Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/053539-5394-4dd0-a20f-6e8718021ebe/1/U9_vf4gTwBafELeTmgxsuIrzn8A.roa
File: U9_vf4gTwBafELeTmgxsuIrzn8A.roa (raw, json)
Hash identifier: 1kKw+721jZlgRPwtZDQnTV0oSqsvPRcsaccPyUOe2J4=
Subject key identifier: 53:DF:EF:7F:88:13:C0:16:9F:10:B7:93:9A:0C:6C:B8:8A:F3:9F:C0
Certificate issuer: /CN=557b1cc5a4c0d9d09c399f5ab7193f7008a6f2b2
Certificate serial: 05601B93
Authority key identifier: 55:7B:1C:C5:A4:C0:D9:D0:9C:39:9F:5A:B7:19:3F:70:08:A6:F2:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXscxaTA2dCcOZ9atxk_cAim8rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/053539-5394-4dd0-a20f-6e8718021ebe/1/U9_vf4gTwBafELeTmgxsuIrzn8A.roa
Signing time: Mon 28 Feb 2022 11:21:00 +0000
ROA not before: Mon 28 Feb 2022 11:21:00 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 206766
IP address blocks: 91.239.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90184595 (0x5601b93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b1cc5a4c0d9d09c399f5ab7193f7008a6f2b2
Validity
Not Before: Feb 28 11:21:00 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=53dfef7f8813c0169f10b7939a0c6cb88af39fc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:ba:95:02:71:20:8a:95:d8:14:52:c7:06:9f:
00:4f:89:71:09:b9:5f:40:e4:f2:58:30:a8:9c:4b:
ae:1c:9e:1d:cc:50:40:5e:4f:b6:97:9a:f5:cc:0e:
a0:8e:7d:0d:74:93:40:fe:d2:0f:65:ef:72:22:fd:
38:9e:51:27:9a:f6:27:a2:2e:8c:80:1e:68:80:e6:
ec:df:e2:56:3b:bc:41:96:2d:77:2d:6d:3a:ad:e0:
6b:73:2a:35:d3:73:db:ec:49:56:c0:e0:83:07:1a:
df:b8:78:70:7a:6e:67:b8:94:50:a8:45:3c:24:7d:
0f:e2:91:14:c4:b3:58:ba:fb:26:79:52:0e:75:4d:
2d:54:cc:ae:19:59:80:a1:2f:c6:ec:0b:4f:83:3e:
52:dd:7c:bf:72:0e:71:f7:5a:d2:5a:85:0f:c2:f7:
ba:d3:bc:52:ba:6e:9a:14:fd:79:8f:b7:c4:bd:27:
6c:b4:db:6d:51:5b:9e:52:bd:02:b5:e1:f5:86:d4:
2a:23:f0:4b:04:7e:87:36:51:43:6b:33:e4:6f:78:
bb:8f:f7:82:2b:85:ab:9e:b4:79:28:f1:bc:09:aa:
83:ef:6e:a8:7c:af:03:01:e6:91:cc:16:e7:e1:b2:
2a:01:65:da:d8:5b:59:9c:70:b7:c7:dd:5f:54:60:
92:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:DF:EF:7F:88:13:C0:16:9F:10:B7:93:9A:0C:6C:B8:8A:F3:9F:C0
X509v3 Authority Key Identifier:
keyid:55:7B:1C:C5:A4:C0:D9:D0:9C:39:9F:5A:B7:19:3F:70:08:A6:F2:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXscxaTA2dCcOZ9atxk_cAim8rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/053539-5394-4dd0-a20f-6e8718021ebe/1/U9_vf4gTwBafELeTmgxsuIrzn8A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/053539-5394-4dd0-a20f-6e8718021ebe/1/VXscxaTA2dCcOZ9atxk_cAim8rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.227.0/24
Signature Algorithm: sha256WithRSAEncryption
d2:06:08:f2:7b:0f:5d:95:cb:f0:41:3c:2a:fa:b8:43:2c:61:
ee:00:34:f2:ad:40:da:b8:44:95:f7:8c:09:05:1d:f2:4f:32:
2d:5c:2c:07:e2:54:38:f2:7d:fb:fb:69:9b:88:81:9a:35:e5:
6c:77:3c:88:8c:de:7a:ee:fe:7a:9e:95:bb:4a:e9:50:15:c1:
60:d7:07:75:e7:a6:d7:d9:24:f7:c2:07:1a:21:29:b1:52:7b:
99:c2:07:ad:16:95:bd:7b:b7:96:c7:e9:7a:f9:50:89:2f:44:
32:28:4c:ca:db:2c:ea:3b:3e:9b:8d:09:32:e2:a8:5b:8b:35:
ff:8b:4a:61:0a:f7:34:89:fb:80:37:62:1c:7c:ec:80:da:c7:
ec:d2:92:a4:e6:d8:ba:37:17:0e:24:a2:cb:69:17:f9:6b:08:
af:32:fc:7e:1a:98:09:2c:21:7e:ca:ad:90:6c:d6:fd:da:81:
7c:6b:ce:d2:c9:db:b2:3c:e8:10:56:b1:76:c0:ef:9d:47:05:
0a:fb:77:2b:63:16:b8:49:e7:1b:46:e0:f5:c1:a5:39:40:33:
6a:ac:83:7c:30:39:b0:64:12:5f:01:a6:07:65:6f:3a:ea:05:
bf:23:ba:2b:77:a7:ed:f2:16:0f:a6:1a:d0:1a:88:b4:fc:50:
2e:fe:40:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 17 08:16:15 2025 by rpki-client