Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/8c4e3c-340c-4551-9f5e-decdd88d0e2e/1/sDc8xDbMUSj1mJXo-gFlL3tQEVw.roa
File: sDc8xDbMUSj1mJXo-gFlL3tQEVw.roa (raw, json)
Hash identifier: 7ItKPbrKC7dwpicxdwnj29tC4FN+iHa03daHhKUMsL8=
Subject key identifier: B0:37:3C:C4:36:CC:51:28:F5:98:95:E8:FA:01:65:2F:7B:50:11:5C
Certificate issuer: /CN=715fc32ac75b8bf5c6142fa5f3fb56cb0fa853eb
Certificate serial: B7B268
Authority key identifier: 71:5F:C3:2A:C7:5B:8B:F5:C6:14:2F:A5:F3:FB:56:CB:0F:A8:53:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cV_DKsdbi_XGFC-l8_tWyw-oU-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/8c4e3c-340c-4551-9f5e-decdd88d0e2e/1/sDc8xDbMUSj1mJXo-gFlL3tQEVw.roa
Signing time: Fri 28 Jan 2022 21:52:45 +0000
ROA not before: Fri 28 Jan 2022 21:52:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 141677
IP address blocks: 91.229.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 12038760 (0xb7b268)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=715fc32ac75b8bf5c6142fa5f3fb56cb0fa853eb
Validity
Not Before: Jan 28 21:52:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b0373cc436cc5128f59895e8fa01652f7b50115c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:f3:80:47:fc:23:be:05:47:24:f2:64:72:
e4:65:b6:32:20:fa:b3:eb:2c:e5:74:29:47:82:4a:
2c:aa:0b:8e:ac:f2:8a:b5:7e:59:dd:2e:f5:03:68:
13:09:f7:67:1a:b3:a9:63:e9:80:69:80:c9:20:72:
ef:e0:c2:4e:67:da:f5:4b:dc:6f:4b:67:8c:4e:0b:
6c:3b:89:56:8d:71:b5:29:b7:7e:70:5d:f7:af:cb:
e8:71:4b:4c:ac:d2:2a:72:e9:3d:77:ae:c8:80:0c:
55:bb:b2:de:f3:02:02:8c:1f:fe:e5:1d:7e:e1:d8:
c2:05:2f:fc:e8:da:9f:23:5e:43:cc:7c:3c:80:e1:
74:4e:6f:d9:0e:f1:cb:25:64:67:2d:ce:d1:1a:85:
53:b7:10:63:7a:a3:7e:40:0a:72:85:95:c9:fb:9e:
47:e9:86:eb:6a:e9:6b:f1:9d:ff:e3:b7:28:ce:c4:
44:93:a3:a4:fc:e3:34:f4:6a:79:07:d9:78:e0:1e:
b8:8a:a4:54:22:d4:ad:55:c3:ec:1f:f7:32:55:89:
09:67:1a:07:b0:9d:21:26:46:de:11:a4:1c:0c:e9:
92:12:b8:5c:cd:95:18:96:10:12:38:4f:69:2c:66:
20:65:88:6f:1e:d3:31:db:24:2d:0c:90:8f:ea:e8:
b1:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:37:3C:C4:36:CC:51:28:F5:98:95:E8:FA:01:65:2F:7B:50:11:5C
X509v3 Authority Key Identifier:
keyid:71:5F:C3:2A:C7:5B:8B:F5:C6:14:2F:A5:F3:FB:56:CB:0F:A8:53:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cV_DKsdbi_XGFC-l8_tWyw-oU-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c4e3c-340c-4551-9f5e-decdd88d0e2e/1/sDc8xDbMUSj1mJXo-gFlL3tQEVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/8c4e3c-340c-4551-9f5e-decdd88d0e2e/1/cV_DKsdbi_XGFC-l8_tWyw-oU-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.114.0/24
Signature Algorithm: sha256WithRSAEncryption
48:4a:77:22:8c:a5:5d:7b:c9:73:49:ce:36:41:33:00:48:d5:
6d:58:49:18:cb:9a:17:f0:32:b5:0c:ae:fb:1b:00:35:6b:b8:
05:78:81:54:94:c4:19:2d:c1:d6:9f:fc:26:ca:01:b2:98:fc:
2f:6e:44:31:9f:39:c2:c9:70:e2:5e:f9:bb:b7:a8:37:10:11:
72:70:d7:df:29:ea:07:7e:25:a7:dc:8c:3f:7a:4e:36:f6:f7:
0c:29:05:5c:d0:68:70:c1:f1:7f:60:e5:7c:61:11:ad:f9:59:
66:de:fb:0f:da:f0:e0:5c:22:66:dc:70:d3:dc:4c:be:5d:f2:
1b:46:2e:f1:5f:31:85:69:84:19:37:f3:ab:3c:8e:43:33:1a:
2c:03:54:f6:99:6d:cb:25:a8:04:c0:13:d5:4a:a7:a0:5f:52:
d3:34:54:69:e8:00:eb:2d:65:bc:12:bf:32:6a:d0:65:c0:3f:
76:b9:08:5f:b3:81:90:0a:32:d0:1b:b7:19:b3:8d:61:7a:fc:
36:a7:26:fb:ac:a9:57:cd:a7:bd:28:dc:91:8c:4b:6c:69:19:
99:6f:8f:9d:6c:f2:2e:8b:7c:f8:4b:0d:ad:c6:67:c4:46:1a:
a3:57:ce:d5:00:e0:fb:6d:24:03:e9:c2:4d:36:2b:cf:ae:de:
b4:f4:40:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:04 2025 by rpki-client