Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7d5252-5274-475e-8c35-ba95c3307fae/1/zZj35Ivs4AB6RrVltKMZ64DeG-k.roa
File: zZj35Ivs4AB6RrVltKMZ64DeG-k.roa (raw, json)
Hash identifier: TAqfiwdQcmDYgtRSq92Pq9HrYZvebn44SCf/c1PklZg=
Subject key identifier: CD:98:F7:E4:8B:EC:E0:00:7A:46:B5:65:B4:A3:19:EB:80:DE:1B:E9
Certificate issuer: /CN=cd1301dd93fd7cc5cf253b668a6932aa72b5a629
Certificate serial: 099D0645
Authority key identifier: CD:13:01:DD:93:FD:7C:C5:CF:25:3B:66:8A:69:32:AA:72:B5:A6:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMB3ZP9fMXPJTtmimkyqnK1pik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7d5252-5274-475e-8c35-ba95c3307fae/1/zZj35Ivs4AB6RrVltKMZ64DeG-k.roa
Signing time: Tue 08 Mar 2022 17:52:20 +0000
ROA not before: Tue 08 Mar 2022 17:52:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 16243
IP address blocks: 91.223.131.0/24 maxlen: 24
2001:67c:20cc::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 161285701 (0x99d0645)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd1301dd93fd7cc5cf253b668a6932aa72b5a629
Validity
Not Before: Mar 8 17:52:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd98f7e48bece0007a46b565b4a319eb80de1be9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:79:9d:86:35:d5:34:84:ae:97:0d:b5:ef:
3b:5b:de:33:05:43:0f:c9:f8:be:3a:68:70:a7:82:
74:af:6f:32:a5:e4:e7:f4:d0:81:63:26:79:9f:91:
a2:e2:1c:53:90:4a:d0:cd:62:7f:47:78:16:a3:e3:
e5:80:40:bd:8d:fe:6c:7e:ba:b6:ab:d9:04:fe:9a:
57:18:a7:86:24:07:60:40:2f:48:aa:72:72:59:8f:
31:cc:6f:f1:06:e5:72:44:b8:4d:23:71:c7:af:f7:
c0:c6:04:8a:a5:3f:4d:63:40:56:91:2a:a2:98:6f:
04:47:09:e9:9d:62:83:5d:6d:7a:49:cd:5b:fa:be:
00:65:f2:24:13:d7:1d:db:fc:27:e5:e3:3a:4e:d0:
08:e3:3e:c8:6d:4c:21:6e:57:9f:19:63:d9:c4:ed:
b2:90:56:12:4e:46:56:5d:a2:fa:28:36:26:f0:6d:
96:c5:f4:c4:c2:56:e2:80:4e:9c:5a:67:cf:01:42:
d3:42:c2:80:5b:d4:1c:82:6a:35:b4:e2:5c:d6:63:
50:28:13:1d:ab:73:67:72:4a:0c:4b:53:94:d6:00:
69:f3:c0:ef:e6:d6:f2:fb:c7:71:3e:53:ad:b4:7f:
15:f5:d4:46:fc:44:7e:07:24:06:aa:08:40:db:05:
96:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:98:F7:E4:8B:EC:E0:00:7A:46:B5:65:B4:A3:19:EB:80:DE:1B:E9
X509v3 Authority Key Identifier:
keyid:CD:13:01:DD:93:FD:7C:C5:CF:25:3B:66:8A:69:32:AA:72:B5:A6:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMB3ZP9fMXPJTtmimkyqnK1pik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7d5252-5274-475e-8c35-ba95c3307fae/1/zZj35Ivs4AB6RrVltKMZ64DeG-k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7d5252-5274-475e-8c35-ba95c3307fae/1/zRMB3ZP9fMXPJTtmimkyqnK1pik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.131.0/24
IPv6:
2001:67c:20cc::/48
Signature Algorithm: sha256WithRSAEncryption
64:99:69:69:e1:4d:da:4c:0f:c2:5c:2e:73:db:0c:54:2c:9d:
8b:c4:35:49:7d:82:15:37:a6:72:26:c3:6c:d3:9d:f0:73:06:
18:9b:1a:c1:f1:1e:54:b9:9c:a6:42:7b:84:87:cd:7a:3c:07:
43:cf:10:fd:f9:0c:83:e3:75:eb:d6:50:44:24:ed:e5:09:07:
b9:da:ba:de:09:5c:f0:5f:7b:da:73:03:a0:ab:25:f2:e7:c0:
79:4e:ed:e6:cf:07:64:e3:1f:c5:c0:3e:38:d6:4f:fe:7d:33:
06:46:07:ee:23:72:b2:bb:38:78:86:7e:da:1c:6e:5b:7b:23:
cc:20:48:c0:ee:89:95:4f:af:bf:d9:2f:ba:0d:8a:d1:2e:7d:
3c:6b:f6:fb:5b:65:5e:ab:8a:86:c4:43:0c:69:60:3a:10:80:
de:87:5a:22:cc:b0:03:d9:a8:60:f7:f2:87:ba:e8:66:24:22:
85:76:6c:1a:6f:64:53:74:91:4b:86:2a:cd:c5:3c:10:97:85:
a0:8d:26:e2:74:3e:bd:84:f1:47:67:ca:78:52:5b:fc:c9:90:
94:00:46:1f:b1:44:69:a9:d8:61:e4:3d:8e:e0:9c:ff:13:83:
1d:f6:71:45:2a:ea:06:92:82:8d:77:dd:c6:94:60:bc:6c:4f:
5d:4c:34:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:37:02 2025 by rpki-client