Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/X5Td4BSa7V5YNuHvHl6rc7qXYIg.roa
File: X5Td4BSa7V5YNuHvHl6rc7qXYIg.roa (raw, json)
Hash identifier: zvst1s4JeyiHUJBQoQprDeytuK4EA/NhZnM7y90d0+Y=
Subject key identifier: 5F:94:DD:E0:14:9A:ED:5E:58:36:E1:EF:1E:5E:AB:73:BA:97:60:88
Certificate issuer: /CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
Certificate serial: 019420D6325DB524397E5B1B6AB48391608E
Authority key identifier: FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/X5Td4BSa7V5YNuHvHl6rc7qXYIg.roa
Signing time: Wed 01 Jan 2025 07:48:16 +0000
ROA not before: Wed 01 Jan 2025 07:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207027
IP address blocks: 91.227.16.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:32:5d:b5:24:39:7e:5b:1b:6a:b4:83:91:60:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb01ffd7da5ee450fcb1a656abfc6e0b1b21c365
Validity
Not Before: Jan 1 07:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5f94dde0149aed5e5836e1ef1e5eab73ba976088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:70:63:ad:c9:c4:5f:ba:c4:05:0f:7f:9e:af:
ce:1c:70:f3:f7:dc:54:36:43:81:b7:3a:15:4f:53:
89:51:fd:94:3a:be:fb:3d:11:91:fd:4a:6a:e3:6b:
37:2f:1f:7f:3b:d6:6c:74:fd:b3:96:ab:25:69:0f:
5a:1b:6f:0b:46:17:b0:cf:da:f9:35:ed:c3:5d:6e:
1d:b9:8d:7a:66:72:71:36:0f:cb:b8:f1:85:89:7b:
be:31:2e:c1:38:5a:bd:8b:9e:f8:26:b8:2b:f2:2a:
b2:bf:4d:6b:9b:d9:54:fb:ef:71:35:14:7b:49:85:
31:81:eb:58:3c:82:d7:0f:8f:b1:53:96:cd:d0:56:
78:59:cc:30:ad:0b:e0:e6:f8:99:c2:8a:28:1d:f2:
5b:bd:cc:ee:1b:b9:62:23:d6:0d:8e:75:de:a6:78:
87:bd:bc:39:58:69:40:44:58:c0:5b:ff:9f:61:2e:
c6:0a:be:ab:4f:6c:04:c4:87:ed:11:dc:35:94:82:
f1:59:68:05:e5:5e:cd:db:ca:04:03:06:d1:1a:e9:
b3:8e:ca:f5:1f:e4:2f:28:86:4d:61:6d:20:18:07:
76:20:d9:fe:7a:a7:41:75:eb:e7:a5:bd:d5:85:83:
89:6c:7c:a6:99:ef:05:92:74:55:82:a6:58:0c:ed:
5e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:94:DD:E0:14:9A:ED:5E:58:36:E1:EF:1E:5E:AB:73:BA:97:60:88
X509v3 Authority Key Identifier:
keyid:FB:01:FF:D7:DA:5E:E4:50:FC:B1:A6:56:AB:FC:6E:0B:1B:21:C3:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wH_19pe5FD8saZWq_xuCxshw2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/X5Td4BSa7V5YNuHvHl6rc7qXYIg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/e26cea-f660-48a3-862f-90501abf5391/1/1-wH_19pe5FD8saZWq_xuCxshw2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.16.0/22
Signature Algorithm: sha256WithRSAEncryption
61:ce:db:e9:1a:c3:5f:07:e5:ef:54:a2:99:27:e3:3c:ec:c3:
ca:ce:fc:77:c3:a4:1d:8a:23:37:d6:f3:ec:3c:ef:8f:a5:e6:
b9:4e:f8:aa:b1:41:b6:c9:b1:a0:ac:6a:25:44:49:4c:d9:4d:
aa:55:a2:9d:46:ee:90:9a:9e:23:4d:b3:f4:5e:9d:d5:7c:ce:
8a:73:fd:d1:12:d0:39:bf:14:35:6a:89:01:9e:7d:4e:a2:aa:
45:74:80:c9:f3:dd:c3:f9:14:3a:49:26:3e:9a:53:88:e9:b8:
7b:0f:d3:2c:a3:47:f9:81:e0:6d:15:24:d5:8f:1e:07:7a:9e:
bc:af:32:7b:e9:64:50:8f:1f:68:5c:20:de:b2:15:db:11:e7:
ec:a0:f0:c2:3b:91:a4:78:a3:d6:1a:38:86:1f:fc:fa:c6:d0:
13:d4:7f:38:a8:0d:fc:6b:94:fa:6b:18:41:1e:8d:66:9b:b3:
c9:15:17:1f:44:14:b1:65:5f:eb:b6:a8:83:58:72:c7:7b:f5:
41:bf:c8:02:9d:36:20:3d:1a:fb:00:b4:b2:e7:38:82:76:22:
d0:85:7c:90:62:b6:06:cb:51:5d:2d:29:b0:34:07:5c:8b:be:
77:b1:0e:40:57:80:82:44:43:89:7c:8a:2c:53:84:3f:0b:8a:
37:dc:dc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:27:23 2025 by rpki-client on console.sobornost.net