Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/M_HyyVY3Wr-jvZ-cPny6-aHBreU.roa
File: M_HyyVY3Wr-jvZ-cPny6-aHBreU.roa (raw, json)
Hash identifier: vkMIyFJ5GbO8ACRTm+2+wLgvZWHYl+tWulDdUeEye74=
Subject key identifier: 33:F1:F2:C9:56:37:5A:BF:A3:BD:9F:9C:3E:7C:BA:F9:A1:C1:AD:E5
Certificate issuer: /CN=21409e170842785e5e787c3ac27a8844bab76c11
Certificate serial: 0B1650E8
Authority key identifier: 21:40:9E:17:08:42:78:5E:5E:78:7C:3A:C2:7A:88:44:BA:B7:6C:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IUCeFwhCeF5eeHw6wnqIRLq3bBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/M_HyyVY3Wr-jvZ-cPny6-aHBreU.roa
Signing time: Sat 01 Jan 2022 00:53:51 +0000
ROA not before: Sat 01 Jan 2022 00:53:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47828
IP address blocks: 91.199.134.0/24 maxlen: 24
2001:67c:1824::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186011880 (0xb1650e8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21409e170842785e5e787c3ac27a8844bab76c11
Validity
Not Before: Jan 1 00:53:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=33f1f2c956375abfa3bd9f9c3e7cbaf9a1c1ade5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:79:6c:91:34:a7:bc:13:8b:cb:a8:cc:b9:ef:
3b:6c:55:22:73:0d:a3:58:66:25:9e:87:8d:12:19:
4c:5a:80:02:2e:34:94:88:8b:6f:7c:69:c7:c7:90:
d3:2e:95:a3:7b:94:f6:f0:96:4e:65:39:f2:45:8b:
02:65:9f:37:47:70:12:84:dc:68:7e:a4:77:c3:9f:
ea:2a:86:cd:43:ab:6f:29:c2:e2:07:87:87:fc:e5:
ac:a3:b5:ac:b2:b4:b1:cf:f2:3c:67:94:8c:2a:ca:
c5:83:f5:98:20:62:2c:72:ce:aa:e5:56:ac:7a:17:
a4:4e:ee:0f:23:ca:95:87:d2:fa:a4:01:fd:9c:2a:
f0:21:61:fc:a4:bd:6c:8d:01:0e:3e:72:1d:c5:c6:
c7:37:31:0a:b8:1d:dd:9a:38:42:f8:b4:bf:96:c0:
37:64:14:0f:7d:1c:75:07:3f:e7:5d:d5:f0:56:79:
a7:5f:59:b1:61:bc:5d:5f:61:76:02:16:8c:5f:4b:
38:14:4b:37:af:9b:fd:64:0a:44:5f:01:60:6e:34:
78:a4:2e:f2:5a:cb:90:16:4f:2c:8b:29:aa:9e:66:
cc:2f:0e:47:33:d7:f8:7c:f4:85:5a:3c:22:eb:1f:
94:46:f5:87:59:4b:97:29:fe:0e:8f:99:12:f9:70:
5e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:F1:F2:C9:56:37:5A:BF:A3:BD:9F:9C:3E:7C:BA:F9:A1:C1:AD:E5
X509v3 Authority Key Identifier:
keyid:21:40:9E:17:08:42:78:5E:5E:78:7C:3A:C2:7A:88:44:BA:B7:6C:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IUCeFwhCeF5eeHw6wnqIRLq3bBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/M_HyyVY3Wr-jvZ-cPny6-aHBreU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/6ab8ee-e8f7-4f89-98d7-0e136be9bf36/1/IUCeFwhCeF5eeHw6wnqIRLq3bBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.134.0/24
IPv6:
2001:67c:1824::/48
Signature Algorithm: sha256WithRSAEncryption
9e:9d:60:4d:4c:ef:a3:6a:70:56:74:3a:e6:68:19:a7:6a:27:
03:2a:1d:bf:15:9d:c6:88:ec:25:c5:0f:76:a3:44:db:8b:1a:
18:82:da:2f:59:fa:ea:36:0b:9c:16:28:44:6f:27:bc:c6:9e:
c8:8a:58:ff:12:92:65:05:22:ac:68:c3:27:05:d8:a5:b0:17:
e0:56:8b:5f:61:29:cb:b7:4a:fc:e4:0e:17:6f:61:97:cd:b3:
a2:b5:70:d5:00:c0:ba:1c:e9:07:6c:1b:9b:46:b4:4a:8e:f7:
70:95:41:27:8c:17:7f:ca:80:ef:11:bb:ef:d4:86:24:ef:1a:
a5:55:3b:db:de:68:20:82:01:39:db:1f:1b:3c:5b:9f:e9:f7:
8c:1a:68:c8:0e:d6:25:6c:57:5f:98:6f:00:8a:a8:27:e7:0b:
53:24:fa:43:34:b2:44:12:2a:a2:38:ad:00:4f:07:f5:00:22:
5c:4f:4d:1f:4f:51:bf:46:bf:35:27:f9:dd:79:18:4a:7e:d6:
29:e8:44:56:37:84:aa:dd:1f:f2:0e:83:1d:81:82:fa:76:d7:
a6:a5:f5:78:e2:63:83:cd:f8:79:ea:6c:a0:e6:9e:c7:99:8f:
92:23:21:50:23:9e:51:e4:8e:68:20:61:8c:a0:bc:11:76:08:
9a:96:8f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 23:30:47 2025 by rpki-client