Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/7d7d35-55b1-4dab-bbaf-a5fc5c47dc74/1/z7eHM33KUJayS0I1oHu1RSkgz38.roa
File: z7eHM33KUJayS0I1oHu1RSkgz38.roa (raw, json)
Hash identifier: adn6FFTxAcAcVO/RIsayZeDYyWBfb2ARJKDjaNlgvww=
Subject key identifier: CF:B7:87:33:7D:CA:50:96:B2:4B:42:35:A0:7B:B5:45:29:20:CF:7F
Certificate issuer: /CN=474180cc1112bd41687ba6609c2716757e5425de
Certificate serial: 68F4
Authority key identifier: 47:41:80:CC:11:12:BD:41:68:7B:A6:60:9C:27:16:75:7E:54:25:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0GAzBESvUFoe6ZgnCcWdX5UJd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/7d7d35-55b1-4dab-bbaf-a5fc5c47dc74/1/z7eHM33KUJayS0I1oHu1RSkgz38.roa
Signing time: Wed 12 Jan 2022 14:52:25 +0000
ROA not before: Wed 12 Jan 2022 14:52:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57271
IP address blocks: 91.220.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26868 (0x68f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474180cc1112bd41687ba6609c2716757e5425de
Validity
Not Before: Jan 12 14:52:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cfb787337dca5096b24b4235a07bb5452920cf7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c0:1b:61:1b:47:f8:37:f9:ce:2f:b7:1b:f6:
8f:14:6a:5d:8f:a8:40:32:79:ac:8a:a8:47:06:7e:
c8:02:a5:91:f0:85:33:b1:14:1c:8f:12:00:d9:4c:
b2:e3:58:c7:01:38:ec:97:78:cf:80:94:f1:34:70:
78:c8:87:74:31:ff:91:3a:66:08:d7:e2:7b:ce:f2:
20:48:12:15:83:16:de:e1:32:61:b9:3e:30:be:fe:
b2:95:5a:0c:c7:1f:fe:a0:c4:4d:6d:fb:a5:6b:47:
14:6c:86:3e:5e:5a:a2:be:bc:3c:f0:ef:00:25:81:
31:53:ca:43:18:02:72:9e:72:e6:a7:88:8b:d0:b4:
29:65:b9:92:98:06:86:cd:61:2c:f8:0a:e6:85:dc:
98:c1:7d:1a:57:f9:dd:4d:54:a0:29:e3:5c:0a:bb:
7a:9b:73:f5:76:1e:46:a5:60:aa:12:ac:7d:2e:ca:
06:cd:53:f7:51:5f:46:6d:e8:e4:fb:66:cd:ba:26:
da:ec:19:36:d0:e5:e7:c7:08:46:05:18:da:15:9f:
48:d6:36:ec:62:10:42:28:5f:77:8c:f8:dc:52:5a:
83:cc:6a:5c:72:a2:02:00:af:88:87:52:5d:14:66:
4b:84:aa:8f:44:8d:a7:5d:33:f8:35:99:08:a4:ec:
fa:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B7:87:33:7D:CA:50:96:B2:4B:42:35:A0:7B:B5:45:29:20:CF:7F
X509v3 Authority Key Identifier:
keyid:47:41:80:CC:11:12:BD:41:68:7B:A6:60:9C:27:16:75:7E:54:25:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0GAzBESvUFoe6ZgnCcWdX5UJd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7d7d35-55b1-4dab-bbaf-a5fc5c47dc74/1/z7eHM33KUJayS0I1oHu1RSkgz38.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7d7d35-55b1-4dab-bbaf-a5fc5c47dc74/1/R0GAzBESvUFoe6ZgnCcWdX5UJd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.198.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:b5:98:db:2b:57:1e:e0:f8:93:fc:eb:f2:1e:a0:5e:85:54:
ad:ce:61:62:c3:ef:75:ec:f2:02:ff:59:21:fb:d3:9a:42:c8:
40:cc:fe:b5:e7:07:c3:5c:36:e4:2d:3d:1a:fb:1a:82:85:ab:
75:05:8c:eb:7a:a6:64:a3:53:d5:05:bd:eb:82:bb:7e:78:14:
99:5b:9a:9a:c7:2e:e2:3a:30:30:1b:88:9a:36:86:b8:cb:dd:
51:d7:df:44:77:15:2e:4b:a5:00:58:b9:b2:98:da:f6:41:f3:
ca:62:bb:6d:f6:34:a1:43:3a:b0:1f:fa:6c:90:73:39:ae:21:
8d:dc:b6:9d:0c:16:ab:88:bd:e5:ec:fb:ce:cf:c7:89:eb:2b:
93:7f:bd:e0:1a:3d:81:02:a5:28:34:e7:a6:ac:16:3d:8a:57:
d9:c3:7d:24:56:a8:4f:ad:6f:e1:d9:21:2c:8e:c5:78:f6:fd:
31:f9:31:ec:a8:a8:91:fc:93:4b:0b:0a:f4:59:41:a4:a9:0c:
17:3b:49:8d:09:aa:c5:ec:24:a6:a1:ba:d3:5d:25:36:d0:de:
3a:0f:5d:56:7d:25:43:71:ad:3f:a9:7e:64:bf:d7:bb:a3:c1:
f9:c6:c4:98:c7:10:2f:78:3c:ad:25:3f:7a:52:0e:9d:95:1b:
cc:2b:4a:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:35:23 2025 by rpki-client