Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/iRLaERPVRzV8PJ2a_5pZoHTAhfc.roa
File: iRLaERPVRzV8PJ2a_5pZoHTAhfc.roa (raw, json)
Hash identifier: MJRfnp4Z+bQNLko611lWRkdCj1xLm4ibkbl4u7vmmHY=
Subject key identifier: 89:12:DA:11:13:D5:47:35:7C:3C:9D:9A:FF:9A:59:A0:74:C0:85:F7
Certificate issuer: /CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Certificate serial: 019425FDAFFA7D23D76E09AF3D75EF5D09BF
Authority key identifier: 70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/iRLaERPVRzV8PJ2a_5pZoHTAhfc.roa
Signing time: Thu 02 Jan 2025 07:49:30 +0000
ROA not before: Thu 02 Jan 2025 07:49:30 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 137409
IP address blocks: 91.227.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:af:fa:7d:23:d7:6e:09:af:3d:75:ef:5d:09:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7001e422227fa44cc5cb95d2a9dcce0fa5b89c07
Validity
Not Before: Jan 2 07:49:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8912da1113d547357c3c9d9aff9a59a074c085f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:15:ff:49:b7:e1:16:a6:95:5d:27:4a:bb:89:
2a:25:55:56:2d:88:f2:05:14:45:9f:69:dd:95:d8:
89:25:f2:be:79:ef:61:0d:a7:28:52:af:f1:b1:c3:
7d:2d:0b:2d:aa:f8:c8:b5:a0:93:58:d7:da:53:90:
5b:05:98:7e:fe:25:d6:ea:c7:e0:9c:96:2e:a7:bc:
39:0b:b7:ff:32:c8:79:50:c1:19:42:96:fa:00:20:
b2:56:aa:db:6d:ca:0a:20:77:99:4c:5b:02:9f:b8:
20:89:b9:25:1b:36:29:07:38:97:3a:66:c5:e5:58:
50:75:5f:e8:a0:c8:9b:14:70:34:d7:07:9e:a2:cc:
13:bc:2b:86:bc:a3:5b:71:d7:2c:88:7d:84:b1:32:
6a:40:3d:5d:ad:7e:77:67:26:f0:b2:e3:38:01:9a:
23:e5:4f:37:67:8f:a9:27:59:bf:41:4f:91:04:74:
50:c1:f7:17:26:66:f2:18:1e:5d:62:55:58:98:95:
58:ac:cb:31:11:4b:21:8c:61:13:3c:41:26:f7:ef:
df:02:7e:79:29:72:3b:7d:41:d2:49:12:d5:c7:73:
c8:55:be:a2:1f:94:3b:f1:37:39:1b:1d:ac:62:e0:
e6:dc:2f:af:56:77:ac:7e:50:1e:98:7a:94:07:9c:
0b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:12:DA:11:13:D5:47:35:7C:3C:9D:9A:FF:9A:59:A0:74:C0:85:F7
X509v3 Authority Key Identifier:
keyid:70:01:E4:22:22:7F:A4:4C:C5:CB:95:D2:A9:DC:CE:0F:A5:B8:9C:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/iRLaERPVRzV8PJ2a_5pZoHTAhfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/992d03-883b-404d-887e-f2435d5cf37b/1/cAHkIiJ_pEzFy5XSqdzOD6W4nAc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.253.0/24
Signature Algorithm: sha256WithRSAEncryption
22:f4:a0:b6:7d:9e:20:94:8e:e5:86:39:df:65:b7:d2:80:68:
28:4c:c6:c3:a1:93:7f:a3:41:c1:cc:05:90:e7:09:a4:c6:70:
77:df:79:ac:6f:b2:70:96:a7:d4:41:b5:f8:75:d3:7f:1f:76:
3c:cd:4a:6d:25:2b:86:89:a4:76:4b:c7:cb:91:c9:20:41:ab:
f7:7e:bc:a8:82:4f:b6:54:be:1b:e0:60:cc:93:96:e8:8f:62:
d3:8c:72:45:9d:b9:9a:6f:77:f8:45:91:1d:30:15:3b:b5:ca:
e3:44:8b:29:bb:11:e5:b0:a1:dc:43:44:95:d4:7c:ee:84:5d:
55:d8:bb:ff:3b:33:a3:4a:af:40:1f:e4:fa:19:58:74:60:39:
4d:b3:74:be:2b:23:a5:0b:8a:9e:39:f2:6a:cb:10:ca:e0:d3:
5a:bd:e8:5a:a7:21:73:85:c3:60:85:b7:a4:96:8e:2b:fe:69:
62:33:a3:fd:6e:52:13:d6:f8:d8:05:12:c7:b5:27:11:19:eb:
d7:f3:28:1f:72:b3:58:4b:8e:a8:e4:e3:90:7d:25:8b:76:78:
30:15:8a:eb:a9:f1:e2:59:06:6f:c5:f2:7e:30:e4:39:d6:26:
3d:98:df:a3:1c:79:9e:0a:dd:41:fd:09:16:43:85:91:c1:2a:
d5:29:9a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 13:21:49 2025 by rpki-client