Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/053539-5394-4dd0-a20f-6e8718021ebe/1/5Xy0pK7pfkRE4hL0wYclT_P6qXE.roa
File: 5Xy0pK7pfkRE4hL0wYclT_P6qXE.roa (raw, json)
Hash identifier: /MMBOqL7letUXGUZyHJ8pU5StTaEjkn0zLt/PhCsduk=
Subject key identifier: E5:7C:B4:A4:AE:E9:7E:44:44:E2:12:F4:C1:87:25:4F:F3:FA:A9:71
Certificate issuer: /CN=557b1cc5a4c0d9d09c399f5ab7193f7008a6f2b2
Certificate serial: 04D2667C
Authority key identifier: 55:7B:1C:C5:A4:C0:D9:D0:9C:39:9F:5A:B7:19:3F:70:08:A6:F2:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXscxaTA2dCcOZ9atxk_cAim8rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/053539-5394-4dd0-a20f-6e8718021ebe/1/5Xy0pK7pfkRE4hL0wYclT_P6qXE.roa
Signing time: Sat 01 Jan 2022 04:57:23 +0000
ROA not before: Sat 01 Jan 2022 04:57:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 36829
IP address blocks: 91.239.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80897660 (0x4d2667c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b1cc5a4c0d9d09c399f5ab7193f7008a6f2b2
Validity
Not Before: Jan 1 04:57:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e57cb4a4aee97e4444e212f4c187254ff3faa971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:c0:2f:0c:0f:94:83:09:a4:2f:48:6c:a5:ac:
58:41:57:e6:d7:25:15:51:03:58:8f:4f:c2:64:b0:
29:21:d3:91:9a:ee:cb:b4:c1:60:6d:20:c7:9d:d9:
67:8d:83:ef:ac:c1:d4:44:a3:01:03:8f:ff:92:05:
b8:26:59:6d:e8:14:f4:0d:75:90:e0:44:d8:91:5f:
f1:cf:48:ca:df:fb:76:17:f2:21:a2:a7:59:fe:75:
29:21:17:5d:f6:6c:1c:ee:c2:ec:40:33:d8:63:40:
3b:b4:27:87:43:f3:57:ad:d7:33:c6:0d:69:70:4e:
19:e8:e6:a5:0e:bc:79:f9:9d:9b:f3:67:07:0b:33:
5e:7d:93:76:22:04:39:53:15:95:42:f5:5a:58:9a:
29:59:3a:69:ab:f6:92:e1:16:01:19:0a:34:51:6e:
93:26:cf:63:6b:fc:83:79:9d:ac:05:e0:13:45:cd:
35:11:a5:82:cd:64:4c:76:b4:34:d6:a5:78:10:7b:
38:1a:17:ee:ba:1a:16:15:98:8a:c2:88:14:ea:7a:
83:c7:c1:98:32:c8:13:ec:99:58:1e:08:32:76:49:
59:83:9a:2a:52:b5:30:67:8c:1b:67:a3:2b:35:b2:
10:09:e7:10:6f:24:d9:bc:49:23:fb:1c:8b:c5:e0:
b5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:7C:B4:A4:AE:E9:7E:44:44:E2:12:F4:C1:87:25:4F:F3:FA:A9:71
X509v3 Authority Key Identifier:
keyid:55:7B:1C:C5:A4:C0:D9:D0:9C:39:9F:5A:B7:19:3F:70:08:A6:F2:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXscxaTA2dCcOZ9atxk_cAim8rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/053539-5394-4dd0-a20f-6e8718021ebe/1/5Xy0pK7pfkRE4hL0wYclT_P6qXE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/053539-5394-4dd0-a20f-6e8718021ebe/1/VXscxaTA2dCcOZ9atxk_cAim8rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.227.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:d9:db:26:6e:b6:7a:6f:3f:5e:5e:b5:46:99:5f:1b:ad:ae:
72:db:1d:1a:e4:cd:14:80:9c:5a:4b:1e:e3:1f:6b:c9:a8:8d:
08:94:48:d5:61:fe:d1:21:1f:6e:04:7d:eb:28:a3:5b:2a:bc:
a0:5c:98:2f:26:2d:12:0e:61:ea:7f:a9:7b:b0:50:ef:d3:8d:
43:c5:20:fd:63:e0:7a:d7:cd:78:ca:02:75:57:2c:9e:df:d2:
4b:89:62:f6:eb:e9:60:7f:5b:08:7d:72:0c:4e:8d:ab:57:1a:
b7:75:bb:dd:51:d7:98:3e:81:61:65:d4:cf:47:c5:89:e6:3b:
f8:f6:88:9a:b6:57:0a:6b:46:59:bf:7b:53:6e:07:16:eb:84:
45:12:7f:91:05:3c:ca:d6:5c:ce:70:99:be:f7:6b:56:23:71:
c1:59:f8:e1:4f:94:7a:a8:88:d0:e9:24:f4:4b:5e:e1:6e:60:
2e:99:28:e3:24:7b:01:3a:b7:82:4b:24:cf:8d:93:fa:8c:56:
6c:f2:66:38:b9:61:d5:0a:68:18:f5:03:47:65:db:93:b3:58:
cb:5e:83:76:9e:3e:20:d6:ed:26:11:c6:ae:c2:53:4f:49:16:
40:cb:33:59:73:d8:a1:bd:95:36:f2:05:bb:e9:b2:a7:1a:31:
4f:6f:45:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:17:54 2025 by rpki-client