Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/Xmu3Wof83-3W6HUABDOB9uG0KHw.roa
File: Xmu3Wof83-3W6HUABDOB9uG0KHw.roa (raw, json)
Hash identifier: WGtbkYQX4xyVYKg0TN/NW5I7gEaa+Aj297r2iMBu72Y=
Subject key identifier: 5E:6B:B7:5A:87:FC:DF:ED:D6:E8:75:00:04:33:81:F6:E1:B4:28:7C
Certificate issuer: /CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Certificate serial: 01929C0E50F5C940CED5BDB5D46F0663E1A4
Authority key identifier: A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/Xmu3Wof83-3W6HUABDOB9uG0KHw.roa
Signing time: Thu 17 Oct 2024 19:57:16 +0000
ROA not before: Thu 17 Oct 2024 19:57:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60223
IP address blocks: 91.227.62.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:9c:0e:50:f5:c9:40:ce:d5:bd:b5:d4:6f:06:63:e1:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1dc0630e96096de4822d1f51ef80c6fff54191b
Validity
Not Before: Oct 17 19:57:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5e6bb75a87fcdfedd6e87500043381f6e1b4287c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:68:71:45:b2:c1:c6:4b:82:64:c1:36:5c:
61:08:c1:df:c1:18:a5:27:5f:3e:2f:c0:6d:56:dd:
af:d5:07:0f:6e:43:40:30:92:1f:0c:f8:1c:66:52:
5b:cc:c7:77:fb:24:48:fb:60:42:c1:42:c7:bd:06:
bb:43:02:2f:ca:92:35:e5:e2:ea:6e:d8:b4:00:6d:
54:2c:ed:6d:e5:e1:ee:7a:40:32:2f:c2:2f:24:e3:
86:32:e2:1a:e2:a7:92:fc:3c:4d:b6:8c:c3:27:3a:
ba:3f:83:a5:78:c1:fd:d9:3e:67:fb:4d:de:21:03:
c4:da:38:cf:20:1c:f1:64:2a:26:08:ab:92:9c:3a:
87:26:41:68:47:20:45:f8:30:bc:49:88:9f:5f:1e:
ae:ce:48:f5:15:e7:e6:4c:f7:1b:67:b5:c3:2e:30:
5a:9b:e4:8a:60:1c:c3:de:76:38:bf:0a:7d:3d:93:
a3:cd:34:33:a8:5d:8c:09:c6:07:8a:1f:a2:c8:69:
1c:dd:c5:1a:53:67:1f:b1:61:f7:35:db:cb:ac:20:
a0:11:76:a3:d0:09:47:ec:38:f2:6a:d4:88:5a:1f:
bf:e3:c1:ea:60:1b:03:42:68:9a:a7:72:2d:b1:43:
6f:58:8c:c5:d4:72:89:0a:5b:50:7e:82:51:ee:c7:
43:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:6B:B7:5A:87:FC:DF:ED:D6:E8:75:00:04:33:81:F6:E1:B4:28:7C
X509v3 Authority Key Identifier:
keyid:A1:DC:06:30:E9:60:96:DE:48:22:D1:F5:1E:F8:0C:6F:FF:54:19:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/odwGMOlglt5IItH1HvgMb_9UGRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/Xmu3Wof83-3W6HUABDOB9uG0KHw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3f9158-6a90-4e57-a28f-3e06a0182614/1/odwGMOlglt5IItH1HvgMb_9UGRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.62.0/24
Signature Algorithm: sha256WithRSAEncryption
42:57:3f:a8:3b:14:bc:27:87:ae:65:72:7f:50:73:35:c8:d2:
c4:63:7c:91:0a:70:2a:c3:7d:ce:d8:b1:4a:5b:5c:81:27:87:
e2:bd:d0:a3:66:ac:c0:32:b7:48:c7:26:20:48:db:04:5b:f2:
7e:e7:c3:79:e7:a1:e5:f1:d9:e0:8e:99:cc:bc:39:d9:d1:49:
28:35:6e:45:9f:4d:89:67:f4:39:49:d4:ab:d4:b0:ae:9d:1e:
11:aa:30:16:d0:5c:df:86:d6:3e:97:76:dd:25:67:ef:1a:12:
8b:87:b8:4d:78:71:aa:cf:e3:bb:38:8d:9c:27:31:bb:fa:e4:
69:fc:02:29:2b:6b:02:c2:aa:f6:af:3d:01:03:b1:ce:9c:28:
22:ce:8d:42:63:95:c1:dc:62:05:77:4f:34:e6:44:4d:8d:fd:
6f:f8:52:03:a4:f8:e8:10:63:5a:c6:74:be:1b:83:42:1f:9f:
88:41:c5:9c:0e:5c:27:15:72:09:3e:8f:f1:07:ce:85:f1:14:
49:2d:2e:19:23:0e:54:63:70:b4:84:03:96:94:f2:d6:b1:1d:
86:91:09:cb:fd:ed:62:e0:fb:02:81:02:89:33:5a:65:92:b2:
cd:61:c4:f4:b3:08:2d:53:c6:46:7b:5e:62:ab:59:90:1a:c6:
3e:2a:87:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:00:41 2025 by rpki-client