Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/053539-5394-4dd0-a20f-6e8718021ebe/1/V4l7eDYtjvO4vpxHHqeXGviDn_Q.roa
File: V4l7eDYtjvO4vpxHHqeXGviDn_Q.roa (raw, json)
Hash identifier: Xuk3XyJtWiNrMrR1oXFWmAIKe8WAbqOT+ijQsJzIOWE=
Subject key identifier: 57:89:7B:78:36:2D:8E:F3:B8:BE:9C:47:1E:A7:97:1A:F8:83:9F:F4
Certificate issuer: /CN=557b1cc5a4c0d9d09c399f5ab7193f7008a6f2b2
Certificate serial: 04D2CF7F
Authority key identifier: 55:7B:1C:C5:A4:C0:D9:D0:9C:39:9F:5A:B7:19:3F:70:08:A6:F2:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXscxaTA2dCcOZ9atxk_cAim8rI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/053539-5394-4dd0-a20f-6e8718021ebe/1/V4l7eDYtjvO4vpxHHqeXGviDn_Q.roa
Signing time: Sat 01 Jan 2022 04:57:24 +0000
ROA not before: Sat 01 Jan 2022 04:57:24 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48031
IP address blocks: 91.239.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 80924543 (0x4d2cf7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b1cc5a4c0d9d09c399f5ab7193f7008a6f2b2
Validity
Not Before: Jan 1 04:57:24 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=57897b78362d8ef3b8be9c471ea7971af8839ff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f5:d4:36:47:1d:74:99:bd:04:87:6f:d8:8e:
a6:41:37:07:e3:58:29:6f:cc:02:9d:9f:4f:c6:5e:
c4:49:a9:7c:1b:16:7d:91:75:de:d4:5d:b5:70:d6:
17:35:9f:0a:7c:9c:c2:9f:68:bb:a9:4d:fa:1b:bb:
6c:e9:b4:e6:1d:86:7f:f4:46:2a:cb:a4:21:ad:9c:
a1:55:d4:4d:01:af:c2:69:94:c8:bc:9f:ee:e5:21:
ec:de:76:b7:28:b8:ae:bd:69:da:f4:08:0a:ad:ce:
d6:5d:25:71:6f:0b:91:0c:5f:1a:ee:be:2a:37:b4:
c2:7b:4a:fc:c5:ff:13:4d:7f:98:7a:4d:0b:21:f7:
21:d0:79:66:3c:44:8d:68:1b:0e:43:9f:b3:db:28:
6f:40:04:15:26:c7:ab:6c:f5:10:20:8a:db:d5:0b:
31:bf:35:31:c0:25:40:8d:18:41:73:2b:e7:67:25:
39:ef:db:36:0e:b2:67:d4:44:25:0f:9b:5a:f8:5b:
83:fd:06:01:b2:c3:5b:04:c7:f5:57:cc:30:bd:48:
a8:e9:0a:bf:db:c1:e2:f7:a8:3c:8a:01:18:cc:86:
dd:18:1e:fb:44:56:88:d8:5b:0a:5f:ca:a1:a7:f0:
e2:5b:3e:68:2f:29:38:93:84:94:d7:26:40:b7:3d:
e6:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:89:7B:78:36:2D:8E:F3:B8:BE:9C:47:1E:A7:97:1A:F8:83:9F:F4
X509v3 Authority Key Identifier:
keyid:55:7B:1C:C5:A4:C0:D9:D0:9C:39:9F:5A:B7:19:3F:70:08:A6:F2:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXscxaTA2dCcOZ9atxk_cAim8rI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/053539-5394-4dd0-a20f-6e8718021ebe/1/V4l7eDYtjvO4vpxHHqeXGviDn_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/053539-5394-4dd0-a20f-6e8718021ebe/1/VXscxaTA2dCcOZ9atxk_cAim8rI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.238.0/24
Signature Algorithm: sha256WithRSAEncryption
74:30:14:b8:f7:92:c4:4e:64:46:51:f4:be:90:e5:70:91:b4:
2c:82:86:b5:a2:6c:b7:f5:d2:c4:c3:dc:eb:ba:4c:5f:b2:42:
60:da:39:73:60:b3:bc:21:2b:03:1a:54:45:42:3e:e4:37:24:
78:b8:98:69:03:76:7e:74:1f:fe:fe:f2:51:45:da:8c:db:05:
d8:12:31:1b:b3:b4:b2:7c:ba:c4:37:f4:36:00:79:ab:aa:d1:
a2:51:b7:d1:05:7a:d0:cb:ab:20:42:01:5f:a9:ab:cf:66:bc:
b9:ee:58:de:00:b2:0a:33:c2:6e:2b:9e:0e:e8:6c:80:e6:2b:
9f:36:bc:2a:a1:70:b5:ef:0f:38:24:15:f9:36:42:4d:7d:56:
8e:54:c2:86:e4:a0:79:bc:d0:11:1b:8e:b8:58:db:19:22:48:
4b:51:4b:c9:14:1a:de:30:e7:c3:b8:f1:99:26:83:09:6c:4c:
38:90:bf:0e:bc:0a:29:6c:df:51:55:db:56:91:82:92:03:a7:
d2:ce:91:83:ed:68:f6:0e:94:9d:c6:92:67:7f:5e:9c:f3:f2:
06:e1:02:a3:04:ab:f2:08:78:92:ca:cd:ca:ba:cd:59:0c:ff:
49:a5:52:23:f4:e8:d4:74:13:1d:0f:7c:d9:0b:51:10:f8:f3:
8a:1c:f3:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 20:18:29 2025 by rpki-client