Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/053539-5394-4dd0-a20f-6e8718021ebe/1/JL9P0-zsCdu2uZxlygUXW9us4d8.roa
File: JL9P0-zsCdu2uZxlygUXW9us4d8.roa (raw, json)
Hash identifier: K5z4+kUKXmSW14lxEuXB9FWfi4xREzcVryjjQdyWx0c=
Subject key identifier: 24:BF:4F:D3:EC:EC:09:DB:B6:B9:9C:65:CA:05:17:5B:DB:AC:E1:DF
Certificate issuer: /CN=557b1cc5a4c0d9d09c399f5ab7193f7008a6f2b2
Certificate serial: 04D97102
Authority key identifier: 55:7B:1C:C5:A4:C0:D9:D0:9C:39:9F:5A:B7:19:3F:70:08:A6:F2:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXscxaTA2dCcOZ9atxk_cAim8rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/053539-5394-4dd0-a20f-6e8718021ebe/1/JL9P0-zsCdu2uZxlygUXW9us4d8.roa
Signing time: Mon 03 Jan 2022 14:20:36 +0000
ROA not before: Mon 03 Jan 2022 14:20:36 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50790
IP address blocks: 91.240.33.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81359106 (0x4d97102)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b1cc5a4c0d9d09c399f5ab7193f7008a6f2b2
Validity
Not Before: Jan 3 14:20:36 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=24bf4fd3ecec09dbb6b99c65ca05175bdbace1df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:36:2b:05:5d:fb:02:c9:66:58:b6:e7:99:d0:
a7:70:d7:05:a8:1c:a7:da:98:9f:03:e6:f4:f6:77:
54:70:f0:32:cf:75:9f:21:e3:a8:75:f3:dd:af:31:
3a:4f:f1:81:2b:97:fb:17:1b:03:d5:6b:ea:10:1e:
37:6c:8f:8f:b3:64:30:4f:8f:11:dd:f6:fd:76:e9:
f4:39:e4:96:ec:d2:b6:ea:41:a6:99:48:70:b2:cb:
21:16:14:cc:91:0f:c3:30:22:ec:30:be:73:48:08:
91:7f:2e:7e:5a:4e:a9:cd:6e:07:bd:29:17:ec:c6:
fb:77:5a:49:30:32:e8:a7:90:7b:fb:43:6f:ff:f4:
97:fc:25:d7:82:1f:e9:dc:cd:bf:ec:dd:83:36:a3:
1d:e2:21:25:75:0e:de:80:20:24:c9:60:16:22:d9:
af:36:f9:3b:b1:5c:28:56:af:85:68:c2:5a:ba:b8:
97:3d:4e:0f:c3:79:61:3d:cc:86:0c:d0:f2:28:61:
9c:88:8b:4d:ee:bb:86:0e:d4:44:df:bd:64:bc:64:
c5:c8:10:d2:d6:f0:90:f7:21:f2:6b:90:dd:ca:87:
c1:a9:ff:20:82:49:fe:cd:56:d0:82:06:8b:d6:ed:
b3:66:99:36:5a:cb:84:7a:8e:99:4a:71:95:3b:c2:
31:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BF:4F:D3:EC:EC:09:DB:B6:B9:9C:65:CA:05:17:5B:DB:AC:E1:DF
X509v3 Authority Key Identifier:
keyid:55:7B:1C:C5:A4:C0:D9:D0:9C:39:9F:5A:B7:19:3F:70:08:A6:F2:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXscxaTA2dCcOZ9atxk_cAim8rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/053539-5394-4dd0-a20f-6e8718021ebe/1/JL9P0-zsCdu2uZxlygUXW9us4d8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/053539-5394-4dd0-a20f-6e8718021ebe/1/VXscxaTA2dCcOZ9atxk_cAim8rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.33.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:54:3d:10:c3:36:08:f3:01:a9:64:c1:2a:d2:fe:90:74:75:
20:da:58:71:03:93:b1:7c:3d:89:62:fa:c6:2a:7a:c9:18:cd:
54:0e:51:9b:1c:16:1f:9e:d6:e8:c4:09:45:c3:f9:5f:59:70:
e3:f1:84:64:c5:3f:4e:a6:97:08:c0:b1:2d:0c:c8:41:65:a0:
42:ad:51:ca:54:50:f5:18:e3:8d:91:ca:5b:c1:24:0d:0d:4f:
df:b7:91:ae:cd:6f:8a:30:28:1c:f7:39:1a:d1:1f:73:ec:68:
d7:60:1c:5a:ad:22:32:89:a0:83:7d:bd:94:47:a8:20:19:9c:
c7:f0:49:26:7f:96:ed:02:47:b5:56:ec:d5:76:70:46:47:63:
6f:57:28:d3:41:52:cc:a7:4a:f3:1d:e7:76:f0:6e:e8:f8:e1:
e3:5a:75:82:ca:5e:9f:2e:68:45:9d:df:99:33:b0:a3:c3:3e:
db:32:8b:d6:da:b8:c5:62:9a:c2:7f:78:93:cd:71:09:35:78:
91:43:96:c8:1b:77:3a:bc:6a:b2:7e:19:fa:90:1c:fd:76:b0:
e9:18:27:1f:aa:94:6d:e3:fd:99:4e:a7:6d:32:0e:17:c4:f2:
60:0a:bf:5e:42:d4:a2:77:14:d5:7b:74:d7:e2:dc:a0:57:00:
1a:8a:fa:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 22:34:51 2025 by rpki-client