Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/Z9Q0nF3ONNFVJzXiAX8bDYefOH8.roa
File: Z9Q0nF3ONNFVJzXiAX8bDYefOH8.roa (raw, json)
Hash identifier: d09t/lpUmxxOB2lFSxjTsnuEw4j8R81lM9GFPAb+kqc=
Subject key identifier: 67:D4:34:9C:5D:CE:34:D1:55:27:35:E2:01:7F:1B:0D:87:9F:38:7F
Certificate issuer: /CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Certificate serial: 02A2511A
Authority key identifier: DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/Z9Q0nF3ONNFVJzXiAX8bDYefOH8.roa
Signing time: Sat 01 Jan 2022 02:53:16 +0000
ROA not before: Sat 01 Jan 2022 02:53:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 35913
IP address blocks: 91.227.240.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44192026 (0x2a2511a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dbe8cc8f5af1e7362d454f3dd91a82952919db61
Validity
Not Before: Jan 1 02:53:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=67d4349c5dce34d1552735e2017f1b0d879f387f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:6a:c3:0d:4d:6c:06:0c:92:07:64:f8:8d:
85:c8:0c:12:cc:12:89:18:12:a1:48:07:ae:8b:62:
25:77:4d:83:74:fc:c0:f4:16:bf:4a:97:a3:82:87:
61:c3:26:7e:80:05:3f:dd:60:9a:9f:0e:bc:43:cd:
91:f4:d4:66:e5:5a:b8:25:6e:75:a6:03:28:ce:ec:
fb:b1:be:df:57:02:04:06:a5:8c:82:35:43:03:6c:
72:c0:5b:85:b9:d1:57:72:f2:3e:8a:0a:fe:4f:c2:
b1:15:e1:50:b2:88:2d:2f:4f:da:c2:0f:af:88:c2:
9a:ee:02:65:a6:cb:66:3d:8e:98:11:85:a7:91:24:
5f:a1:ad:f5:c0:cf:5d:5b:12:3a:0f:f5:a0:c8:da:
33:1c:95:3a:e7:08:a9:c9:bc:aa:30:f9:e0:06:ab:
88:da:03:2e:ae:ca:b1:f4:7e:1e:d4:5c:89:28:23:
e6:3e:70:33:31:e5:7a:05:d8:ee:b1:60:db:bf:09:
e0:22:03:32:5e:32:a5:07:e6:72:7e:ba:47:1a:77:
cd:0e:bd:da:79:fa:97:67:f0:9e:5b:41:47:a3:77:
6c:69:81:37:42:42:fa:fb:20:c7:36:05:37:50:c1:
31:75:f9:f9:87:f9:91:f4:6f:e8:34:9d:79:11:8a:
ce:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:D4:34:9C:5D:CE:34:D1:55:27:35:E2:01:7F:1B:0D:87:9F:38:7F
X509v3 Authority Key Identifier:
keyid:DB:E8:CC:8F:5A:F1:E7:36:2D:45:4F:3D:D9:1A:82:95:29:19:DB:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-jMj1rx5zYtRU892RqClSkZ22E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/Z9Q0nF3ONNFVJzXiAX8bDYefOH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a573fe-6e0e-4bff-99fc-2621d5c99cab/1/2-jMj1rx5zYtRU892RqClSkZ22E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.240.0/23
Signature Algorithm: sha256WithRSAEncryption
53:9d:8b:50:3e:97:9c:32:3a:ce:39:77:3b:10:09:14:4d:4c:
e5:ec:04:33:a4:35:5f:88:04:a7:7d:82:b6:ed:a8:a4:96:6a:
3f:7b:ab:19:44:2a:29:bf:f7:a5:b1:6b:d7:4f:16:a6:85:2b:
37:cf:b2:bf:51:49:28:83:4e:1e:c6:99:0c:44:1d:9a:90:f0:
59:30:f8:4a:38:0f:95:8c:78:77:38:66:19:d7:b6:42:9b:27:
2e:51:09:d8:3e:7d:91:e5:14:7d:0a:19:27:90:04:8a:a9:6f:
d9:5d:38:ac:a0:09:90:27:b6:6f:ac:e6:24:d8:9e:55:f7:48:
1b:2b:3a:1f:a4:b7:0c:22:f3:5e:60:9a:49:fa:97:b7:47:e9:
a1:05:fb:8c:50:24:ac:48:b2:6e:61:e0:6d:bf:92:98:4f:0e:
cb:24:21:3b:e8:0f:20:4e:8f:e0:9f:bd:0b:d9:5d:ae:89:c9:
5d:42:13:b0:fe:12:54:01:42:19:a5:7b:db:25:ec:a9:f8:ca:
71:13:a8:45:06:0e:6e:a5:b5:fe:51:d7:3e:7c:1e:9b:7d:bf:
9d:dc:79:21:b2:fd:df:e0:ab:da:33:d2:b7:4f:c7:7e:2b:46:
a0:a3:da:50:1d:1e:fd:14:79:43:5b:7c:9d:8f:a1:53:20:c6:
1b:16:b2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 12 06:58:03 2025 by rpki-client