Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/18f607-2909-42d3-8110-793fc7f2f5a1/1/sY6sixuBRqk9Tw3XJRMWYVXRc3Y.roa
File: sY6sixuBRqk9Tw3XJRMWYVXRc3Y.roa (raw, json)
Hash identifier: R0ayK5z3NipKwXc/ghgGDKtqbeyjuZT1FAUAaUiCUtg=
Subject key identifier: B1:8E:AC:8B:1B:81:46:A9:3D:4F:0D:D7:25:13:16:61:55:D1:73:76
Certificate issuer: /CN=bdbb2b04f654d84b1f3f3057126c1566e2a9b7cc
Certificate serial: 01857295AD8285245164D171978FBC7D26D5
Authority key identifier: BD:BB:2B:04:F6:54:D8:4B:1F:3F:30:57:12:6C:15:66:E2:A9:B7:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbsrBPZU2EsfPzBXEmwVZuKpt8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/18f607-2909-42d3-8110-793fc7f2f5a1/1/sY6sixuBRqk9Tw3XJRMWYVXRc3Y.roa
Signing time: Mon 02 Jan 2023 13:04:49 +0000
ROA not before: Mon 02 Jan 2023 13:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197514
IP address blocks: 91.220.240.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:ad:82:85:24:51:64:d1:71:97:8f:bc:7d:26:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdbb2b04f654d84b1f3f3057126c1566e2a9b7cc
Validity
Not Before: Jan 2 13:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b18eac8b1b8146a93d4f0dd72513166155d17376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e4:bf:3e:22:60:fc:21:44:8e:39:23:4e:85:
20:36:ff:fd:0e:46:11:cc:1b:e1:18:f7:46:17:c9:
f2:54:64:3f:ff:82:1b:59:bf:bd:74:eb:e0:ec:2c:
d6:b7:76:b1:c4:0e:8f:42:2d:99:1b:d1:f1:0c:fc:
9e:35:66:3c:f3:6f:31:a3:66:e7:fa:aa:80:57:85:
90:87:2c:fe:ac:34:9c:ab:b4:45:75:13:2f:98:fd:
9f:9b:f4:48:c4:fd:9c:e0:50:d9:69:c9:82:bc:37:
a7:dd:8b:e2:5f:09:5e:a6:ab:e0:23:9d:49:4b:f1:
35:f2:e8:07:e5:a5:79:21:c6:01:ff:61:6d:8f:1c:
3b:ea:6b:49:a5:8d:56:31:d5:b1:5e:74:06:48:9c:
42:1c:6c:52:49:a2:d3:bc:46:0b:95:60:b1:fe:9c:
aa:ab:72:ee:05:8f:10:f2:42:c4:bf:a9:d2:ca:72:
26:83:cb:55:ee:01:a1:0c:e3:b0:d3:30:32:05:d3:
11:b3:4f:cd:85:0b:83:7a:7b:19:dc:7a:68:cd:1a:
2e:78:ae:a0:82:a2:2c:83:3e:5c:91:bd:02:ce:4a:
37:db:89:0e:f0:ae:00:e8:b3:a9:6e:dc:fb:c1:04:
f1:2d:8a:e6:e0:bb:2c:18:b1:76:df:47:24:b9:fa:
15:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8E:AC:8B:1B:81:46:A9:3D:4F:0D:D7:25:13:16:61:55:D1:73:76
X509v3 Authority Key Identifier:
keyid:BD:BB:2B:04:F6:54:D8:4B:1F:3F:30:57:12:6C:15:66:E2:A9:B7:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbsrBPZU2EsfPzBXEmwVZuKpt8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/18f607-2909-42d3-8110-793fc7f2f5a1/1/sY6sixuBRqk9Tw3XJRMWYVXRc3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/18f607-2909-42d3-8110-793fc7f2f5a1/1/vbsrBPZU2EsfPzBXEmwVZuKpt8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.240.0/24
Signature Algorithm: sha256WithRSAEncryption
22:bb:88:26:0e:e4:96:13:31:20:09:ce:a0:b3:aa:e6:3a:cf:
08:f0:78:43:85:ef:f5:1d:62:ab:29:de:5a:9c:73:c4:06:c3:
11:8a:9a:4a:44:eb:bb:2b:65:4f:66:ac:76:b4:05:0c:15:47:
47:7e:10:00:c9:63:f5:7d:3e:b0:ba:46:49:ce:d6:ad:3f:e8:
43:dc:19:4b:51:f3:7f:f2:53:cf:3e:f2:fd:99:66:65:b1:e5:
eb:2d:5e:08:84:12:2a:34:c4:b0:c8:1d:1d:e6:c9:d9:f2:4f:
ae:87:c8:e2:bb:3b:c0:d5:9f:fd:70:fa:77:c3:b6:c7:63:0b:
7f:33:30:48:53:50:55:13:b0:f8:fa:58:21:f6:bd:a6:5f:03:
d9:8c:e1:0e:77:44:53:e0:56:28:fe:1d:33:56:06:62:a5:72:
32:13:52:c3:de:e6:ad:18:12:7f:8c:42:47:fc:0f:91:08:9b:
fd:28:e1:b4:cd:69:6f:e3:ee:ca:ae:93:2a:3c:7a:78:2b:e4:
5d:fa:71:ca:67:75:42:1e:1d:d3:bb:6a:52:94:e3:fc:c7:50:
f8:57:be:3b:7c:42:2f:6d:e6:18:82:92:4a:7e:25:89:15:57:
c3:6f:c2:9a:f0:35:d4:ab:20:07:e8:f6:d6:1e:2a:e8:f8:54:
db:12:6a:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 12:26:24 2025 by rpki-client