Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/5sjj3nTUCtrQ9EAAq5tEvkONqho.roa
File: 5sjj3nTUCtrQ9EAAq5tEvkONqho.roa (raw, json)
Hash identifier: fUqeBNUDAPor+EMyjBOvBucXG3GIkY0fB6bkzdwLl4c=
Subject key identifier: E6:C8:E3:DE:74:D4:0A:DA:D0:F4:40:00:AB:9B:44:BE:43:8D:AA:1A
Certificate issuer: /CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Certificate serial: 08F51E7C
Authority key identifier: A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/5sjj3nTUCtrQ9EAAq5tEvkONqho.roa
Signing time: Fri 25 Mar 2022 10:28:13 +0000
ROA not before: Fri 25 Mar 2022 10:28:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 56264
IP address blocks: 91.149.248.0/24 maxlen: 24
91.149.250.0/24 maxlen: 24
91.149.249.0/24 maxlen: 24
91.149.251.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150281852 (0x8f51e7c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a67850e571f3f2aca2c1ec1d7e502d9bd184c45c
Validity
Not Before: Mar 25 10:28:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e6c8e3de74d40adad0f44000ab9b44be438daa1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f4:2e:d8:a7:22:a8:27:d0:01:9d:fa:49:b4:
d0:f8:63:44:9f:4d:09:48:a4:da:15:a1:0b:87:0a:
0e:10:35:0f:f0:1a:2c:da:fc:2f:b7:73:f7:b1:47:
b7:02:30:c8:54:e8:59:e5:fa:0a:13:63:6b:d4:d4:
c0:c4:9f:54:26:db:17:4f:c5:35:8c:f7:df:7a:6f:
ce:fe:44:37:2f:0a:d6:95:15:3c:fb:a1:f5:bf:15:
93:2b:4c:75:90:de:35:03:1f:31:05:fe:56:b0:64:
96:b5:ab:2f:7c:91:59:c7:ac:9f:7e:e2:e1:cd:b6:
dd:b9:b0:ef:88:7d:ce:26:f6:5f:ba:dc:9b:dd:7a:
9a:a1:e3:68:24:b7:6e:c0:ff:b2:a2:60:66:88:77:
86:1a:a5:bc:f7:99:0c:4f:10:cc:17:33:14:72:bb:
b0:cd:55:b3:d8:bc:10:96:d7:87:ae:78:d7:13:93:
66:31:a0:73:a3:67:9a:9d:eb:95:b5:6d:e5:20:98:
17:6d:97:5c:a5:f0:0f:07:3b:f4:fa:5a:b6:9d:87:
ea:a5:fb:ff:76:6d:bd:dc:df:8b:13:74:2b:50:5d:
5c:96:10:3d:36:8c:89:2b:32:d0:49:04:64:81:ea:
58:97:2d:5f:6f:b2:51:3f:fa:dd:4f:af:3d:d1:a0:
65:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:C8:E3:DE:74:D4:0A:DA:D0:F4:40:00:AB:9B:44:BE:43:8D:AA:1A
X509v3 Authority Key Identifier:
keyid:A6:78:50:E5:71:F3:F2:AC:A2:C1:EC:1D:7E:50:2D:9B:D1:84:C4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pnhQ5XHz8qyiwewdflAtm9GExFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/5sjj3nTUCtrQ9EAAq5tEvkONqho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3309b5-f93f-4c62-8dce-b0c151e516cf/1/pnhQ5XHz8qyiwewdflAtm9GExFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.149.248.0/22
Signature Algorithm: sha256WithRSAEncryption
07:15:2e:dc:11:93:28:0c:98:70:ff:57:6f:8d:90:e6:07:a2:
e3:3c:8d:b7:f9:d6:7d:81:98:d9:03:b3:cd:08:de:22:81:26:
83:f9:17:f1:de:a4:c6:72:79:04:95:2b:3f:c6:f2:83:81:13:
4c:5c:dd:86:97:07:dd:26:73:43:87:2b:8b:ed:59:fe:6b:64:
d9:b0:59:23:81:0b:e3:33:94:b6:85:8c:6f:17:d7:73:f2:20:
58:cd:78:59:02:9a:0f:72:51:f4:1a:dc:ff:8d:9d:e1:ef:be:
20:bd:f1:2d:a6:d4:e3:5b:98:46:37:3c:d0:b2:5b:2c:3a:19:
7d:46:a1:10:a0:94:08:2d:14:3a:1e:9c:97:05:1f:1c:73:87:
bd:24:b6:b5:f3:34:b3:e4:c7:db:24:bd:76:3f:76:36:93:f8:
44:9b:1b:02:4c:c2:d1:5f:80:6b:ba:2d:bd:dd:96:d5:25:a5:
7f:5d:8a:5b:d1:aa:78:7e:ba:b2:b0:92:d2:19:f9:1f:f5:23:
c3:81:5e:11:5b:e6:05:da:15:1f:a2:20:e5:99:06:aa:49:51:
77:52:bd:36:9f:62:86:08:c0:dd:73:6a:c1:fb:6a:3f:53:72:
b0:65:bf:64:31:20:cb:54:94:af:83:dd:5d:a5:03:21:3b:48:
cb:8f:51:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 3 09:56:53 2025 by rpki-client