Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/367XO3Vi7cJWGcs9UHTKC4Fe-KE.roa
File: 367XO3Vi7cJWGcs9UHTKC4Fe-KE.roa (raw, json)
Hash identifier: NMCHArOMoQ8u8Qz+Mc/E16cfW+udBCv4pAKJ6M4Nazg=
Subject key identifier: DF:AE:D7:3B:75:62:ED:C2:56:19:CB:3D:50:74:CA:0B:81:5E:F8:A1
Certificate issuer: /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial: 0535AEBF
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/367XO3Vi7cJWGcs9UHTKC4Fe-KE.roa
Signing time: Sat 01 Jan 2022 10:01:45 +0000
ROA not before: Sat 01 Jan 2022 10:01:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34714
IP address blocks: 91.209.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 87404223 (0x535aebf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Validity
Not Before: Jan 1 10:01:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dfaed73b7562edc25619cb3d5074ca0b815ef8a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:0c:c5:6f:a8:7c:06:25:73:90:4f:a2:3b:5d:
87:fa:33:53:b2:e6:1f:43:8e:7c:92:cc:e2:e3:78:
7b:62:92:27:60:9e:84:f5:1d:53:54:c6:f0:c5:66:
5a:89:30:97:7b:8e:ba:b3:35:79:58:70:14:2a:d6:
bc:ea:e0:66:40:95:32:17:8e:27:36:33:2b:c0:c6:
4e:7c:2d:5e:eb:d4:b5:71:05:6f:e2:4b:e5:57:dc:
1c:80:6b:a1:ed:b2:9a:7b:9d:fe:66:37:37:5a:f5:
53:cf:9c:12:e5:d6:4d:12:92:58:fd:be:33:95:47:
20:06:7c:f7:ab:35:cb:9b:d6:b5:c4:ea:f7:98:57:
b1:0b:07:8d:ae:bf:6d:fb:14:8f:8f:c6:af:15:67:
df:1e:1d:88:ec:15:69:30:e5:54:74:34:4a:6d:01:
f8:40:f4:d7:7f:8e:fe:f0:cc:0c:03:d8:1b:c4:ba:
52:c1:11:c1:7c:c6:e2:b3:b3:5f:eb:49:e6:ba:8c:
bb:e1:7a:54:4f:98:8d:9e:ba:cd:86:b4:5f:df:30:
31:41:89:2b:dd:b1:34:73:72:d6:81:75:31:c7:c1:
92:e5:e6:dc:d1:15:0f:79:b9:a2:1c:1e:8c:3e:e8:
70:5d:20:78:15:46:f0:96:c1:fb:45:bd:ce:a5:46:
d7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:AE:D7:3B:75:62:ED:C2:56:19:CB:3D:50:74:CA:0B:81:5E:F8:A1
X509v3 Authority Key Identifier:
keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/367XO3Vi7cJWGcs9UHTKC4Fe-KE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.171.0/24
Signature Algorithm: sha256WithRSAEncryption
12:46:53:23:93:9c:a6:c3:00:2b:0d:57:74:15:0e:3c:6c:a8:
c0:71:99:84:ab:c1:e9:17:0e:76:68:91:bd:19:a9:a5:2a:10:
3a:a9:39:ac:26:4f:b3:92:a1:6d:db:bc:5f:8d:67:51:33:cb:
31:61:53:75:8a:97:00:b9:64:33:15:01:02:f7:b2:65:ef:59:
a3:85:2d:07:98:a0:1c:4d:8f:99:b7:aa:a3:18:53:2a:e4:e3:
ce:ae:fa:13:e7:a7:20:7e:06:8f:07:6a:9c:bc:73:c1:0a:82:
b6:24:d2:7b:a4:63:9d:d6:02:be:39:29:ac:c7:3e:e2:ff:a0:
2c:8c:e8:3d:27:0d:84:87:74:6a:96:4d:1e:c4:5e:18:3b:32:
ab:64:7a:86:6d:18:6a:63:ab:34:0c:13:76:3c:30:ed:f9:ed:
fc:ca:0f:81:eb:62:f8:1c:4a:f8:e3:14:49:73:94:f6:00:75:
06:ba:a4:7f:bc:f8:c2:d5:c4:37:58:e5:ec:ed:88:d6:3d:0d:
19:74:b6:67:08:6e:8d:fa:43:07:ed:9f:7b:22:4d:92:48:34:
f0:94:79:32:2b:4d:e8:bf:54:0d:3b:fc:59:9c:89:a0:08:19:
55:bb:e9:72:76:be:82:75:f2:f3:98:e9:65:3d:a4:84:7e:87:
92:81:82:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 14:36:43 2025 by rpki-client