Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/053539-5394-4dd0-a20f-6e8718021ebe/1/JylySWYAzH8IhgSKon87nc0fc0A.roa
File: JylySWYAzH8IhgSKon87nc0fc0A.roa (raw, json)
Hash identifier: 5lolfd1GUWugkA5k6Ka/zMlA4+JsRGSpEPMdUl5fByg=
Subject key identifier: 27:29:72:49:66:00:CC:7F:08:86:04:8A:A2:7F:3B:9D:CD:1F:73:40
Certificate issuer: /CN=557b1cc5a4c0d9d09c399f5ab7193f7008a6f2b2
Certificate serial: 054E2276
Authority key identifier: 55:7B:1C:C5:A4:C0:D9:D0:9C:39:9F:5A:B7:19:3F:70:08:A6:F2:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXscxaTA2dCcOZ9atxk_cAim8rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/053539-5394-4dd0-a20f-6e8718021ebe/1/JylySWYAzH8IhgSKon87nc0fc0A.roa
Signing time: Tue 22 Feb 2022 21:09:28 +0000
ROA not before: Tue 22 Feb 2022 21:09:28 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 49981
IP address blocks: 91.239.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89006710 (0x54e2276)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b1cc5a4c0d9d09c399f5ab7193f7008a6f2b2
Validity
Not Before: Feb 22 21:09:28 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=272972496600cc7f0886048aa27f3b9dcd1f7340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d7:05:ed:71:d2:9a:6a:95:72:a7:ad:99:ed:
9e:ab:8c:69:77:b8:f1:bc:66:2d:3d:c6:ac:cf:e2:
eb:7b:43:a7:14:28:b6:0b:2f:1e:65:58:fc:52:b9:
e4:4e:4a:40:2d:e2:ff:65:4b:b5:52:d3:9e:bc:f5:
80:94:e7:75:da:d2:bd:9e:27:a7:6a:76:8e:92:86:
70:77:90:de:7e:b3:60:b8:09:01:d4:ce:23:db:27:
6c:72:e0:3f:70:69:ce:94:e5:39:72:1f:aa:fd:c2:
44:55:42:36:fb:44:26:93:29:70:b6:64:22:fa:da:
e2:70:02:9d:59:44:4e:18:2b:7c:c8:28:b0:e4:df:
66:9c:c3:05:7c:1e:79:14:75:b2:bd:41:1e:0c:33:
0b:4a:53:47:a5:6c:b6:5d:8f:0b:63:36:4a:e2:ac:
27:37:bb:34:5f:f7:69:95:3c:59:74:6d:e4:c6:e8:
34:e0:c2:98:99:77:6f:79:85:58:31:01:e2:5d:01:
83:c6:b5:e7:ee:58:d4:4b:1a:e5:e9:2f:2c:a8:4f:
3c:9c:a3:02:52:13:62:a7:9a:83:e0:7e:bc:6e:75:
94:83:84:e4:40:59:fc:7a:05:d4:5f:68:1b:60:56:
4e:91:ec:b4:63:27:f2:3a:a8:ed:3c:62:3a:62:60:
88:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:29:72:49:66:00:CC:7F:08:86:04:8A:A2:7F:3B:9D:CD:1F:73:40
X509v3 Authority Key Identifier:
keyid:55:7B:1C:C5:A4:C0:D9:D0:9C:39:9F:5A:B7:19:3F:70:08:A6:F2:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXscxaTA2dCcOZ9atxk_cAim8rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/053539-5394-4dd0-a20f-6e8718021ebe/1/JylySWYAzH8IhgSKon87nc0fc0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/053539-5394-4dd0-a20f-6e8718021ebe/1/VXscxaTA2dCcOZ9atxk_cAim8rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.227.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:ee:35:60:11:b9:54:a4:ec:59:09:18:cc:84:85:27:58:ad:
d8:79:b6:e4:fc:e6:cb:2e:d3:c8:8d:07:78:cf:1c:fc:6a:e5:
a6:ac:38:a5:2e:9d:4c:76:be:65:ae:59:33:06:e5:c9:d3:7d:
0c:09:7a:94:a7:f0:0f:08:86:52:f7:66:3c:f0:52:fc:91:1f:
4d:20:fc:e5:d9:72:95:fd:4f:2b:58:7f:f6:c8:05:a2:6c:f4:
09:67:f2:c1:77:ae:e3:07:6f:3d:64:5c:b4:1d:ad:6f:1f:be:
c2:4c:c5:a0:ac:11:18:2f:5e:62:4c:15:76:81:8f:51:46:83:
8d:29:09:65:db:f7:df:62:68:3e:6a:8a:d4:84:d3:99:39:e9:
0b:54:78:e2:dd:2c:b1:6d:66:e1:1f:b4:1b:12:7e:d9:40:31:
3f:13:fc:e2:57:a6:c2:a6:a6:21:e0:6b:1c:1e:c0:19:77:87:
30:69:aa:0c:0d:66:d7:71:32:88:3b:ad:b8:f0:f9:65:47:10:
6e:78:9b:e0:f3:17:cd:d0:6b:23:5f:c4:f1:d9:0c:3b:84:b2:
d0:e7:9d:84:d3:fd:2a:9a:0b:e5:68:51:c4:d4:22:69:df:d2:
cf:41:7f:49:ea:63:05:2d:8c:ff:33:f3:2a:d5:0b:02:fb:e1:
74:89:e2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:10:08 2025 by rpki-client