Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/9ePFbgefAOZuTmJLiFLvd1beyls.roa
File: 9ePFbgefAOZuTmJLiFLvd1beyls.roa (raw, json)
Hash identifier: RIcriqMlU4ZWl7joZj4XClpYJLpavsjnCJfKx3wYXhA=
Subject key identifier: F5:E3:C5:6E:07:9F:00:E6:6E:4E:62:4B:88:52:EF:77:56:DE:CA:5B
Certificate issuer: /CN=96351c473a16ba38fab4d517059225e0f133c8bf
Certificate serial: 019421444FD73A2197B44003E8E89F7C49B4
Authority key identifier: 96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/9ePFbgefAOZuTmJLiFLvd1beyls.roa
Signing time: Wed 01 Jan 2025 09:48:32 +0000
ROA not before: Wed 01 Jan 2025 09:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 5396
IP address blocks: 91.225.180.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:4f:d7:3a:21:97:b4:40:03:e8:e8:9f:7c:49:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96351c473a16ba38fab4d517059225e0f133c8bf
Validity
Not Before: Jan 1 09:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5e3c56e079f00e66e4e624b8852ef7756deca5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:42:70:58:ad:3f:92:fc:de:6e:07:a9:0e:b9:
12:61:2f:13:79:75:0d:23:30:01:9a:40:47:1c:e1:
1a:37:73:b6:2d:dc:0e:5d:73:d3:34:49:70:d5:f7:
24:01:5d:98:35:99:3c:41:c9:12:23:9a:82:65:fb:
6f:aa:ba:23:34:ba:d7:a0:43:5f:a1:07:8c:28:39:
22:8e:23:85:1f:1b:78:89:78:e4:0c:b1:59:51:ea:
e8:c4:e9:19:3c:6f:90:9b:34:dc:d2:d6:a1:c5:36:
61:40:59:3d:99:ac:6a:a7:3f:b7:8f:32:0c:47:60:
88:90:08:bc:22:d5:06:da:05:ed:89:cd:7b:9d:1a:
95:f9:63:89:91:aa:ba:e9:2b:e8:75:93:14:46:49:
99:d7:c5:c2:44:b8:15:aa:f3:d0:a8:2d:61:c7:68:
94:87:31:56:0d:e3:7c:69:ea:8b:a6:e2:29:d4:d6:
97:82:00:5e:6e:62:b0:18:9f:c4:2f:9c:58:4f:0a:
90:31:ad:41:21:c5:33:79:03:e4:c3:87:04:29:1f:
2f:b1:36:58:9e:44:86:8f:39:93:5d:2e:bd:43:bf:
54:90:43:88:c0:70:9c:68:de:50:86:24:bd:b5:9e:
4e:23:ca:97:ba:e3:47:dd:ff:4c:0d:6a:d2:a2:2f:
10:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:E3:C5:6E:07:9F:00:E6:6E:4E:62:4B:88:52:EF:77:56:DE:CA:5B
X509v3 Authority Key Identifier:
keyid:96:35:1C:47:3A:16:BA:38:FA:B4:D5:17:05:92:25:E0:F1:33:C8:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ljUcRzoWujj6tNUXBZIl4PEzyL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/9ePFbgefAOZuTmJLiFLvd1beyls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/a537c0-fd4b-43b6-8891-d57373bf5162/1/ljUcRzoWujj6tNUXBZIl4PEzyL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.180.0/22
Signature Algorithm: sha256WithRSAEncryption
81:af:8c:5e:79:02:96:38:5a:dd:3a:13:0d:99:2f:7f:29:f6:
f6:5c:f6:59:b9:3c:5a:5c:4f:80:a4:17:b1:b6:46:11:22:bf:
d0:ca:75:fc:91:5c:54:cd:6a:17:15:8c:bb:a0:38:d8:b5:34:
9f:bd:27:34:d8:b9:7b:54:75:3d:46:b4:73:27:d8:31:47:51:
26:bd:2a:d0:70:c8:01:a3:a2:77:d8:86:f4:27:8d:d8:72:b4:
db:c0:22:53:a0:7c:9c:5d:2c:89:e2:04:fa:e6:fe:d4:4a:8d:
51:2d:65:8c:bc:f8:c2:72:39:7a:40:85:cc:9a:96:c8:52:5f:
86:da:96:cf:42:a2:70:df:b1:f5:5f:23:ec:e4:9a:70:72:60:
c4:5e:76:17:f3:05:4d:e9:e7:6a:93:cc:88:b4:34:22:54:fc:
e8:be:e6:b9:49:e4:22:27:3b:de:07:37:cb:a7:ad:5d:b4:2d:
d2:3b:7f:3f:ab:90:44:dd:38:40:a0:16:fc:7f:92:48:16:1f:
26:68:dd:06:76:3a:78:f8:5f:9d:d7:a8:2f:97:9c:33:ec:35:
5b:6f:70:50:2b:c4:bd:84:e6:64:21:dc:13:a5:61:be:80:43:
3c:4f:23:9d:5f:b0:71:c4:72:06:cd:49:07:c1:de:87:e3:93:
49:e4:86:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:48:30 2025 by rpki-client