJ2iM6IaRHl3NwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ3V81ha1IlfPdfT3TnyqeZAp23HMB8GA1UdIwQY
MBaAFJsMDQQiVWbblemtOy72BQFJdaqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMt
ZThlZjJmMDk1OThlLzEvbmRYeldGclVpVjg5MTlQZE9mS3A1a0NuYmNjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8wZWM2ZDItZjFkNy00YjBhLWFkMzMtZThlZjJmMDk1OThl
LzEvbXd3TkJDSlZadHVWNmEwN0x2WUZBVWwxcXFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW/TFMA0G
CSqGSIb3DQEBCwUAA4IBAQBUueoOtrDRWT+kPs4XsvHunup70qsjNR9bMaKVhcQg
6hEt6mL75/NlohhS1S2P8vG3EDbJe9jiEhZxJ4+bQBMY5YPBIZQFWOUHFAsL7HCm
f9NuRLN6F+HwU0DNsrhv4Oe/b+SnZu8HiLY6szJSbaq+eSNP0RINHu0SsaMPmk/T
sTirPG9GUVOrEfKvvXsekWjauHaK8uK0jDUvRXB2Yhcf/zdmA8f0zg77fdm39f5g
9P6E9clM2WJ/Yl13/BHTl7Cik+WTvHkCXf+raY3Ic17Z0nfygURS0tNtq4o9a8fA
cYHW+eX0sjrcQaav5OtMrEjVYC4hqY/2YFOsBJMrONMd
-----END CERTIFICATE-----
Generated at Tue May 6 17:00:35 2025 by rpki-client