Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/SjVDo0j0yorlTxZgKwNODcsv8bY.roa
File: SjVDo0j0yorlTxZgKwNODcsv8bY.roa (raw, json)
Hash identifier: n5CR3fhRfotjv+4NitblG6lIFnhseZiHkhOFievJWig=
Subject key identifier: 4A:35:43:A3:48:F4:CA:8A:E5:4F:16:60:2B:03:4E:0D:CB:2F:F1:B6
Certificate issuer: /CN=057a0525a9781c22652b9fbdbf0298900eee161c
Certificate serial: 13EBFA7D
Authority key identifier: 05:7A:05:25:A9:78:1C:22:65:2B:9F:BD:BF:02:98:90:0E:EE:16:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BXoFJal4HCJlK5-9vwKYkA7uFhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/SjVDo0j0yorlTxZgKwNODcsv8bY.roa
Signing time: Sat 01 Jan 2022 12:59:16 +0000
ROA not before: Sat 01 Jan 2022 12:59:16 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 55569
IP address blocks: 91.199.242.0/24 maxlen: 24
185.235.86.0/24 maxlen: 24
185.235.87.0/24 maxlen: 24
91.212.98.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 334232189 (0x13ebfa7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=057a0525a9781c22652b9fbdbf0298900eee161c
Validity
Not Before: Jan 1 12:59:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=4a3543a348f4ca8ae54f16602b034e0dcb2ff1b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:c9:78:b7:8f:f7:38:26:23:5d:30:41:e4:7b:
d3:76:3c:1b:11:73:a7:51:e8:22:7d:79:9b:57:fc:
e3:0e:12:1c:9e:1e:13:78:38:01:25:ad:28:13:a6:
67:9e:c9:6b:de:0c:e9:b5:63:ba:6f:37:2e:05:0c:
3d:36:b4:fe:ca:8b:84:e4:a9:75:c3:b3:d8:3e:4b:
96:96:2e:c7:08:e6:e3:34:ca:8a:28:b4:a2:45:01:
3d:4b:51:6e:51:f9:43:05:fc:de:e0:79:d5:fb:49:
c8:11:67:26:15:9d:ee:f0:62:d4:cf:26:9d:6d:b1:
d9:a4:fb:fd:7a:8e:76:ba:e7:f1:07:cc:ce:4f:92:
83:5d:be:bf:73:77:79:3f:f8:64:ca:64:d0:f3:9e:
f8:cc:b0:ba:8e:f1:5b:84:30:4c:bb:5e:01:5a:db:
35:ae:f6:8f:16:6c:c4:87:bd:41:24:80:ed:99:17:
c9:25:09:05:39:0f:89:be:81:09:b7:86:c6:d4:5e:
90:ba:5e:9d:fe:97:2c:bc:0b:50:fb:a3:c3:18:f7:
bb:12:d6:bb:1b:17:cb:0f:1d:fd:dd:2c:04:f5:67:
1f:ef:78:e7:69:5a:cf:89:a7:0e:f1:bf:30:86:34:
15:15:3f:3f:22:36:2c:05:85:cd:8b:e7:a0:0f:8e:
36:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:35:43:A3:48:F4:CA:8A:E5:4F:16:60:2B:03:4E:0D:CB:2F:F1:B6
X509v3 Authority Key Identifier:
keyid:05:7A:05:25:A9:78:1C:22:65:2B:9F:BD:BF:02:98:90:0E:EE:16:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BXoFJal4HCJlK5-9vwKYkA7uFhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/SjVDo0j0yorlTxZgKwNODcsv8bY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/2de3d1-12ed-45bb-a7a9-0eaf7f8c6b92/1/BXoFJal4HCJlK5-9vwKYkA7uFhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.242.0/24
91.212.98.0/24
185.235.86.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:4f:30:d0:ef:a7:d1:92:4d:d0:a1:91:08:26:b2:9c:8f:4a:
09:2b:1f:7d:f4:ed:a3:5d:17:43:2a:1b:12:d8:2e:9f:b7:9d:
a8:45:af:75:95:73:e1:43:7b:4c:ac:df:f0:03:c3:88:bb:c9:
6e:40:55:07:0c:23:69:e9:54:1f:88:c0:16:a2:21:52:d9:a3:
61:91:17:3e:ac:9f:45:68:10:12:14:a1:cb:ab:43:a9:d2:e1:
75:18:0f:65:29:d6:3e:94:cc:02:fe:7f:0c:23:1e:9f:7d:ca:
8d:dd:4e:b4:3b:93:ba:78:45:09:12:f5:c9:60:7a:ba:3f:54:
1f:d8:5b:f4:71:34:ba:d3:1b:38:63:b5:9e:16:0c:9f:8e:40:
2a:88:f2:92:5a:99:bb:4b:90:2a:88:67:3f:9e:6f:df:f1:bd:
44:22:7d:4c:45:c2:95:08:64:b1:38:b2:19:2f:c2:39:2b:80:
0c:1b:3b:a5:1f:9a:6b:26:28:41:d2:67:89:6a:0c:d3:4c:dc:
00:f8:ef:ee:70:e7:0e:4a:2c:ff:b0:c2:ff:6c:e6:b8:66:df:
80:af:c1:2b:42:d7:bf:82:46:5e:78:b5:3c:9f:7f:2a:8d:29:
12:7f:cb:e9:e5:c8:f3:ef:11:d1:b6:8a:23:a2:c1:6b:bd:1f:
c9:84:62:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:36 2025 by rpki-client