Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/f9e8e0-57d4-45c1-96db-28e1cca65e89/1/1-vT9XC8lApVbM_7-_xhSym0rbvs.roa
File: 1-vT9XC8lApVbM_7-_xhSym0rbvs.roa (raw, json)
Hash identifier: dixoA3ZF1DN1s1aTvhFnwH2Ay+q/Fw5vpk0v9U418gw=
Subject key identifier: FA:F4:FD:5C:2F:25:02:95:5B:33:FE:FE:FF:18:52:CA:6D:2B:6E:FB
Certificate issuer: /CN=3e13eb62fc7dff07ef0053317b4f67ebb14c7dba
Certificate serial: 0956475A
Authority key identifier: 3E:13:EB:62:FC:7D:FF:07:EF:00:53:31:7B:4F:67:EB:B1:4C:7D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PhPrYvx9_wfvAFMxe09n67FMfbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/f9e8e0-57d4-45c1-96db-28e1cca65e89/1/1-vT9XC8lApVbM_7-_xhSym0rbvs.roa
Signing time: Sat 01 Jan 2022 03:51:35 +0000
ROA not before: Sat 01 Jan 2022 03:51:35 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 205444
IP address blocks: 91.228.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 156649306 (0x956475a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e13eb62fc7dff07ef0053317b4f67ebb14c7dba
Validity
Not Before: Jan 1 03:51:35 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=faf4fd5c2f2502955b33fefeff1852ca6d2b6efb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:97:04:c3:53:e9:ee:b6:44:01:07:cc:9d:71:
db:43:8b:de:94:b5:c1:89:af:2d:85:2f:2c:7e:5e:
1b:9f:13:bf:bd:d1:1c:62:42:88:49:6c:1c:75:7c:
6c:9f:b8:05:17:67:11:a4:24:1c:28:42:68:55:60:
41:a1:88:45:cc:fd:86:6e:c1:7a:77:35:18:fc:d1:
e2:cb:5b:51:59:99:50:bb:4d:b8:00:27:2f:d3:ff:
79:bd:9c:40:5c:61:80:8f:aa:98:53:92:0c:e7:33:
f8:e6:f9:ba:39:93:7a:0d:03:da:87:60:02:61:74:
8d:eb:9d:64:24:59:75:06:bb:08:f0:7d:0c:78:a3:
8a:81:51:78:f0:89:45:36:75:4e:92:8a:6a:2e:8c:
dc:c7:4a:e6:46:62:3f:45:98:c0:9f:d2:69:81:09:
8f:06:95:fb:8a:52:2f:6d:28:9a:fd:bf:79:fd:12:
fd:be:b5:44:9f:76:c0:02:ed:f1:8f:22:7a:93:c9:
1b:6b:4c:f4:85:39:a4:31:a4:52:8b:cc:0e:0b:83:
c0:34:29:49:29:f0:34:e8:cf:9a:50:d4:e9:91:7d:
56:34:24:a0:29:68:9e:0a:b4:a8:88:8e:b3:25:36:
21:4e:8d:ac:8a:2d:e8:23:ea:ed:7a:8c:69:1b:48:
11:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:F4:FD:5C:2F:25:02:95:5B:33:FE:FE:FF:18:52:CA:6D:2B:6E:FB
X509v3 Authority Key Identifier:
keyid:3E:13:EB:62:FC:7D:FF:07:EF:00:53:31:7B:4F:67:EB:B1:4C:7D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PhPrYvx9_wfvAFMxe09n67FMfbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f9e8e0-57d4-45c1-96db-28e1cca65e89/1/1-vT9XC8lApVbM_7-_xhSym0rbvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/f9e8e0-57d4-45c1-96db-28e1cca65e89/1/PhPrYvx9_wfvAFMxe09n67FMfbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.227.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:1d:00:ca:e5:ac:98:9d:77:a3:0f:03:46:13:8a:28:ad:ed:
27:50:b0:9e:88:ad:d7:70:35:03:e2:c1:45:b2:f3:06:29:82:
d3:02:b9:94:d5:f7:42:4f:09:41:a8:12:7f:5e:43:ac:d8:e3:
9f:71:fa:80:95:d9:8e:f7:30:a1:88:29:4b:d5:00:72:81:20:
e3:8b:80:86:3f:ad:6b:ec:56:6a:bc:bf:46:e1:79:8d:90:61:
3c:e3:80:40:66:80:91:04:36:8c:19:6b:dc:bc:2d:12:1a:3d:
12:ba:30:72:b2:3c:99:e8:5c:d9:c7:19:4d:1d:e4:bd:fc:46:
68:1b:25:87:5e:09:8b:0d:ac:26:ef:72:e2:49:01:c7:b4:f6:
4a:c9:cb:be:df:1d:f2:a9:a8:54:61:b0:8e:2f:15:60:93:10:
4c:04:37:1a:7e:39:f5:a5:cf:4c:a7:99:b0:8c:24:d2:01:33:
5b:f7:60:c6:a3:79:e2:85:d8:67:80:e1:74:9f:e1:b6:8f:58:
d1:47:e0:78:bb:72:59:ed:1f:9b:23:af:d4:7b:f8:5f:d2:46:
10:78:9a:8a:8e:dd:9e:4d:29:7f:e0:33:24:3d:61:43:0d:31:
41:fd:7a:51:4d:75:7d:9e:b0:91:b1:a8:67:46:2c:08:7f:5b:
90:df:c3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 12:13:46 2025 by rpki-client