Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/c3a535-9f21-42f9-bc38-330f88481b1b/1/Bz1HGUP5v7muVCag1cGmsRUHGrk.roa
File: Bz1HGUP5v7muVCag1cGmsRUHGrk.roa (raw, json)
Hash identifier: ryDm/fyXSFAF27SuCiDpnxgSpN9BiCQUvhE4/K6+gbY=
Subject key identifier: 07:3D:47:19:43:F9:BF:B9:AE:54:26:A0:D5:C1:A6:B1:15:07:1A:B9
Certificate issuer: /CN=80963ae60ebf1e9ba0a35f118bfaebd924cd7b99
Certificate serial: 0CCC4357
Authority key identifier: 80:96:3A:E6:0E:BF:1E:9B:A0:A3:5F:11:8B:FA:EB:D9:24:CD:7B:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gJY65g6_Hpugo18Ri_rr2STNe5k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/c3a535-9f21-42f9-bc38-330f88481b1b/1/Bz1HGUP5v7muVCag1cGmsRUHGrk.roa
Signing time: Sat 01 Jan 2022 07:54:15 +0000
ROA not before: Sat 01 Jan 2022 07:54:15 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57554
IP address blocks: 91.232.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 214713175 (0xccc4357)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80963ae60ebf1e9ba0a35f118bfaebd924cd7b99
Validity
Not Before: Jan 1 07:54:15 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=073d471943f9bfb9ae5426a0d5c1a6b115071ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f8:8e:7e:47:2e:69:10:87:c3:d7:36:08:f8:
c4:67:1a:59:2b:97:83:f8:1c:c9:23:00:15:a6:99:
54:09:64:f3:61:eb:df:f5:5a:24:0b:8b:54:f7:34:
51:9c:9e:8e:c4:1a:f0:ca:c5:14:43:e4:3d:d2:4e:
50:c1:a5:b0:11:c4:b1:d7:fa:b7:d7:39:9b:13:2b:
6b:b7:49:b8:6a:dc:77:e6:9b:92:16:17:00:a4:c7:
57:ae:61:98:e8:ef:5c:14:e3:c0:33:b1:f2:f5:d3:
01:a7:f4:ad:a4:77:5a:6c:d6:9f:ab:12:fc:54:f8:
39:26:c8:54:d2:99:fb:9f:ab:04:f3:de:dd:12:d0:
ed:9e:21:e9:b8:3e:2c:7c:83:ee:8a:dc:d7:f3:14:
ba:8a:32:b2:de:10:82:1a:0c:07:14:d8:09:40:2e:
96:f7:81:fb:2b:a3:fc:c7:ac:54:82:5c:ee:b7:e3:
fc:c6:00:9c:8f:45:b1:96:82:f1:18:04:ca:63:b1:
80:cb:66:4a:f7:83:1e:02:71:4b:54:c8:5e:e8:c2:
7d:a3:f1:fb:3e:c1:89:ac:c7:de:60:f6:56:4b:3b:
86:48:c4:8e:73:0e:66:9e:be:09:bd:f1:68:0d:12:
5d:bd:d6:6a:3e:1b:3f:ca:a6:a8:f7:2a:da:b8:82:
e0:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:3D:47:19:43:F9:BF:B9:AE:54:26:A0:D5:C1:A6:B1:15:07:1A:B9
X509v3 Authority Key Identifier:
keyid:80:96:3A:E6:0E:BF:1E:9B:A0:A3:5F:11:8B:FA:EB:D9:24:CD:7B:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gJY65g6_Hpugo18Ri_rr2STNe5k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c3a535-9f21-42f9-bc38-330f88481b1b/1/Bz1HGUP5v7muVCag1cGmsRUHGrk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/c3a535-9f21-42f9-bc38-330f88481b1b/1/gJY65g6_Hpugo18Ri_rr2STNe5k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.239.0/24
Signature Algorithm: sha256WithRSAEncryption
15:ca:a9:bf:ca:3d:39:4d:86:3c:e7:cc:5f:11:97:ab:99:92:
28:03:2a:ab:ff:4d:77:a7:f9:be:f1:c5:be:f9:8d:dd:5a:53:
57:8e:1c:2d:67:93:1e:44:eb:87:32:2a:55:5b:ba:be:a0:7d:
76:34:e8:c9:a1:ac:e8:2c:f3:a3:2e:e9:16:43:88:a9:3f:d6:
94:c6:8f:e4:be:d6:50:c9:8b:c8:d5:61:6d:93:54:ed:73:50:
e1:bb:10:9e:ee:cb:09:76:78:82:c8:5e:da:99:e0:e1:40:01:
96:12:a0:24:22:35:0d:4e:31:21:bf:f3:81:dc:57:de:10:ec:
77:14:ca:84:66:a9:e7:f2:74:67:73:e5:93:47:8b:05:c6:e7:
f9:0c:87:0f:ab:78:a0:bd:82:ed:84:73:58:1c:1b:a0:b8:f7:
27:e0:fa:f7:9d:8b:c0:30:1e:1f:2d:3a:b0:f6:7e:8e:38:fb:
9e:6e:46:5a:63:de:7d:5d:07:d6:62:c8:ee:6e:f7:07:f8:75:
60:ee:58:13:a5:83:b8:4b:1c:d0:3e:26:26:83:8d:60:cb:4d:
9a:fd:97:4d:fe:6e:1a:c3:17:10:02:91:07:98:02:70:c0:64:
4c:95:53:0d:4e:97:3b:ab:2c:df:55:aa:8c:ed:cc:ee:ef:dd:
3a:8a:30:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:50:53 2025 by rpki-client