Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/dB3S_KwDHivcdVIg0-g_TUem2-E.roa
File: dB3S_KwDHivcdVIg0-g_TUem2-E.roa (raw, json)
Hash identifier: CEzfRhwzQvxQ9bJeFByJGcSzEbkX1Dnfv+lBLYvDmvs=
Subject key identifier: 74:1D:D2:FC:AC:03:1E:2B:DC:75:52:20:D3:E8:3F:4D:47:A6:DB:E1
Certificate issuer: /CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Certificate serial: 01856D6F885BF8485B8D3C48E5741E33DB12
Authority key identifier: DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/dB3S_KwDHivcdVIg0-g_TUem2-E.roa
Signing time: Sun 01 Jan 2023 13:05:03 +0000
ROA not before: Sun 01 Jan 2023 13:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34714
IP address blocks: 91.209.171.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:6f:88:5b:f8:48:5b:8d:3c:48:e5:74:1e:33:db:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dcff85bb8a3759523e0cc9f8a91dbdaf474d6b7c
Validity
Not Before: Jan 1 13:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=741dd2fcac031e2bdc755220d3e83f4d47a6dbe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:11:32:3d:3d:e2:39:f6:7c:35:54:83:56:03:
79:a9:46:69:db:a0:6c:ee:89:91:ab:0e:2f:e1:ba:
73:84:08:6e:f6:6d:cb:3b:f0:ec:6b:ca:9e:e8:e4:
b1:ff:9c:26:2d:23:ab:f2:63:5e:40:e7:73:f6:01:
13:52:65:5f:8b:a2:93:a6:cb:17:c1:d1:75:8a:a3:
3a:cb:3a:68:a8:a0:2b:57:91:e9:89:7b:01:1a:41:
ce:0d:bb:1c:2e:97:59:df:5c:5a:67:c9:c2:96:09:
84:71:6e:96:c5:80:a3:19:74:84:95:35:10:7c:83:
49:37:db:66:76:f1:ab:9c:78:4b:d1:47:97:64:ac:
ea:89:80:16:ea:46:2c:7e:4a:0a:56:15:23:30:b4:
bb:85:df:fa:83:ad:5a:96:4f:96:ab:da:b6:8d:4d:
5c:0b:d1:14:18:91:19:fc:83:6f:b5:ad:8f:0e:89:
d5:fd:be:a1:01:d7:68:f3:25:85:8c:9a:6c:d1:20:
3d:04:64:e2:52:15:d4:f6:79:c7:da:59:1f:aa:10:
dd:75:cc:87:85:03:70:ce:bd:44:85:89:4d:9b:54:
76:02:15:c0:00:87:a0:13:36:0a:fe:9d:f5:c3:c0:
34:d9:ba:30:52:c6:4a:bd:fe:27:01:a4:e5:5c:80:
ec:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:1D:D2:FC:AC:03:1E:2B:DC:75:52:20:D3:E8:3F:4D:47:A6:DB:E1
X509v3 Authority Key Identifier:
keyid:DC:FF:85:BB:8A:37:59:52:3E:0C:C9:F8:A9:1D:BD:AF:47:4D:6B:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3P-Fu4o3WVI-DMn4qR29r0dNa3w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/dB3S_KwDHivcdVIg0-g_TUem2-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/ecd7fc-3ef7-4326-a4ef-5bc302b4b5fc/1/3P-Fu4o3WVI-DMn4qR29r0dNa3w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.171.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:83:07:f4:59:60:2f:2e:1b:de:ab:eb:e8:2d:28:ad:4c:d1:
7e:a4:0c:7e:34:57:52:55:76:2f:d6:31:77:15:41:a2:ac:cd:
68:5d:19:52:bc:38:24:da:c1:a8:9a:5f:46:65:1c:fd:47:7e:
e7:5e:c9:0e:f2:67:6c:e1:24:45:aa:2f:c4:2e:af:66:21:dc:
55:dd:54:22:08:1c:ec:5a:a5:77:a0:9c:73:95:56:03:16:9a:
67:c4:03:ae:f0:a0:4f:b6:88:f3:54:d1:3e:c7:66:ba:74:f3:
24:29:c6:fd:75:8e:34:88:38:43:13:b3:e5:02:8e:71:c8:44:
43:49:cb:c0:29:a2:81:81:59:67:f8:b2:3e:59:5e:bc:94:3d:
0e:0c:3b:41:f6:8e:29:53:b4:63:79:bf:f0:37:6d:52:a6:72:
16:20:b8:e3:f7:f1:92:b0:92:b5:01:1c:a7:9e:94:fa:c6:ef:
83:0f:68:78:48:62:67:78:d5:ff:9f:42:3c:79:e4:9f:a9:a4:
ac:69:69:7b:fa:85:2d:08:98:8c:29:aa:f7:02:0d:39:fa:68:
e8:c8:bb:23:72:11:de:ec:cc:0c:d6:b1:ae:80:eb:67:56:90:
e8:5c:8d:4d:86:3b:fb:85:76:99:15:17:73:5b:9e:cd:94:b4:
90:de:23:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 10:36:22 2025 by rpki-client