Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/5JWwWMcuyVYOaM5wTK2AKc996ao.roa
File: 5JWwWMcuyVYOaM5wTK2AKc996ao.roa (raw, json)
Hash identifier: xjor4B9xYep/0UbImKPt4c2KMWlwoQQAJ1unLV0n+dY=
Subject key identifier: E4:95:B0:58:C7:2E:C9:56:0E:68:CE:70:4C:AD:80:29:CF:7D:E9:AA
Certificate issuer: /CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Certificate serial: 01942747A75DD39CABB9851DA582E7B37F08
Authority key identifier: 0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/5JWwWMcuyVYOaM5wTK2AKc996ao.roa
Signing time: Thu 02 Jan 2025 13:49:54 +0000
ROA not before: Thu 02 Jan 2025 13:49:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197537
IP address blocks: 91.232.99.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:a7:5d:d3:9c:ab:b9:85:1d:a5:82:e7:b3:7f:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b5f8c9447d614b86182763d9333250e2d9412e2
Validity
Not Before: Jan 2 13:49:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e495b058c72ec9560e68ce704cad8029cf7de9aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c4:97:a4:0f:66:14:0a:10:08:63:8a:76:74:
3d:5b:8b:7c:d4:e8:f7:20:78:60:33:5a:0a:17:47:
92:f2:a8:fb:7b:2d:70:e2:24:42:5f:7c:37:ee:94:
b9:1c:f7:b2:04:bd:2d:58:c9:28:47:a5:bf:e3:99:
37:bf:3e:22:4f:11:42:d0:ba:6f:ed:9f:7e:72:c5:
88:10:39:21:f0:27:4e:a0:5c:30:3a:79:17:e2:bb:
ff:7d:c8:38:45:cd:03:82:fc:40:0b:10:61:46:5d:
d6:86:bf:4a:4e:d0:ee:ed:2f:3e:da:c7:f9:a6:e0:
2d:9f:89:0d:e2:e9:fb:a1:08:f9:50:b4:0a:82:03:
c6:8d:ac:1d:a6:ca:26:f7:8f:61:2d:59:59:d1:b2:
f2:a8:62:16:e1:39:0b:b8:29:56:37:14:1a:a8:c6:
42:01:31:af:4a:5a:c4:57:32:a4:49:a7:1a:93:a1:
0f:ce:c8:34:92:8e:07:f5:82:cb:3f:a5:f5:84:30:
d7:b7:d8:5d:80:7e:30:43:97:f3:cb:bb:f8:f8:53:
79:02:c5:81:51:d3:18:06:6b:9b:fc:a8:1e:3c:2e:
51:15:c7:50:1d:4e:06:86:48:93:0f:66:24:79:a0:
1a:5c:86:19:87:7b:aa:b0:e5:47:6d:59:81:8f:1a:
e1:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:95:B0:58:C7:2E:C9:56:0E:68:CE:70:4C:AD:80:29:CF:7D:E9:AA
X509v3 Authority Key Identifier:
keyid:0B:5F:8C:94:47:D6:14:B8:61:82:76:3D:93:33:25:0E:2D:94:12:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1-MlEfWFLhhgnY9kzMlDi2UEuI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/5JWwWMcuyVYOaM5wTK2AKc996ao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f7f6c0-09d0-492c-92e6-8a95e6377332/1/C1-MlEfWFLhhgnY9kzMlDi2UEuI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.99.0/24
Signature Algorithm: sha256WithRSAEncryption
80:9f:ca:fb:f1:e9:7a:e7:b5:96:5e:94:b6:34:7c:09:65:97:
65:21:87:34:c6:1b:a4:82:bd:a1:65:37:d6:9c:f7:f7:f5:39:
46:b7:96:d0:90:b1:68:e2:83:7e:40:03:43:15:7c:62:ce:eb:
5b:53:4a:eb:15:ab:4f:b2:01:5e:10:a8:d6:ae:88:35:40:15:
2e:03:fc:08:64:55:1b:51:70:1f:0a:bb:c9:6f:8d:cf:f7:c3:
42:1d:e0:35:4b:c4:27:3d:b3:1e:28:1b:1c:83:a9:11:a1:93:
22:7b:52:75:ca:18:f5:7f:b2:52:34:df:eb:14:13:b7:44:b3:
09:3d:1f:77:5d:ca:53:af:06:aa:10:11:76:27:0b:1c:c4:fb:
67:39:dd:ff:60:c1:db:ab:d7:82:ed:bb:cd:9c:26:f2:01:08:
dd:cc:0a:4e:ea:2a:ad:16:71:3f:9a:8c:5e:79:81:29:78:7e:
e7:c5:94:d0:97:0b:cb:a9:5b:4a:45:c1:c4:48:11:95:47:57:
59:e0:1b:a6:d8:b7:68:90:71:7a:df:39:6c:95:e7:18:86:56:
39:d9:5c:d2:9a:53:9f:7f:6b:5b:84:3a:b5:43:8f:3f:39:c7:
b9:b3:f4:58:81:6a:02:26:73:b8:0b:a9:31:1e:51:7b:ea:6b:
f5:8a:1f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:24:55 2025 by rpki-client