Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/1-zXsObBTfB8sWyNA6zQOoOLOmLI.roa
File: 1-zXsObBTfB8sWyNA6zQOoOLOmLI.roa (raw, json)
Hash identifier: ksduSHZ/2ws/P6+2FFZ626PDOL2cGGXMotcjSJJMLCA=
Subject key identifier: FB:35:EC:39:B0:53:7C:1F:2C:5B:23:40:EB:34:0E:A0:E2:CE:98:B2
Certificate issuer: /CN=720606eddbcec7a57211941a67cc729b42915c5e
Certificate serial: 018D13D7EDEF0A18E4E88994AC71C3D73F1D
Authority key identifier: 72:06:06:ED:DB:CE:C7:A5:72:11:94:1A:67:CC:72:9B:42:91:5C:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgYG7dvOx6VyEZQaZ8xym0KRXF4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/1-zXsObBTfB8sWyNA6zQOoOLOmLI.roa
Signing time: Tue 16 Jan 2024 19:55:34 +0000
ROA not before: Tue 16 Jan 2024 19:55:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 91.242.236.0/24 maxlen: 24
146.19.150.0/24 maxlen: 24
212.18.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:13:d7:ed:ef:0a:18:e4:e8:89:94:ac:71:c3:d7:3f:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=720606eddbcec7a57211941a67cc729b42915c5e
Validity
Not Before: Jan 16 19:55:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fb35ec39b0537c1f2c5b2340eb340ea0e2ce98b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:64:bb:c5:56:61:01:ea:72:7e:15:4e:d8:2f:
04:05:8b:45:04:b2:9e:87:50:7f:b0:7c:ab:03:1a:
65:f3:4a:02:c7:5d:71:8c:a0:ca:3e:40:6e:3d:bc:
0f:63:80:2a:26:f3:7e:a3:51:02:a0:9d:52:02:9d:
b5:33:7a:3f:c4:c2:36:48:fc:13:29:5d:da:7f:db:
d8:ea:3f:b1:0b:d0:42:7a:4c:ed:7f:5b:69:9d:5c:
d2:f0:56:c5:86:49:99:94:d9:09:55:86:fa:da:34:
0b:6b:4b:97:20:16:0e:d0:d4:7a:9e:8b:16:40:e8:
96:85:46:32:48:e7:c8:75:5a:7a:08:22:a5:e8:43:
b7:f7:8f:05:99:c6:77:f9:6b:99:7c:f0:73:cf:da:
c6:2d:4c:24:96:c6:28:13:3c:c7:b1:95:5f:c7:91:
87:d3:df:f9:f3:79:ce:f2:2a:c6:1b:58:d5:02:8d:
68:58:9e:65:a7:43:d5:08:ed:e9:9f:24:4d:4c:6f:
b7:81:fb:8a:07:ba:13:00:0b:e7:6c:12:c5:20:fa:
4b:a8:58:da:3c:00:12:0a:81:3a:b1:ce:7d:6c:69:
67:16:30:df:6d:49:18:b5:6e:4c:27:43:d8:fd:a6:
de:f0:b4:27:35:84:b0:4e:8d:98:24:cf:88:b9:65:
e8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:35:EC:39:B0:53:7C:1F:2C:5B:23:40:EB:34:0E:A0:E2:CE:98:B2
X509v3 Authority Key Identifier:
keyid:72:06:06:ED:DB:CE:C7:A5:72:11:94:1A:67:CC:72:9B:42:91:5C:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgYG7dvOx6VyEZQaZ8xym0KRXF4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/1-zXsObBTfB8sWyNA6zQOoOLOmLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b9c00-cbe0-4f88-aed5-99f5491c4447/1/cgYG7dvOx6VyEZQaZ8xym0KRXF4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.236.0/24
146.19.150.0/24
212.18.96.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:bf:35:da:ec:2f:be:3d:36:97:02:8f:f0:c8:fa:4e:97:cb:
f4:ec:8f:49:19:47:7d:01:b1:b6:fb:86:14:9b:d1:7d:eb:aa:
eb:63:c4:40:28:62:49:bb:18:0e:be:60:af:06:2d:48:1d:0b:
39:55:1e:91:76:44:14:37:02:0b:57:3c:9d:83:12:8f:32:3b:
62:2c:ff:15:67:08:ec:a8:3c:89:28:22:52:72:f4:8f:2a:c2:
8e:51:7a:07:d2:57:27:42:e0:6b:3a:c0:27:9b:f6:79:91:9c:
63:10:0a:73:61:64:ec:d8:c3:70:ad:ef:38:ff:e4:ae:8e:57:
f6:06:42:89:11:73:8b:f8:1d:8d:50:c6:f4:7c:cb:84:1a:fd:
f2:1f:b2:9a:e6:34:f6:70:35:c6:e8:20:f5:88:e1:f4:ef:82:
39:f8:22:f6:32:49:fe:08:12:d2:ec:92:c5:66:b9:75:99:48:
c4:7a:b1:fc:30:b4:a8:bd:45:4a:20:c6:ab:5e:34:86:68:a2:
5e:05:d7:29:5e:f5:e7:81:47:46:ab:67:e7:d7:2c:f7:93:74:
03:77:16:6d:46:04:e3:dc:ac:fd:cb:d8:f3:9d:fe:ca:76:87:
b0:d0:9b:62:3b:21:50:61:f3:82:69:db:63:a4:4c:7e:f6:e3:
c9:bf:52:ff
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAY0T1+3vChjk6ImUrHHD1z8dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDYwNmVkZGJjZWM3YTU3MjExOTQxYTY3Y2M3MjliNDI5
MTVjNWUwHhcNMjQwMTE2MTk1NTM0WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYjM1ZWMzOWIwNTM3YzFmMmM1YjIzNDBlYjM0MGVhMGUyY2U5OGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2S7xVZhAepyfhVO2C8EBYtFBLKe
h1B/sHyrAxpl80oCx11xjKDKPkBuPbwPY4AqJvN+o1ECoJ1SAp21M3o/xMI2SPwT
KV3af9vY6j+xC9BCekztf1tpnVzS8FbFhkmZlNkJVYb62jQLa0uXIBYO0NR6nosW
QOiWhUYySOfIdVp6CCKl6EO3948FmcZ3+WuZfPBzz9rGLUwklsYoEzzHsZVfx5GH
09/583nO8irGG1jVAo1oWJ5lp0PVCO3pnyRNTG+3gfuKB7oTAAvnbBLFIPpLqFja
PAASCoE6sc59bGlnFjDfbUkYtW5MJ0PY/abe8LQnNYSwTo2YJM+IuWXoxQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFPs17DmwU3wfLFsjQOs0DqDizpiyMB8GA1UdIwQY
MBaAFHIGBu3bzselchGUGmfMcptCkVxeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dZRzdkdk94NlZ5RVpRYVo4eHltMEtSWEY0LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC82YjljMDAtY2JlMC00Zjg4LWFlZDUt
OTlmNTQ5MWM0NDQ3LzEvMS16WHNPYkJUZkI4c1d5TkE2elFPb09MT21MSS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvZjQvNmI5YzAwLWNiZTAtNGY4OC1hZWQ1LTk5ZjU0OTFjNDQ0
Ny8xL2NnWUc3ZHZPeDZWeUVaUWFaOHh5bTBLUlhGNC5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjArBggrBgEFBQcBBwEB/wQcMBowGAQCAAEwEgMEAFvy7AME
AJITlgMEANQSYDANBgkqhkiG9w0BAQsFAAOCAQEAW7812uwvvj02lwKP8Mj6TpfL
9OyPSRlHfQGxtvuGFJvRfeuq62PEQChiSbsYDr5grwYtSB0LOVUekXZEFDcCC1c8
nYMSjzI7Yiz/FWcI7Kg8iSgiUnL0jyrCjlF6B9JXJ0LgazrAJ5v2eZGcYxAKc2Fk
7NjDcK3vOP/kro5X9gZCiRFzi/gdjVDG9HzLhBr98h+ymuY09nA1xugg9Yjh9O+C
Ofgi9jJJ/ggS0uySxWa5dZlIxHqx/DC0qL1FSiDGq140hmiiXgXXKV7154FHRqtn
59cs95N0A3cWbUYE49ys/cvY853+ynaHsNCbYjshUGHzgmnbY6RMfvbjyb9S/w==
-----END CERTIFICATE-----
Generated at Thu May 8 10:54:04 2025 by rpki-client