Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/4rfzAPYD8TL8Rrq0gUrllPrQ0BM.roa
File: 4rfzAPYD8TL8Rrq0gUrllPrQ0BM.roa (raw, json)
Hash identifier: GJX5Xttu8kOsXTjBZyXT13qFoiyf0WQB+GhM2B1HPyM=
Subject key identifier: E2:B7:F3:00:F6:03:F1:32:FC:46:BA:B4:81:4A:E5:94:FA:D0:D0:13
Certificate issuer: /CN=537b37656cd14d488a70512921875717a0d910b6
Certificate serial: 05F7B199
Authority key identifier: 53:7B:37:65:6C:D1:4D:48:8A:70:51:29:21:87:57:17:A0:D9:10:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3s3ZWzRTUiKcFEpIYdXF6DZELY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/4rfzAPYD8TL8Rrq0gUrllPrQ0BM.roa
Signing time: Sat 01 Jan 2022 11:00:57 +0000
ROA not before: Sat 01 Jan 2022 11:00:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.240.175.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100118937 (0x5f7b199)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=537b37656cd14d488a70512921875717a0d910b6
Validity
Not Before: Jan 1 11:00:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2b7f300f603f132fc46bab4814ae594fad0d013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:90:b5:ec:7c:d3:68:98:35:03:0e:c6:d9:85:
ac:a0:85:35:f7:e7:42:09:a4:47:ac:a2:c8:0b:a9:
9b:28:7f:33:57:d8:3c:ee:71:a7:16:46:08:d3:66:
d8:56:f2:e2:7c:5e:5a:06:69:1e:f2:79:be:f9:44:
a9:cf:f1:03:7c:5a:1a:8f:1a:cb:87:e4:41:6e:84:
07:00:64:ca:8d:31:46:0b:c3:92:2b:7c:1b:d3:ed:
74:5c:ea:48:2d:f5:7a:4b:bc:15:1b:93:27:f6:b6:
98:fa:d9:2f:6c:80:da:72:c7:82:8d:9a:a1:d0:73:
2c:ba:62:24:e2:b8:27:b0:91:26:cb:68:26:e6:60:
bf:8c:1c:96:71:1b:74:1b:e8:28:34:31:c0:89:c9:
46:f7:2e:9f:c5:76:fc:83:45:b1:f6:eb:ae:0f:34:
fa:fd:dc:56:87:8f:f0:91:1d:e4:f2:8a:5a:1f:4b:
e6:87:35:f0:b4:7d:d8:e6:6a:54:b5:7b:a9:61:ae:
f2:79:03:82:c2:e6:f9:e2:db:e4:f7:a2:6b:55:cc:
7b:da:6f:42:ae:a8:d7:a3:50:a0:ef:3c:3e:76:af:
bf:ef:fd:20:61:7f:96:87:e4:7f:82:b2:17:94:02:
07:2b:a6:04:46:6d:1e:f0:66:4c:6d:02:26:56:08:
65:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B7:F3:00:F6:03:F1:32:FC:46:BA:B4:81:4A:E5:94:FA:D0:D0:13
X509v3 Authority Key Identifier:
keyid:53:7B:37:65:6C:D1:4D:48:8A:70:51:29:21:87:57:17:A0:D9:10:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3s3ZWzRTUiKcFEpIYdXF6DZELY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/4rfzAPYD8TL8Rrq0gUrllPrQ0BM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/2727b5-4c93-49e7-b7ee-f9895bb85fb1/1/U3s3ZWzRTUiKcFEpIYdXF6DZELY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.175.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:9e:c7:fb:aa:f6:ef:3f:ce:31:44:1f:b5:0a:45:fc:95:20:
4a:3c:fc:a6:77:94:46:01:f1:98:cb:29:0e:c6:ef:5c:ef:01:
55:21:7d:de:ae:fc:26:92:a6:e1:43:f8:ee:c5:66:e1:0d:3f:
c9:cc:18:af:33:fe:07:19:40:ae:01:1e:94:61:79:17:ee:58:
37:e4:ef:d0:ee:83:30:f4:c9:9e:af:af:ab:ec:42:0b:ac:61:
5b:04:cc:94:27:7b:76:f0:f9:32:0a:ae:eb:44:c7:34:76:95:
88:24:bd:aa:09:b1:1c:d4:12:fd:26:ad:d6:ad:1b:96:ed:a6:
79:6b:4e:cd:45:96:6a:f0:10:77:f6:60:e0:76:50:76:a6:de:
c4:77:b5:46:ad:fb:cd:ec:d4:90:c5:51:4e:58:1d:70:fc:31:
ae:38:13:c2:0c:4b:c3:5b:c4:19:53:a5:19:10:bb:9c:51:91:
b0:c9:69:0f:9a:e2:18:a1:81:e8:47:cd:77:33:3f:78:2f:05:
45:74:86:3b:48:29:a9:f6:6a:ed:1a:39:f8:fa:1d:cf:f1:97:
7b:3c:56:ce:2d:77:cf:4d:47:92:72:5b:93:36:d4:11:41:2f:
fd:c6:fd:21:bb:d5:d7:1a:73:e8:70:f0:95:5b:bc:1d:2d:3d:
a8:f4:a8:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:12:50 2025 by rpki-client