Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/MF3wu2u0Sf7Pw7wBuriZie5Tt3s.roa
File: MF3wu2u0Sf7Pw7wBuriZie5Tt3s.roa (raw, json)
Hash identifier: cmDdTHFXdwgNp8Uokat2nTPEDxqwB3U6jx6lM6Ft0ks=
Subject key identifier: 30:5D:F0:BB:6B:B4:49:FE:CF:C3:BC:01:BA:B8:99:89:EE:53:B7:7B
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 0182010FD12AD8E5DF92B6DC4D1CF95665AB
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/MF3wu2u0Sf7Pw7wBuriZie5Tt3s.roa
Signing time: Fri 15 Jul 2022 08:53:09 +0000
ROA not before: Fri 15 Jul 2022 08:53:09 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 207326
IP address blocks: 91.147.124.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:01:0f:d1:2a:d8:e5:df:92:b6:dc:4d:1c:f9:56:65:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Jul 15 08:53:09 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=305df0bb6bb449fecfc3bc01bab89989ee53b77b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d6:4d:78:df:59:31:d9:19:19:c5:82:8d:bb:
1a:cb:83:97:90:51:3a:27:e0:e8:09:a1:8c:aa:c1:
96:f0:e1:bd:54:4e:15:e2:82:44:91:a5:4a:d6:76:
0d:c5:76:bf:ad:d0:d2:0b:64:88:72:1d:f5:ba:11:
2c:45:50:d2:52:6f:33:a5:ff:31:71:0f:fd:c2:c9:
f4:5e:28:fa:ef:26:69:69:64:b6:80:96:76:d0:93:
b8:b3:4a:f4:d6:37:55:c2:f2:fc:09:84:d0:c1:35:
40:d4:46:cc:1b:2b:0e:54:23:c6:43:90:25:74:e5:
5b:7d:54:69:88:ab:e5:c8:09:4b:4f:05:6a:24:a1:
86:40:2c:38:47:15:89:48:a6:2b:2e:68:51:ac:1b:
af:76:0e:f8:3f:b7:b3:30:30:df:d3:a5:73:22:9a:
3f:75:01:59:35:76:1d:96:10:55:2e:01:1e:e1:20:
7a:4f:60:82:d5:6c:ee:63:6c:76:9e:2c:68:0a:30:
2a:5a:44:7d:b4:51:c8:68:1e:70:7e:1f:3b:e1:82:
b4:a7:4f:b4:44:6b:dd:0b:65:d4:14:09:9d:3d:a9:
00:50:5d:89:8f:49:c8:2c:bf:0f:86:8e:50:9c:20:
cb:84:2c:31:99:4e:d3:14:e7:09:24:e8:08:2c:38:
89:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:5D:F0:BB:6B:B4:49:FE:CF:C3:BC:01:BA:B8:99:89:EE:53:B7:7B
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/MF3wu2u0Sf7Pw7wBuriZie5Tt3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.147.124.0/22
Signature Algorithm: sha256WithRSAEncryption
94:d6:18:6a:4f:70:58:ee:7a:ec:f6:bc:01:ad:22:a3:36:e7:
45:22:4a:66:42:d9:11:2b:c7:2e:8c:cf:01:92:50:b3:02:aa:
98:80:12:26:b6:eb:72:d2:31:6a:0b:e5:97:b3:19:87:1f:37:
32:be:ec:57:3f:51:6e:52:dc:a5:a1:14:7a:ae:0d:cc:e9:5e:
51:24:2d:4d:5f:25:a7:bd:7a:c8:d1:91:11:8d:54:08:4b:ab:
7e:ac:9d:51:96:1c:9f:59:4b:6d:bd:e2:e3:e3:bc:96:44:44:
32:59:14:07:b1:5d:72:15:dc:8e:96:30:3d:4c:50:14:32:39:
40:fe:97:3e:a1:6d:9c:54:1c:24:77:c2:d4:d5:2f:af:1e:1d:
13:56:d3:2c:5f:1f:27:68:8c:32:c7:51:3b:3a:99:0a:9f:2a:
7e:b6:ae:b3:fd:bd:20:1e:4f:7a:bd:fb:0c:1d:50:ff:d5:1a:
8b:e5:58:c9:71:82:1f:a1:a6:d2:9f:e8:fe:fa:c7:bc:de:fe:
7e:42:e3:af:f8:10:6e:02:53:b0:fc:37:dc:38:2c:43:2e:d2:
b4:15:e1:ae:68:c3:d5:b3:09:59:ee:e9:db:f7:5e:92:8d:7e:
1a:08:ff:84:61:a9:9e:52:88:cf:28:a2:d1:aa:62:eb:6f:d4:
b5:2b:fe:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 21:57:50 2025 by rpki-client