Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/ffd6bf-3857-403a-9459-27c9fd0eb80a/1/ziZ29sZk9jokhcvjMEG6xjx6_98.roa
File: ziZ29sZk9jokhcvjMEG6xjx6_98.roa (raw, json)
Hash identifier: BIgQm6q9qcx4MlpES+5cq6BjYmwDn9kq9ZSbXz8ce5E=
Subject key identifier: CE:26:76:F6:C6:64:F6:3A:24:85:CB:E3:30:41:BA:C6:3C:7A:FF:DF
Certificate issuer: /CN=8cc872f2c17827d0b170a21b953923f01e1ffa37
Certificate serial: C301
Authority key identifier: 8C:C8:72:F2:C1:78:27:D0:B1:70:A2:1B:95:39:23:F0:1E:1F:FA:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jMhy8sF4J9CxcKIblTkj8B4f-jc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/ffd6bf-3857-403a-9459-27c9fd0eb80a/1/ziZ29sZk9jokhcvjMEG6xjx6_98.roa
Signing time: Fri 29 Apr 2022 05:40:37 +0000
ROA not before: Fri 29 Apr 2022 05:40:37 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 12672
IP address blocks: 91.216.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 49921 (0xc301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cc872f2c17827d0b170a21b953923f01e1ffa37
Validity
Not Before: Apr 29 05:40:37 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ce2676f6c664f63a2485cbe33041bac63c7affdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7b:9a:9f:dd:ff:fb:d5:83:02:8b:a2:21:ec:
13:3b:ae:3f:22:4d:33:8b:bc:3c:23:e5:98:2e:9b:
64:91:58:69:51:dd:0d:52:3b:87:5f:8b:2a:48:3f:
00:3d:dc:d5:b5:29:d1:d0:96:c1:ea:aa:96:38:09:
3c:1f:13:06:89:49:bc:cf:ba:dd:da:98:00:33:09:
57:27:05:cf:4f:61:dc:e8:25:c5:0b:ab:a2:15:86:
87:a5:5e:52:3b:0a:31:e1:70:ac:4e:10:d2:f5:ac:
3d:2b:24:45:d2:53:57:fe:1e:54:62:1a:90:1b:e2:
44:e6:31:4d:da:ee:65:bd:b7:80:d6:b1:47:1f:fe:
fb:fd:bd:3c:ce:e5:cc:ee:b7:23:70:96:ef:a6:aa:
ae:04:cc:b4:05:04:ee:bc:bf:95:25:75:d2:b0:88:
a0:52:57:d8:af:da:90:2e:8f:2e:23:b3:8f:15:79:
4b:c7:27:27:22:9c:b8:d2:57:55:8e:b3:ce:5c:d6:
a8:40:18:09:ee:2b:8f:8b:00:4a:71:be:5b:6e:46:
ff:c1:78:4f:68:1a:f6:1e:31:54:3d:3a:a5:df:a9:
d9:dd:13:a3:73:1f:2e:e7:42:aa:b9:ef:56:2a:07:
60:a3:dd:0f:6e:fc:2c:2f:78:34:0a:0a:75:4c:91:
79:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:26:76:F6:C6:64:F6:3A:24:85:CB:E3:30:41:BA:C6:3C:7A:FF:DF
X509v3 Authority Key Identifier:
keyid:8C:C8:72:F2:C1:78:27:D0:B1:70:A2:1B:95:39:23:F0:1E:1F:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jMhy8sF4J9CxcKIblTkj8B4f-jc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ffd6bf-3857-403a-9459-27c9fd0eb80a/1/ziZ29sZk9jokhcvjMEG6xjx6_98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/ffd6bf-3857-403a-9459-27c9fd0eb80a/1/jMhy8sF4J9CxcKIblTkj8B4f-jc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.152.0/24
Signature Algorithm: sha256WithRSAEncryption
58:d2:9f:8f:d2:60:fe:38:54:cb:ca:88:8e:de:62:8e:42:c3:
a2:cd:ec:1e:56:18:bd:c1:71:a4:5a:af:fc:48:ec:ba:8a:51:
f5:43:d4:70:b8:4b:d1:db:04:10:43:36:6c:87:ef:40:89:a7:
4b:bb:3f:48:01:0b:52:52:93:19:ef:57:41:85:b0:83:7e:cb:
d9:b8:1a:8e:1e:ea:ef:d0:34:ce:99:b9:d9:79:4d:51:88:20:
f5:fd:5c:26:9a:a1:31:de:d4:e1:11:2a:4b:60:bb:63:c5:e7:
50:a9:3c:45:81:99:3f:6f:b6:8e:36:94:1d:f2:a5:fe:8d:c3:
b4:53:49:a3:26:11:e4:e0:ff:9a:42:6f:a7:9a:d4:80:e3:c4:
09:26:23:85:8e:cf:5a:7f:c1:00:7e:a7:78:4c:89:9b:90:7e:
61:2c:91:6a:0a:e9:fb:30:dc:eb:b5:5f:3a:ef:67:de:35:54:
a1:82:f6:c0:27:d0:85:de:ac:af:f3:f2:18:cb:b1:78:af:1a:
00:2c:ff:fe:bf:19:56:a4:f3:b9:96:fe:40:88:c4:46:9a:0e:
1e:15:f3:cb:ea:89:d2:a1:02:b1:3b:40:10:f1:76:b4:42:87:
fe:9a:ba:ec:8f:65:e9:14:9a:61:13:a1:42:c6:4c:b0:96:60:
6c:bb:cb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 19 08:23:56 2025 by rpki-client