Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/7d7d35-55b1-4dab-bbaf-a5fc5c47dc74/1/E1SPxfWVMIemBgLMbKBzu4QpYa8.roa
File: E1SPxfWVMIemBgLMbKBzu4QpYa8.roa (raw, json)
Hash identifier: 6lqX+fBtM1xUIQCpwgOgm9fPiyUiLU2fZuJEx1taKmA=
Subject key identifier: 13:54:8F:C5:F5:95:30:87:A6:06:02:CC:6C:A0:73:BB:84:29:61:AF
Certificate issuer: /CN=474180cc1112bd41687ba6609c2716757e5425de
Certificate serial: B365B3
Authority key identifier: 47:41:80:CC:11:12:BD:41:68:7B:A6:60:9C:27:16:75:7E:54:25:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0GAzBESvUFoe6ZgnCcWdX5UJd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/7d7d35-55b1-4dab-bbaf-a5fc5c47dc74/1/E1SPxfWVMIemBgLMbKBzu4QpYa8.roa
Signing time: Sat 02 Apr 2022 20:16:07 +0000
ROA not before: Sat 02 Apr 2022 20:16:07 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50340
IP address blocks: 91.220.198.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 11756979 (0xb365b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474180cc1112bd41687ba6609c2716757e5425de
Validity
Not Before: Apr 2 20:16:07 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13548fc5f5953087a60602cc6ca073bb842961af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b6:0d:46:90:74:78:7f:fa:f2:34:39:92:7f:
0b:eb:09:81:ec:a8:f2:5a:1d:45:7c:35:38:e2:36:
8a:b3:f3:dd:3d:a3:0a:f4:93:b5:85:ec:14:b7:0c:
89:e3:ad:8d:66:55:b2:72:65:38:dc:3f:49:aa:9d:
bb:4b:af:af:4a:ac:92:eb:1f:2c:63:0b:61:e5:ab:
62:27:c0:fc:af:db:6c:6a:b7:ee:e9:05:02:ac:35:
81:cf:95:79:4c:bf:72:97:af:f4:22:c1:07:9c:80:
a0:ec:47:a2:c5:12:16:4e:23:c3:a3:9a:4a:ca:bd:
56:ff:0a:0f:0d:6e:9f:5d:80:dd:5f:b3:6a:35:b2:
79:4f:43:53:8e:48:6d:94:fd:ee:15:0c:1b:23:1c:
5f:47:0d:25:fb:15:98:ea:2f:ba:65:1b:38:32:65:
d4:86:c1:45:0d:7f:6b:eb:29:9a:9b:95:3d:9f:72:
73:e7:2e:ab:9d:ce:80:f3:7e:cf:d7:e4:2e:17:02:
0c:ff:be:4e:76:0e:40:30:bc:ed:26:c3:9c:23:4f:
b7:25:37:a6:ea:82:e8:64:42:99:f7:e3:1b:50:08:
3b:6c:a2:bc:05:61:d8:a3:22:73:7e:49:7a:4b:6f:
76:15:ca:76:7f:89:e0:15:48:a6:43:b7:df:8b:bc:
0b:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:54:8F:C5:F5:95:30:87:A6:06:02:CC:6C:A0:73:BB:84:29:61:AF
X509v3 Authority Key Identifier:
keyid:47:41:80:CC:11:12:BD:41:68:7B:A6:60:9C:27:16:75:7E:54:25:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0GAzBESvUFoe6ZgnCcWdX5UJd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7d7d35-55b1-4dab-bbaf-a5fc5c47dc74/1/E1SPxfWVMIemBgLMbKBzu4QpYa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/7d7d35-55b1-4dab-bbaf-a5fc5c47dc74/1/R0GAzBESvUFoe6ZgnCcWdX5UJd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.198.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c1:be:95:31:59:bb:d7:ed:f0:a2:91:0d:c1:dc:8c:47:4c:
6f:59:23:b3:69:50:c2:ee:a1:5c:d0:7f:f6:72:be:c7:b8:79:
6c:e8:37:6b:dc:38:06:23:3c:e9:97:a2:49:91:56:47:b4:b9:
0a:6e:f5:ee:5e:e1:65:31:1c:ff:8e:33:5e:e1:67:f6:ee:c1:
c8:5f:f1:77:49:50:09:98:b1:a3:84:e2:5d:30:35:b8:50:17:
7f:72:b0:17:07:1a:28:3b:ea:89:46:c3:20:2c:9d:c4:38:df:
0a:b6:89:4f:d2:e7:97:2b:5f:7f:1c:8a:89:37:9f:98:ec:9b:
43:8b:0a:42:b6:12:4d:44:b0:0b:c1:9c:18:39:bd:ac:58:e0:
2b:c8:c4:cc:29:c2:b4:5f:af:db:03:60:c5:c4:de:e5:33:cb:
f8:78:a5:4a:a1:95:8d:0a:a3:58:8e:18:d5:e4:04:ed:bd:65:
17:39:e2:8c:be:41:97:21:3d:9e:14:aa:d3:c4:91:b4:7a:b8:
61:1d:bf:6f:28:34:24:ff:46:9f:97:30:f8:ff:d6:09:ed:31:
96:5d:21:10:bd:84:c1:cb:7f:c9:9a:56:4b:74:77:4e:37:1e:
ac:c6:a4:bc:1f:5d:44:9e:0b:d7:ec:d7:b1:34:94:76:fa:f0:
79:8d:63:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 12:57:15 2025 by rpki-client