Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/Sz4cgZk58K5KT8c6QEb0Ql3mAiY.roa
File: Sz4cgZk58K5KT8c6QEb0Ql3mAiY.roa (raw, json)
Hash identifier: XD1k9LSsxBfImI/ORmlcMWAQZfP4H0hZi+Dr1QtMaAI=
Subject key identifier: 4B:3E:1C:81:99:39:F0:AE:4A:4F:C7:3A:40:46:F4:42:5D:E6:02:26
Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial: 0194228D540C688B9E8477C314BCF094CE7C
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/Sz4cgZk58K5KT8c6QEb0Ql3mAiY.roa
Signing time: Wed 01 Jan 2025 15:47:54 +0000
ROA not before: Wed 01 Jan 2025 15:47:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57461
IP address blocks: 91.232.72.0/22 maxlen: 22
91.232.74.0/24 maxlen: 24
91.232.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:54:0c:68:8b:9e:84:77:c3:14:bc:f0:94:ce:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Validity
Not Before: Jan 1 15:47:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b3e1c819939f0ae4a4fc73a4046f4425de60226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c6:41:fb:b6:4f:e9:9f:39:eb:c3:f6:bf:e9:
e1:cc:0e:c7:b7:b2:21:c9:b4:1d:92:c0:80:20:b0:
ff:82:74:7b:b9:24:0f:66:9a:68:7a:a9:33:c0:72:
c4:a0:25:c2:29:d9:d8:b6:a8:a8:be:94:c9:66:76:
5f:a6:f6:8d:d2:09:cc:32:8e:03:17:bd:7f:f2:35:
40:a5:4f:68:d0:ae:03:c2:d9:2e:47:24:93:8c:e5:
09:7d:d9:71:fe:ec:46:21:2f:09:06:45:85:84:00:
0f:69:af:13:d8:d5:36:e4:01:98:ae:60:99:df:d9:
4b:16:75:18:7f:98:94:47:24:26:d0:f0:e4:50:43:
2c:5b:92:7d:97:db:17:70:bf:6a:c2:98:d4:c9:1b:
1d:33:17:2f:e4:f1:ad:51:d4:44:1e:26:30:7e:72:
b0:6a:fd:f7:05:f1:87:18:af:9b:68:a0:bf:64:0e:
40:ac:c9:7d:dd:24:d3:e1:11:2f:e8:8f:56:b7:b4:
06:45:43:63:26:75:60:55:49:ca:ec:15:c1:07:0a:
d2:52:6f:c6:79:73:c5:34:71:14:fd:61:46:b9:33:
d3:92:8e:ec:ae:0d:dc:d3:55:87:8b:3d:ee:bc:9d:
75:2b:16:9b:d2:11:f0:00:1e:73:82:48:51:82:8d:
44:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3E:1C:81:99:39:F0:AE:4A:4F:C7:3A:40:46:F4:42:5D:E6:02:26
X509v3 Authority Key Identifier:
keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/Sz4cgZk58K5KT8c6QEb0Ql3mAiY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.232.72.0/22
Signature Algorithm: sha256WithRSAEncryption
30:51:61:2a:a5:11:03:f4:28:81:9d:c3:a0:e3:69:4b:66:a8:
af:46:ce:00:07:94:94:7c:a5:a8:f4:6f:55:4a:aa:17:7d:e2:
80:3f:0e:79:21:58:e0:44:a1:9e:33:f5:ce:43:15:f7:03:81:
fd:e7:92:a5:a9:88:2b:e8:c3:07:bf:7e:5a:79:ca:37:40:30:
2c:ff:d5:52:5a:43:38:7b:74:e2:d3:96:78:7a:f1:0c:59:f5:
a2:a8:fd:6d:54:20:c2:a9:66:47:1c:26:3a:96:8c:fb:2d:e1:
a6:37:ac:18:92:b5:94:7b:c5:03:03:44:b6:9b:b2:6b:79:10:
4c:00:da:fe:bc:67:f8:c5:b0:20:f4:c9:f1:b1:e8:6c:81:41:
dc:9f:c5:ef:48:e2:ef:a1:7f:12:a6:70:4d:e8:f8:97:98:50:
2e:c3:15:70:7d:45:50:39:eb:85:0f:79:53:1b:e0:01:21:4a:
a4:52:ee:25:93:e3:cd:73:54:dc:25:77:ff:8f:35:b7:55:5e:
a3:b9:19:68:e6:17:dd:fb:0d:78:f7:f9:2b:3a:72:ac:46:c3:
97:a6:16:d5:a9:a1:5a:db:50:27:30:24:94:94:eb:1e:0d:51:
43:c6:06:12:c3:10:ae:ec:21:63:7f:be:0b:2f:e6:2e:1c:8f:
29:b6:4c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:05:39 2025 by rpki-client