Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ccbc52-e094-4e15-b672-71a4c6f9c887/1/sSix--uOGsvAlXdO-ymgzqqxsBU.roa
File: sSix--uOGsvAlXdO-ymgzqqxsBU.roa (raw, json)
Hash identifier: 80tR7DZleWpMpgFdORhYaxchmN6G6RUg/oVb2WVbqek=
Subject key identifier: B1:28:B1:FB:EB:8E:1A:CB:C0:95:77:4E:FB:29:A0:CE:AA:B1:B0:15
Certificate issuer: /CN=3269cc291ba260fc71118684e7b302f50ce9628d
Certificate serial: 06DC4263
Authority key identifier: 32:69:CC:29:1B:A2:60:FC:71:11:86:84:E7:B3:02:F5:0C:E9:62:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmnMKRuiYPxxEYaE57MC9QzpYo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ccbc52-e094-4e15-b672-71a4c6f9c887/1/sSix--uOGsvAlXdO-ymgzqqxsBU.roa
Signing time: Sat 01 Jan 2022 10:57:44 +0000
ROA not before: Sat 01 Jan 2022 10:57:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 57967
IP address blocks: 91.237.90.0/24 maxlen: 24
2001:67c:2794::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 115098211 (0x6dc4263)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3269cc291ba260fc71118684e7b302f50ce9628d
Validity
Not Before: Jan 1 10:57:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b128b1fbeb8e1acbc095774efb29a0ceaab1b015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2d:2f:60:e3:11:cd:a6:62:95:ac:60:bc:c3:
77:c2:b6:4c:3a:1f:16:3b:3d:3b:04:60:ea:38:6f:
a8:d8:c9:fa:c8:06:3d:7e:ad:17:05:72:d6:91:77:
57:02:01:55:0e:ba:32:cb:9a:e5:c9:10:e9:1f:c3:
7e:a6:b3:a7:d9:4e:40:0f:60:a0:67:08:d8:b2:d3:
6a:9e:92:01:03:3f:78:8e:04:87:e9:a4:d4:29:d8:
72:0e:2d:98:33:b3:a8:a8:69:f3:06:d6:6b:3b:80:
e3:3d:fa:90:68:dc:5f:26:3d:58:97:b7:59:ae:4a:
1f:e2:79:c3:c5:3a:01:61:1c:41:ea:d4:e2:75:34:
15:35:79:f9:c5:b3:29:94:87:40:81:fd:bb:a3:56:
9c:aa:fd:1d:f5:d4:e0:cc:22:8f:9f:68:c8:7e:c7:
30:42:fc:d2:b9:ca:b2:86:00:69:f1:db:6c:10:30:
68:0e:8e:1a:27:5e:16:24:20:b4:bb:a8:16:0a:66:
d9:75:b7:55:f4:ed:77:7d:75:02:ce:23:f7:45:4b:
01:bb:bc:1c:d2:91:08:fd:7d:9f:f8:5b:27:0d:0d:
34:bd:2a:0b:8e:19:eb:b8:20:4c:9f:6d:d0:97:ca:
bd:dc:e1:71:2e:68:c7:bd:18:08:5c:5c:9a:92:c8:
e7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:28:B1:FB:EB:8E:1A:CB:C0:95:77:4E:FB:29:A0:CE:AA:B1:B0:15
X509v3 Authority Key Identifier:
keyid:32:69:CC:29:1B:A2:60:FC:71:11:86:84:E7:B3:02:F5:0C:E9:62:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmnMKRuiYPxxEYaE57MC9QzpYo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccbc52-e094-4e15-b672-71a4c6f9c887/1/sSix--uOGsvAlXdO-ymgzqqxsBU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ccbc52-e094-4e15-b672-71a4c6f9c887/1/MmnMKRuiYPxxEYaE57MC9QzpYo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.90.0/24
IPv6:
2001:67c:2794::/48
Signature Algorithm: sha256WithRSAEncryption
42:f6:52:49:5c:3b:a9:47:21:a6:31:b7:59:b8:ba:6f:45:24:
f8:dc:4f:e0:71:51:9f:d2:1d:0c:29:37:9d:b9:58:23:ac:fd:
9e:fd:85:0a:4a:39:9d:36:30:91:6b:b4:06:99:b4:8a:56:f2:
26:c1:e1:5c:0d:00:de:26:fd:46:58:40:da:ba:5f:c7:f5:98:
01:17:e7:ff:55:8a:40:fd:fa:05:19:d0:3f:04:04:53:42:24:
0c:34:ce:de:f1:c4:f2:b5:50:8f:41:4f:3f:89:ff:4e:be:84:
9f:72:70:92:08:35:3f:11:22:3e:25:5e:43:3a:c8:4a:26:47:
39:8a:15:2b:91:c7:35:01:56:fd:d4:81:68:61:1a:59:55:92:
e2:1f:da:e4:ae:93:1e:c3:c6:43:53:1a:8a:ce:b8:a9:ca:c3:
f0:6b:74:a6:26:5a:d8:be:29:61:e9:71:89:88:15:4e:f2:e1:
85:d1:f5:66:bb:6d:7b:ef:db:3b:2a:7f:0d:32:bc:97:23:84:
c5:13:46:7b:35:fa:87:22:a7:28:78:b8:0e:b5:87:29:44:12:
0d:be:a4:6f:43:6b:93:2e:c9:91:e5:b9:d7:9b:18:2a:c7:5f:
3f:ce:f4:2c:84:74:6b:5d:cf:e2:88:b6:dc:f9:52:24:c0:1c:
a5:35:df:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:53:08 2025 by rpki-client