Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/b03f7b-7e71-436d-9a25-c987d935d603/1/dVRlHfb-_B-b5k22CR7G12qXqUg.roa
File: dVRlHfb-_B-b5k22CR7G12qXqUg.roa (raw, json)
Hash identifier: F8Nu9p/AvIWlNRp+tq86JBoQpgD4b9Ml6d9lxJjDHvE=
Subject key identifier: 75:54:65:1D:F6:FE:FC:1F:9B:E6:4D:B6:09:1E:C6:D7:6A:97:A9:48
Certificate issuer: /CN=0f838e340904bb939ec4394cb543698dac80cc01
Certificate serial: 01856D9402A916725D38BE4ECC689E27FF44
Authority key identifier: 0F:83:8E:34:09:04:BB:93:9E:C4:39:4C:B5:43:69:8D:AC:80:CC:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D4OONAkEu5OexDlMtUNpjayAzAE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/b03f7b-7e71-436d-9a25-c987d935d603/1/dVRlHfb-_B-b5k22CR7G12qXqUg.roa
Signing time: Sun 01 Jan 2023 13:44:54 +0000
ROA not before: Sun 01 Jan 2023 13:44:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 91.246.37.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:02:a9:16:72:5d:38:be:4e:cc:68:9e:27:ff:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f838e340904bb939ec4394cb543698dac80cc01
Validity
Not Before: Jan 1 13:44:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7554651df6fefc1f9be64db6091ec6d76a97a948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:2e:42:15:83:a1:a5:89:3a:08:10:ae:50:
01:5f:7a:75:9c:a4:d9:74:33:3e:7e:be:ef:e3:db:
b3:7b:21:ce:fb:8a:c5:41:51:55:e8:c0:d0:a4:01:
26:c0:7a:5e:5e:12:2b:93:90:95:19:da:57:f5:b3:
42:84:a4:92:4f:6c:d0:eb:55:05:d3:29:54:6f:18:
a7:a9:0e:a8:ba:43:4a:0f:91:93:d7:9e:e1:71:ab:
77:22:16:ca:97:81:a5:f1:84:9c:b3:7a:b4:50:1c:
cc:8b:80:a3:b8:c7:c5:49:53:21:e1:c2:f2:c0:b0:
2a:ec:b5:38:10:a9:c7:c7:18:e7:5a:51:40:57:54:
59:c4:68:14:97:34:bd:10:8f:52:ba:e4:01:e1:b1:
1e:ea:52:cb:57:24:9c:45:92:17:f1:e8:61:b0:f7:
7e:a7:35:bb:56:b4:a2:6b:6d:7f:4f:b3:9e:1c:cc:
3e:1d:ea:ae:cb:49:a9:a8:0b:e6:ac:f1:46:f0:35:
c7:df:81:b5:33:11:16:20:61:0c:d6:a4:36:96:c9:
da:6f:bd:48:85:43:91:1d:e8:6f:93:7b:8b:69:3a:
7d:81:91:28:8c:64:c5:5c:16:63:38:90:e5:83:6a:
11:7a:16:ec:c4:d1:2d:53:2e:e5:32:f6:6d:5b:77:
7d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:54:65:1D:F6:FE:FC:1F:9B:E6:4D:B6:09:1E:C6:D7:6A:97:A9:48
X509v3 Authority Key Identifier:
keyid:0F:83:8E:34:09:04:BB:93:9E:C4:39:4C:B5:43:69:8D:AC:80:CC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D4OONAkEu5OexDlMtUNpjayAzAE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b03f7b-7e71-436d-9a25-c987d935d603/1/dVRlHfb-_B-b5k22CR7G12qXqUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/b03f7b-7e71-436d-9a25-c987d935d603/1/D4OONAkEu5OexDlMtUNpjayAzAE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.37.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:4f:a4:ce:af:e3:63:e2:37:29:12:be:4f:aa:f0:84:b4:bf:
00:84:2b:87:37:74:b9:ed:c3:97:21:d7:91:f6:33:13:21:33:
65:c6:82:95:63:d9:dd:ee:3c:3e:a2:4d:88:12:90:f2:7f:a1:
2a:c3:aa:18:13:82:35:22:81:d1:ca:84:fd:78:21:45:74:36:
3a:f2:89:76:06:20:69:29:38:7c:6a:2c:96:45:92:bb:27:16:
c8:3d:58:ac:ed:68:76:95:2d:f3:62:eb:2a:36:7f:03:e9:59:
f6:3e:f7:b0:96:fe:5e:ad:89:c0:b4:ab:11:84:b9:e9:8e:2c:
cd:ec:db:18:f1:22:d9:2e:c0:6d:66:d2:15:70:da:f3:e7:37:
c2:55:5c:cb:e0:cb:df:f8:21:2c:3e:99:40:78:77:e0:d7:72:
c0:04:0d:66:f0:b3:71:d2:53:67:bc:39:d1:c9:7f:39:0c:b4:
01:7c:6d:ac:60:c9:58:67:b6:44:72:5e:66:9c:55:7f:a7:5a:
0b:da:e9:53:8f:7d:c6:fa:4b:bf:e9:46:cc:48:00:b9:bc:24:
1f:9f:15:09:87:92:7e:94:1f:b5:73:75:19:22:f5:4f:58:f4:
ec:7c:27:89:6c:fb:89:50:e0:9a:16:b3:e4:83:66:43:5e:07:
28:c8:0e:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:46:36 2025 by rpki-client