Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/yM0A9gpw4RumSpohQJPDwQt-OJI.roa
File: yM0A9gpw4RumSpohQJPDwQt-OJI.roa (raw, json)
Hash identifier: o317PsRu6XnyyUGQZzptrJh/JfByGWRsa2FLneUzdHo=
Subject key identifier: C8:CD:00:F6:0A:70:E1:1B:A6:4A:9A:21:40:93:C3:C1:0B:7E:38:92
Certificate issuer: /CN=3f283af20fe6cf39100169d776bafa78241f44ed
Certificate serial: 01856BE5849C5AC5239B15AB354CFDCA18B6
Authority key identifier: 3F:28:3A:F2:0F:E6:CF:39:10:01:69:D7:76:BA:FA:78:24:1F:44:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pyg68g_mzzkQAWnXdrr6eCQfRO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/yM0A9gpw4RumSpohQJPDwQt-OJI.roa
Signing time: Sun 01 Jan 2023 05:54:41 +0000
ROA not before: Sun 01 Jan 2023 05:54:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210439
IP address blocks: 91.202.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:e5:84:9c:5a:c5:23:9b:15:ab:35:4c:fd:ca:18:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f283af20fe6cf39100169d776bafa78241f44ed
Validity
Not Before: Jan 1 05:54:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8cd00f60a70e11ba64a9a214093c3c10b7e3892
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e6:81:dc:49:bf:11:d9:3d:42:21:a6:d4:ab:
15:66:fd:42:e1:83:3d:33:be:c7:67:c6:d3:69:db:
bf:37:a8:fb:f5:48:2e:26:86:9e:72:49:c4:6c:0f:
8e:72:e9:f3:87:1b:b6:02:8c:5e:0f:33:ae:50:71:
0f:cb:08:49:06:12:34:b8:12:51:9a:25:1f:de:c2:
83:17:36:33:bb:a5:31:f0:25:01:32:05:17:49:29:
67:0b:9a:2f:da:ab:fb:07:c8:05:46:1a:ff:2a:3b:
f5:a8:68:02:db:a2:5f:57:69:54:cc:eb:80:e2:54:
c5:74:e8:41:d5:3b:70:74:5a:71:04:f0:64:ae:81:
c3:ec:1d:22:13:b7:16:2d:09:93:c6:dd:b3:27:7f:
6f:10:64:bc:3e:a7:a1:99:5b:c8:8f:ba:94:a4:d9:
e7:1b:83:e7:64:88:3d:a3:e6:f5:ed:8c:68:3f:4c:
f6:fa:f6:0b:ec:cb:13:11:77:66:71:14:c4:74:3a:
18:41:16:5c:1f:54:3d:eb:24:08:ef:e0:47:c6:4e:
e5:01:56:1c:4a:bc:4c:2b:66:47:bb:61:ba:5c:2c:
14:fa:81:f8:79:e8:d0:e2:c6:a3:e4:7c:79:ef:01:
00:f3:d4:66:5d:dc:1b:a6:42:f4:b7:8e:92:fb:ed:
83:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:CD:00:F6:0A:70:E1:1B:A6:4A:9A:21:40:93:C3:C1:0B:7E:38:92
X509v3 Authority Key Identifier:
keyid:3F:28:3A:F2:0F:E6:CF:39:10:01:69:D7:76:BA:FA:78:24:1F:44:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyg68g_mzzkQAWnXdrr6eCQfRO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/yM0A9gpw4RumSpohQJPDwQt-OJI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/Pyg68g_mzzkQAWnXdrr6eCQfRO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.211.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:49:78:d6:68:d2:df:df:e5:a7:6f:23:d3:bd:b5:1e:54:33:
0d:10:e0:3e:21:36:1a:b8:50:d5:f0:5d:c5:c2:9c:56:10:ff:
fb:44:7b:dd:dd:fd:ac:bf:71:e0:d5:aa:d6:48:88:b0:04:9b:
b1:0c:f7:0f:f6:97:4b:51:55:42:0b:68:9a:7c:fe:12:84:9e:
6c:48:5b:d5:f4:bb:a8:4d:6c:11:3f:1a:28:ab:8f:d0:b2:73:
c5:44:ab:02:68:fb:ac:37:ba:1e:45:41:d4:66:2e:33:f0:cf:
f1:b0:e3:5c:af:94:b8:f0:c7:40:0a:09:e5:2b:bf:ca:16:8b:
0a:0c:e0:62:c9:6b:c1:5f:ec:6b:6d:67:7c:72:1e:de:bf:85:
e3:9c:7f:e7:4e:98:ae:39:01:10:c1:2f:85:6d:20:07:f5:c8:
6c:a6:da:fa:cc:4e:cb:98:bd:10:61:f4:3e:a4:ee:bf:e2:2b:
6e:18:39:06:0c:7f:0d:7f:ff:15:07:a8:d2:df:2a:6a:ca:99:
81:8f:2d:a0:5d:ba:7a:a7:85:c2:bd:96:e7:9b:b3:c5:31:52:
28:4f:60:15:31:09:2d:b6:32:bf:f6:14:07:99:5a:c4:dd:5b:
03:4c:07:8e:87:fc:4b:60:43:95:04:a6:32:63:44:59:96:54:
49:61:c6:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:06 2025 by rpki-client