Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/06cb38-3d3f-4075-9b8d-4a6f8836eb46/1/daegE-AVcqSp-Y9qBJ6Je5zreOM.roa
File: daegE-AVcqSp-Y9qBJ6Je5zreOM.roa (raw, json)
Hash identifier: ySXCY9c0h+//1Q2wfpTWQ+0kFh8a8SH+d1oxHLzsC3c=
Subject key identifier: 75:A7:A0:13:E0:15:72:A4:A9:F9:8F:6A:04:9E:89:7B:9C:EB:78:E3
Certificate issuer: /CN=b44b6521a4f926a3949df0ab2c66f2b88a7cab1a
Certificate serial: 06A2C52E
Authority key identifier: B4:4B:65:21:A4:F9:26:A3:94:9D:F0:AB:2C:66:F2:B8:8A:7C:AB:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tEtlIaT5JqOUnfCrLGbyuIp8qxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/06cb38-3d3f-4075-9b8d-4a6f8836eb46/1/daegE-AVcqSp-Y9qBJ6Je5zreOM.roa
Signing time: Sat 01 Jan 2022 10:56:46 +0000
ROA not before: Sat 01 Jan 2022 10:56:46 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48345
IP address blocks: 91.223.220.0/24 maxlen: 24
91.234.215.0/24 maxlen: 24
94.232.112.0/21 maxlen: 21
2001:67c:174::/48 maxlen: 48
2001:67c:28d8::/48 maxlen: 48
2001:67c:15b8::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 111330606 (0x6a2c52e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b44b6521a4f926a3949df0ab2c66f2b88a7cab1a
Validity
Not Before: Jan 1 10:56:46 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=75a7a013e01572a4a9f98f6a049e897b9ceb78e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:cd:d3:ad:e4:8a:82:66:d2:cf:84:89:2b:cf:
54:40:01:28:fe:67:9f:7a:7a:61:3e:c1:bc:aa:87:
74:90:52:85:91:84:45:3b:a3:59:54:f2:79:e5:95:
ca:c9:6d:2f:f2:41:fa:74:78:45:4d:eb:4c:81:7f:
18:c7:0b:93:f9:0b:f8:cb:6e:ef:f0:2f:49:3e:89:
a6:76:1d:e6:d5:85:ec:c4:84:18:57:75:c2:23:84:
1e:bc:25:6b:ca:78:17:28:12:e7:b6:67:e4:cd:b6:
89:39:42:ae:43:74:c7:bf:b7:e8:14:20:78:13:72:
31:f9:0c:17:2e:5d:00:b6:7b:f3:81:aa:00:5d:85:
e3:71:73:86:5e:af:f6:af:99:cd:72:64:ff:c5:d7:
88:8c:f3:a2:d9:29:7f:9b:56:da:9e:b9:19:de:47:
91:33:30:ec:f4:78:9e:41:83:4d:4a:ce:7c:0e:f2:
b0:4a:93:07:14:fc:01:7b:9b:71:9d:a6:37:c3:11:
4f:d3:08:03:4a:49:5f:54:03:4a:04:dd:ee:57:d6:
01:bd:ee:ca:cc:68:53:31:3e:c2:e4:ab:ef:f8:ee:
e4:6f:63:68:71:31:89:5c:c2:c6:94:b2:dc:88:30:
8a:2e:22:19:9f:94:54:21:73:ae:84:13:d8:c2:6f:
c9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:A7:A0:13:E0:15:72:A4:A9:F9:8F:6A:04:9E:89:7B:9C:EB:78:E3
X509v3 Authority Key Identifier:
keyid:B4:4B:65:21:A4:F9:26:A3:94:9D:F0:AB:2C:66:F2:B8:8A:7C:AB:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tEtlIaT5JqOUnfCrLGbyuIp8qxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/06cb38-3d3f-4075-9b8d-4a6f8836eb46/1/daegE-AVcqSp-Y9qBJ6Je5zreOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/06cb38-3d3f-4075-9b8d-4a6f8836eb46/1/tEtlIaT5JqOUnfCrLGbyuIp8qxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.220.0/24
91.234.215.0/24
94.232.112.0/21
IPv6:
2001:67c:174::/48
2001:67c:15b8::/48
2001:67c:28d8::/48
Signature Algorithm: sha256WithRSAEncryption
2a:6c:60:7e:a6:fd:41:92:1d:d7:9f:30:ba:e1:0a:14:f2:da:
15:7f:88:50:0f:bd:53:62:0d:3b:3a:64:bc:34:41:23:03:9f:
b9:da:f4:b4:87:2c:48:1e:28:e1:f6:fb:1a:d1:8c:8d:ce:81:
e9:15:88:d8:ce:fe:6e:0f:70:b6:74:4f:b4:e0:3e:fb:0d:bd:
7a:30:8e:fa:a7:30:1b:fd:04:36:33:ae:ed:ae:e4:39:2e:8f:
f0:6e:93:d2:95:d9:7f:6d:ba:fd:b3:99:2c:31:57:47:ad:1f:
ce:b7:4e:61:ab:24:01:0b:6d:af:52:b0:34:d6:95:b5:37:99:
1b:b3:0f:f3:d3:ce:1e:2f:bc:9d:61:9b:81:12:32:9c:8e:98:
26:fe:2f:f2:53:35:3f:8d:d2:fd:86:ab:f8:41:59:4f:8e:d9:
da:c8:8a:f0:d8:c4:80:c1:e6:16:23:64:80:75:90:2c:fa:05:
02:b7:10:ab:3e:d8:56:80:cf:22:3e:50:da:c8:a0:cc:25:2b:
9a:50:78:34:44:18:a7:00:a3:74:81:c2:48:c9:19:46:d0:f3:
09:5b:f5:92:33:21:02:b9:bb:4a:80:12:69:d9:5b:96:e9:3c:
da:b7:13:77:5a:57:d5:75:b5:1f:9e:e8:9d:f2:2c:3f:ff:01:
a9:e6:5a:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 07:44:55 2025 by rpki-client