Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/S0aXQwzEMfO_byK88_PAIYF0E0Y.roa
File: S0aXQwzEMfO_byK88_PAIYF0E0Y.roa (raw, json)
Hash identifier: zkNEouDr8/eydtpoAL8WuNQuUPE88TuaPOB3fN49Myk=
Subject key identifier: 4B:46:97:43:0C:C4:31:F3:BF:6F:22:BC:F3:F3:C0:21:81:74:13:46
Certificate issuer: /CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Certificate serial: 01942521A96BE9F02C7ED77C871747CA5BDB
Authority key identifier: AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/S0aXQwzEMfO_byK88_PAIYF0E0Y.roa
Signing time: Thu 02 Jan 2025 03:49:10 +0000
ROA not before: Thu 02 Jan 2025 03:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5483
IP address blocks: 91.147.232.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:a9:6b:e9:f0:2c:7e:d7:7c:87:17:47:ca:5b:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae37cf4b1fd4ce56788ed80b7a2e11c61b456ab4
Validity
Not Before: Jan 2 03:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b4697430cc431f3bf6f22bcf3f3c02181741346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:75:56:17:69:e6:de:73:eb:f5:d8:e2:07:a9:
f3:73:5d:8f:5f:f2:5f:5c:b6:28:07:d4:20:56:d7:
be:ed:25:79:ae:45:73:38:ed:45:bf:ef:95:72:05:
36:be:1c:22:e2:b4:84:cd:b4:b1:a1:14:3f:08:2a:
e3:d3:65:8f:ee:0e:6a:30:f4:32:9d:7f:b7:ac:0d:
b5:8e:4b:ac:de:59:35:a7:84:fd:75:a9:54:38:93:
cd:47:88:29:32:4a:fa:a7:d4:9e:e2:ef:6b:22:ee:
ad:4d:11:29:b2:53:95:28:55:0e:f1:11:6a:e5:91:
12:fe:82:01:f7:ed:3f:be:e2:21:e5:89:b7:fe:d3:
02:8d:e4:a7:66:59:1f:34:1b:ef:8d:07:7a:dc:06:
3a:84:db:4e:fa:48:43:69:c8:2c:71:96:df:28:0e:
15:26:a2:a3:3b:94:46:20:4d:c5:cb:b9:0a:7b:e2:
8b:6f:48:a0:30:a9:ae:6e:20:fc:d8:b0:60:00:47:
35:89:7b:e2:99:f1:66:13:51:8a:d7:83:12:39:c0:
4a:af:95:44:8b:46:e5:91:c3:54:56:21:be:fc:7b:
18:6c:4c:34:9e:d9:77:cd:3f:4f:fa:00:c0:40:cd:
05:02:16:c3:eb:c6:be:63:61:11:35:79:86:86:10:
65:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:46:97:43:0C:C4:31:F3:BF:6F:22:BC:F3:F3:C0:21:81:74:13:46
X509v3 Authority Key Identifier:
keyid:AE:37:CF:4B:1F:D4:CE:56:78:8E:D8:0B:7A:2E:11:C6:1B:45:6A:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rjfPSx_UzlZ4jtgLei4RxhtFarQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/S0aXQwzEMfO_byK88_PAIYF0E0Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c53bd-4a19-4428-b550-1ea2a8ea1543/1/rjfPSx_UzlZ4jtgLei4RxhtFarQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.232.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:11:1d:30:22:b0:f7:ff:9c:04:03:4d:fe:ee:0b:98:60:93:
b4:78:2d:88:9d:56:cc:d9:ae:75:a7:5e:d9:57:55:28:c0:29:
0c:57:ca:01:c2:5d:0f:c4:4e:53:07:20:fc:a7:b0:2a:28:89:
dc:b7:bc:e7:9c:94:de:09:83:35:3c:76:28:f4:35:a9:84:55:
64:fe:0e:9a:77:76:f6:a4:10:79:eb:c6:9a:7b:c3:9f:0c:df:
1f:d1:e1:5a:83:38:03:36:96:c3:5c:58:90:9d:6b:21:b8:ff:
11:81:74:79:d5:e9:cd:c6:27:f6:07:de:ab:78:55:82:32:1c:
8d:97:ba:79:dd:b1:98:25:12:84:2b:dc:80:05:c9:17:77:07:
57:a7:90:c8:7c:5b:46:88:9e:9a:69:05:5a:7c:c5:17:ee:f4:
60:9f:69:3b:d0:3d:a1:7a:a8:00:52:8d:cb:ef:ee:5e:b8:5d:
f5:be:0b:02:54:ef:44:1c:c2:2b:95:41:f8:ec:b7:8c:a5:ca:
71:f1:df:ba:76:0b:bf:b9:12:1a:7e:8c:f1:c9:1a:a6:71:6b:
02:79:7a:0a:c5:04:be:6a:b4:00:84:3a:87:c2:4f:04:36:38:
2e:57:ce:97:4c:65:e4:0f:be:2c:c2:6c:e7:7a:03:55:86:8c:
29:a7:97:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:23:30 2025 by rpki-client