Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/4cc2ff-2104-49df-9e0e-662c41673d69/1/ikA6SmgZYrkxAhhyaJuRefGY53U.roa
File: ikA6SmgZYrkxAhhyaJuRefGY53U.roa (raw, json)
Hash identifier: ie3A7WQpUEehCaIrLYSjLy7cfh+WbAoWgrGO0mgdewg=
Subject key identifier: 8A:40:3A:4A:68:19:62:B9:31:02:18:72:68:9B:91:79:F1:98:E7:75
Certificate issuer: /CN=a312d1d87d7d48f0ef51fc912b9672c3f73ecbe7
Certificate serial: 0184148A1BA389BE2B131825BC0E5BCC63FE
Authority key identifier: A3:12:D1:D8:7D:7D:48:F0:EF:51:FC:91:2B:96:72:C3:F7:3E:CB:E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oxLR2H19SPDvUfyRK5Zyw_c-y-c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/4cc2ff-2104-49df-9e0e-662c41673d69/1/ikA6SmgZYrkxAhhyaJuRefGY53U.roa
Signing time: Wed 26 Oct 2022 13:45:06 +0000
ROA not before: Wed 26 Oct 2022 13:45:06 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50959
IP address blocks: 91.216.134.0/24 maxlen: 24
2a12:5740::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:14:8a:1b:a3:89:be:2b:13:18:25:bc:0e:5b:cc:63:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a312d1d87d7d48f0ef51fc912b9672c3f73ecbe7
Validity
Not Before: Oct 26 13:45:06 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8a403a4a681962b931021872689b9179f198e775
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:3d:b9:cf:cb:35:4c:9f:3f:af:13:9e:a3:74:
f8:aa:d4:04:50:77:48:95:72:b9:3b:30:eb:21:fb:
8e:a9:58:56:12:26:b5:07:4f:3d:50:18:70:6b:78:
5b:78:47:ea:22:f2:15:3b:d0:29:66:91:8f:dc:39:
1e:24:34:b4:bf:e3:9b:5d:fd:3a:b5:6d:45:99:dc:
37:3c:0d:18:b6:0d:54:b4:99:45:e1:d3:09:b6:b5:
cb:cd:69:7a:38:b9:53:ad:58:2b:d8:a8:7e:d9:7d:
76:b8:c4:69:f9:f9:6d:4f:d9:b7:17:b0:b9:a3:2d:
7f:17:62:60:63:2e:16:62:41:9d:43:55:30:7b:0f:
af:c0:4a:bf:19:2e:84:7e:e1:3b:23:e8:4b:11:b6:
56:d7:28:f2:f1:bd:a9:a6:9e:28:ca:21:c2:49:20:
c1:c5:53:64:e4:c6:0a:74:9f:48:33:83:ed:53:ed:
1b:64:80:68:73:f4:a0:ec:e6:77:e0:93:86:ed:e4:
39:5c:12:a3:55:d1:3e:59:76:09:06:84:7d:da:9e:
ea:87:56:a1:96:fd:5a:1f:92:d2:dc:23:22:be:69:
07:22:88:4e:0e:90:e5:26:3c:29:3f:80:44:e5:1c:
34:10:e0:6e:cb:08:70:a9:f4:f5:d1:36:7e:0d:f4:
7f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:40:3A:4A:68:19:62:B9:31:02:18:72:68:9B:91:79:F1:98:E7:75
X509v3 Authority Key Identifier:
keyid:A3:12:D1:D8:7D:7D:48:F0:EF:51:FC:91:2B:96:72:C3:F7:3E:CB:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oxLR2H19SPDvUfyRK5Zyw_c-y-c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4cc2ff-2104-49df-9e0e-662c41673d69/1/ikA6SmgZYrkxAhhyaJuRefGY53U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/4cc2ff-2104-49df-9e0e-662c41673d69/1/oxLR2H19SPDvUfyRK5Zyw_c-y-c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.134.0/24
IPv6:
2a12:5740::/29
Signature Algorithm: sha256WithRSAEncryption
9d:91:90:3d:1b:b6:c2:e8:0d:37:46:9a:13:aa:8d:07:3e:74:
98:38:ea:aa:03:69:95:25:a6:d7:d1:fb:6d:41:03:f1:8d:01:
6a:cb:45:a4:96:9b:16:53:d9:dc:71:5d:e0:c1:ad:c7:96:91:
ea:7c:4d:22:ba:08:60:4e:52:88:80:57:12:17:04:1c:81:71:
f9:f7:c5:94:18:6e:5c:97:28:1d:23:ed:b9:4a:7b:67:65:cc:
4d:d9:af:2f:cd:41:e7:3d:7a:31:d9:7d:e0:44:f9:c1:9a:fe:
67:cd:c0:2e:f6:2b:5c:b1:a2:c4:51:92:8c:ba:cc:84:c5:58:
2d:08:46:ba:ba:e6:af:a9:bd:43:5b:1a:a8:27:62:d2:7d:c0:
a0:3d:2b:3f:bd:b1:f2:11:af:39:ea:f7:72:49:ee:13:fd:35:
d2:00:d3:1a:e6:73:5f:59:d8:b8:5c:59:b8:0e:86:18:e7:4e:
be:6a:4b:ef:3d:03:d6:01:14:10:45:23:a9:6b:74:e3:ca:26:
04:59:27:5c:81:4b:8b:a7:66:23:2c:d1:7e:a1:36:9d:d5:81:
56:2d:d8:06:8d:2f:a1:a2:c8:9c:13:c1:1f:0e:65:85:39:69:
40:64:46:b5:0d:82:4d:a7:bd:eb:d1:98:bb:d5:e7:a8:d1:51:
25:e4:97:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 03:47:41 2025 by rpki-client