Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/XVcT52glVeeFGI6UWOtAoP5041U.roa
File: XVcT52glVeeFGI6UWOtAoP5041U.roa (raw, json)
Hash identifier: TXN2SP1KSqWyVtfiuPEthGKpXBmOC+nNVGae8+1hhsA=
Subject key identifier: 5D:57:13:E7:68:25:55:E7:85:18:8E:94:58:EB:40:A0:FE:74:E3:55
Certificate issuer: /CN=764f8daadf1d775d59d1502b573901b875513b56
Certificate serial: 09193ECF
Authority key identifier: 76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/XVcT52glVeeFGI6UWOtAoP5041U.roa
Signing time: Wed 29 Jun 2022 13:29:03 +0000
ROA not before: Wed 29 Jun 2022 13:29:03 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3214
IP address blocks: 91.193.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 152649423 (0x9193ecf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=764f8daadf1d775d59d1502b573901b875513b56
Validity
Not Before: Jun 29 13:29:03 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=5d5713e7682555e785188e9458eb40a0fe74e355
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:32:4a:fa:92:58:97:4f:a1:d6:51:34:f0:d3:
af:88:bb:91:87:49:ac:72:b6:1e:6e:db:65:bc:d6:
b3:99:7b:c3:db:80:3a:42:8f:c2:24:dd:38:d0:35:
05:5d:0d:a2:e0:94:53:bf:73:7f:45:b0:35:16:df:
e2:27:8c:c6:fb:17:16:82:61:79:1e:ee:36:c3:6d:
77:11:33:3a:a7:86:20:16:a6:ce:f4:20:04:d2:88:
0c:83:1e:f1:08:de:d3:fa:5e:8c:29:b9:1e:29:66:
af:76:6e:0f:21:b5:3f:26:21:02:1a:85:fe:e4:11:
5c:3d:ac:11:85:02:f3:6b:b7:5b:6d:38:68:84:92:
38:b9:8a:83:c0:a0:32:b0:7a:db:db:7b:0c:5b:d8:
fe:ee:35:40:19:a7:cf:a3:1a:50:ed:b4:2f:4d:bc:
82:0b:0a:e9:0f:dc:70:41:33:c5:53:2a:7e:f4:02:
3f:95:b9:b1:3e:0c:49:be:fd:51:88:77:aa:53:fb:
dc:0d:f2:47:9a:8a:72:f6:df:e2:6c:ed:0c:76:c7:
19:f8:c6:6a:7d:5a:aa:ba:8e:22:b2:5d:8a:02:47:
26:34:72:88:14:c7:5a:bd:9e:95:dd:97:5f:e3:0b:
02:7e:5d:02:d8:17:b9:c6:3b:ab:0e:6a:be:1b:a2:
f6:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:57:13:E7:68:25:55:E7:85:18:8E:94:58:EB:40:A0:FE:74:E3:55
X509v3 Authority Key Identifier:
keyid:76:4F:8D:AA:DF:1D:77:5D:59:D1:50:2B:57:39:01:B8:75:51:3B:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/XVcT52glVeeFGI6UWOtAoP5041U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/7b92bf-011b-44a7-8382-bfb2b8815e49/1/dk-Nqt8dd11Z0VArVzkBuHVRO1Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.75.0/24
Signature Algorithm: sha256WithRSAEncryption
62:48:1c:8e:5a:a2:d5:53:c3:98:73:a9:b8:50:56:3d:3d:08:
0e:70:3b:7c:bb:da:77:37:f5:55:58:6a:3c:9c:eb:78:4a:a0:
60:78:4d:88:c6:b1:3e:ae:13:fb:82:35:b3:f9:84:97:74:99:
2e:e5:aa:3c:3f:27:9b:2c:f6:6f:31:9e:01:ac:a4:84:04:c6:
f4:bd:47:e4:16:23:15:b0:c7:3b:92:c2:9f:1b:cf:c4:b6:40:
71:b4:0e:7e:02:2a:b3:c7:7d:e5:2e:47:ca:d0:24:90:18:3d:
f2:c5:6d:6e:ac:71:4a:68:67:59:a9:58:ac:c2:9e:45:27:88:
c3:97:ba:2f:c2:49:0a:1f:1f:27:f4:eb:5f:da:a2:19:7c:4a:
ad:2f:c2:f0:00:4f:e5:48:5d:f9:d4:5c:be:d8:10:a9:5a:3f:
5c:51:6b:0a:16:b2:c5:8b:fd:6d:cb:55:60:ea:69:8c:f9:92:
55:f8:94:83:3e:35:f3:eb:4c:c3:f8:bb:cb:3a:dc:44:08:f2:
26:81:cc:52:90:d0:0f:2c:61:7b:88:7b:27:85:e3:33:ca:36:
7e:7e:a1:f4:6c:21:b9:cd:17:90:46:00:76:ba:2c:2c:d3:62:
a1:92:05:d0:13:e3:83:0a:6b:46:ce:93:16:8b:42:a8:27:47:
46:49:89:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:07:19 2025 by rpki-client