Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/uW5xZeMVu996ePnsDNWix3IxddE.roa
File: uW5xZeMVu996ePnsDNWix3IxddE.roa (raw, json)
Hash identifier: eZBsZLTI5FHa2cO1NIRNHlb8bthiS8UjIJ0pt0v6Shw=
Subject key identifier: B9:6E:71:65:E3:15:BB:DF:7A:78:F9:EC:0C:D5:A2:C7:72:31:75:D1
Certificate issuer: /CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Certificate serial: 019424B3980053C27F86A404D1DA5853ADC5
Authority key identifier: 92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/uW5xZeMVu996ePnsDNWix3IxddE.roa
Signing time: Thu 02 Jan 2025 01:48:57 +0000
ROA not before: Thu 02 Jan 2025 01:48:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58307
IP address blocks: 91.227.61.0/24 maxlen: 24
91.229.210.0/24 maxlen: 24
2001:7f8:6b::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:98:00:53:c2:7f:86:a4:04:d1:da:58:53:ad:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=925cecefe522817405d26fc92bb5104ac90cfdc5
Validity
Not Before: Jan 2 01:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b96e7165e315bbdf7a78f9ec0cd5a2c7723175d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:42:d8:46:c0:8f:26:d8:a4:c7:02:c2:29:c6:
cf:c5:7f:08:d0:f5:55:82:f2:f7:89:d9:e5:25:e2:
21:1c:f9:e4:4a:d3:df:9d:2b:91:dd:a9:5c:ad:97:
7e:53:e4:82:e9:a4:70:8f:f4:18:fa:f3:9c:1e:74:
57:4e:ae:2e:eb:6f:4f:5d:43:e8:44:dd:39:41:86:
dd:a7:1e:38:33:3a:70:5c:b2:cf:5f:93:a1:3f:7c:
f8:13:22:44:89:2d:9c:81:0e:81:d9:e0:c0:3d:63:
2e:7b:9a:c1:1c:4a:d2:c7:64:25:4f:48:5d:66:42:
47:97:36:3e:97:e5:e5:ae:23:48:86:56:04:d7:45:
a3:c4:6f:2f:e9:16:0a:c8:a7:aa:ec:be:80:f9:30:
47:80:57:29:ff:86:0d:da:15:d1:61:d6:91:99:cf:
9b:2f:f1:67:ac:e7:19:09:fe:7f:e7:f2:b9:ca:13:
e6:e3:65:ef:bb:f3:50:83:9a:80:33:5d:a8:11:a6:
31:0e:27:6d:e1:18:d5:a5:ab:e2:1a:fc:25:b1:3b:
71:2f:ef:53:cc:99:05:3a:d5:ee:0a:e7:60:aa:59:
25:58:f2:d3:29:ee:b8:cf:70:c5:fc:f2:50:a2:84:
e4:6e:7e:d1:e5:5e:e4:ba:08:19:86:f8:15:82:af:
84:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:6E:71:65:E3:15:BB:DF:7A:78:F9:EC:0C:D5:A2:C7:72:31:75:D1
X509v3 Authority Key Identifier:
keyid:92:5C:EC:EF:E5:22:81:74:05:D2:6F:C9:2B:B5:10:4A:C9:0C:FD:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/klzs7-UigXQF0m_JK7UQSskM_cU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/uW5xZeMVu996ePnsDNWix3IxddE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/f0767c-b019-463c-a0b1-8d4bfd0aace8/1/klzs7-UigXQF0m_JK7UQSskM_cU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.61.0/24
91.229.210.0/24
IPv6:
2001:7f8:6b::/48
Signature Algorithm: sha256WithRSAEncryption
3b:e5:db:e6:27:ee:5d:83:4d:96:35:83:ee:a4:8c:c3:40:47:
17:b1:8c:60:5c:d5:74:95:40:81:40:f2:84:df:28:58:ee:85:
37:43:bc:28:2e:38:e8:cc:b2:17:7c:51:a5:6a:20:9c:e5:c0:
e7:95:69:0f:77:64:e2:21:57:1f:b4:35:e9:d1:30:91:15:3f:
ae:15:63:cb:70:85:f5:b5:ca:ad:f7:e0:79:70:9e:3a:4f:60:
77:83:3d:30:77:3c:d5:56:11:b3:1b:2e:4e:0c:3e:99:90:4d:
4d:15:0b:b2:ff:d5:a5:6f:31:5c:f8:2a:8f:91:1f:02:28:35:
ed:16:62:d7:22:ea:63:5b:95:4c:e4:9a:b4:85:87:b7:7d:ec:
fb:5c:bf:be:aa:19:ba:86:d5:c0:70:93:1b:fc:f3:b3:b8:38:
98:08:8c:12:63:fb:ef:9d:a1:13:9f:0c:d7:d2:f1:e2:3b:27:
ce:f9:2f:dc:d6:93:b2:9b:da:d0:5e:97:ee:fb:13:87:60:f9:
04:a8:18:39:bf:57:3d:79:5c:b1:09:f0:31:36:65:27:ee:52:
fc:5f:2b:13:d7:9e:f8:ee:f7:12:87:37:64:e4:be:a1:ea:ac:
9a:c0:62:2b:39:e1:70:09:99:0c:91:1b:34:ef:36:58:7d:71:
aa:17:8c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:40:40 2025 by rpki-client