Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/RZXIs4f4losh_NRNWSiINml7guQ.roa
File: RZXIs4f4losh_NRNWSiINml7guQ.roa (raw, json)
Hash identifier: wfrUUqnVV1noi4VIhSwTN+c+AGJyRaUQPQbGLw8dzqs=
Subject key identifier: 45:95:C8:B3:87:F8:96:8B:21:FC:D4:4D:59:28:88:36:69:7B:82:E4
Certificate issuer: /CN=819901b64fe22656b8f2db260b453f279352b7d0
Certificate serial: 019424B375140101A1DFF561588D81C6A52F
Authority key identifier: 81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/RZXIs4f4losh_NRNWSiINml7guQ.roa
Signing time: Thu 02 Jan 2025 01:48:48 +0000
ROA not before: Thu 02 Jan 2025 01:48:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 50572
IP address blocks: 91.238.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:75:14:01:01:a1:df:f5:61:58:8d:81:c6:a5:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=819901b64fe22656b8f2db260b453f279352b7d0
Validity
Not Before: Jan 2 01:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4595c8b387f8968b21fcd44d59288836697b82e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:2d:72:50:8e:08:68:48:e7:f6:75:1a:cd:dc:
98:66:df:34:f2:70:f2:d7:95:d5:0d:65:15:b2:aa:
80:ea:fa:0e:5e:2f:23:51:0b:b4:c2:a7:22:f0:b0:
44:72:83:fe:57:db:20:26:ec:f8:93:47:3f:67:f9:
da:dd:c1:f1:c7:5a:57:62:fc:24:6f:ca:ee:8f:a0:
42:dd:f1:b6:ca:bd:5f:26:17:50:b5:06:f5:6f:5c:
3f:3b:77:a0:2f:b2:fd:54:49:eb:a3:12:b7:1c:67:
69:b3:ed:38:69:bf:43:57:d0:f2:9d:d9:96:7b:48:
06:c3:ee:5a:18:8f:4f:d8:bd:9f:5c:7b:86:1d:c1:
5d:20:83:e9:4a:a1:c7:a9:a7:08:da:60:13:f3:3b:
00:77:ad:ac:f0:c7:12:35:29:00:7d:7d:84:18:38:
95:8a:15:48:36:eb:e5:da:37:1b:fe:87:52:0d:03:
39:11:fa:bb:2f:fc:c7:5d:b5:4c:ff:ea:5b:74:75:
28:a8:21:8b:b8:11:54:01:64:88:32:cc:e1:88:fa:
f3:d4:2d:df:8f:5e:59:46:91:69:cb:76:d4:68:0e:
a6:e4:9e:ac:7d:ae:97:e8:2f:6f:71:27:2c:50:23:
e2:73:a6:8a:49:e5:1d:b2:e4:dc:da:97:8a:5e:fd:
b4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:95:C8:B3:87:F8:96:8B:21:FC:D4:4D:59:28:88:36:69:7B:82:E4
X509v3 Authority Key Identifier:
keyid:81:99:01:B6:4F:E2:26:56:B8:F2:DB:26:0B:45:3F:27:93:52:B7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gZkBtk_iJla48tsmC0U_J5NSt9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/RZXIs4f4losh_NRNWSiINml7guQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/227e6b-02e4-4108-8b33-63dd275300bc/1/gZkBtk_iJla48tsmC0U_J5NSt9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.51.0/24
Signature Algorithm: sha256WithRSAEncryption
52:11:b2:18:72:3d:c8:43:2f:29:9a:5a:10:e2:b1:06:66:9e:
94:0e:7d:88:74:b5:b8:56:bb:47:6f:83:7a:5e:14:ea:91:6a:
1a:c1:18:3d:4b:51:cc:c8:71:15:0d:17:08:38:fc:b1:70:9c:
23:c9:8a:44:c7:e0:6e:7c:09:12:76:70:54:ae:5f:7f:c4:4f:
18:68:84:08:75:e6:94:1b:3c:71:59:0c:4c:17:21:d5:e5:4f:
ce:e9:59:7b:28:b3:27:cd:1c:03:39:6b:62:5a:79:78:4d:c9:
be:ce:6c:72:d6:29:e6:d9:25:57:4a:f1:aa:26:88:89:ab:b0:
86:16:08:28:f5:9f:45:e6:f1:0f:9c:40:7a:cf:40:20:d8:ff:
1c:c4:8e:be:1b:14:b2:42:97:b6:79:8a:09:37:c9:04:2d:16:
03:23:0b:b4:7c:57:5d:8b:67:ca:75:b1:1c:da:b6:23:37:40:
25:84:91:b4:e3:90:6e:ac:8c:ff:e4:39:75:f1:4c:85:e7:e5:
35:4d:96:ee:bf:7f:5c:11:0d:ef:ce:e0:d1:e6:dc:77:19:57:
3b:de:45:f4:01:14:07:04:93:39:3b:b6:a6:fc:58:88:eb:9b:
cf:17:8c:b5:d9:89:c4:c0:c2:55:67:f7:b7:02:6a:90:4b:42:
8b:fd:6f:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 18:55:55 2025 by rpki-client