Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/PY0THkPgz76ZUHlHKK0IwC8X7S0.roa
File: PY0THkPgz76ZUHlHKK0IwC8X7S0.roa (raw, json)
Hash identifier: RVmFhWCyxCdN14LVNln1urKzgAus6urX44YDXCClB/Y=
Subject key identifier: 3D:8D:13:1E:43:E0:CF:BE:99:50:79:47:28:AD:08:C0:2F:17:ED:2D
Certificate issuer: /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial: 30189BF5
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/PY0THkPgz76ZUHlHKK0IwC8X7S0.roa
Signing time: Sat 01 Jan 2022 04:57:41 +0000
ROA not before: Sat 01 Jan 2022 04:57:41 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 20525
IP address blocks: 79.141.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 806919157 (0x30189bf5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
Validity
Not Before: Jan 1 04:57:41 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d8d131e43e0cfbe9950794728ad08c02f17ed2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:45:46:85:16:93:22:f6:cb:e9:34:ed:f0:cb:
d8:5c:60:d9:b5:95:62:53:5a:f9:b4:3c:ea:20:f9:
a7:db:f6:e0:0d:25:2e:e1:ac:c0:24:52:fa:3b:00:
ed:e1:a7:c8:f4:7c:e6:27:86:c8:0f:89:e0:1c:b0:
0e:70:49:0a:1b:f3:17:5a:5b:fa:62:3d:26:5d:71:
f5:9c:42:00:b5:f9:25:cd:2f:30:6b:1a:af:2d:50:
d7:c0:06:9b:64:c9:a4:64:99:8d:6a:8d:6c:34:d8:
ab:1d:ea:3a:44:0d:66:07:15:d2:87:e6:b6:26:67:
dd:73:ae:6c:ee:58:36:09:f7:12:a4:52:20:a5:f3:
5d:81:43:6e:8b:dc:90:96:6b:88:6b:00:e0:38:c1:
c5:f1:67:bb:ed:6d:d5:9b:6b:e2:0d:c3:ff:03:8e:
71:98:ca:b6:43:24:78:98:b1:97:0f:26:97:6f:03:
b3:d3:8a:9a:00:31:60:4d:75:12:a5:b2:48:09:a8:
a1:e2:09:2f:c9:ea:8e:8d:79:14:09:49:31:94:da:
a2:44:77:b6:84:95:0d:d1:dd:05:9c:1b:9c:e9:cb:
54:60:81:79:7b:b1:06:d8:e9:49:15:38:2d:7a:d4:
c2:0f:41:e5:a7:ed:6b:16:5b:e4:55:ee:2b:f4:1e:
28:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:8D:13:1E:43:E0:CF:BE:99:50:79:47:28:AD:08:C0:2F:17:ED:2D
X509v3 Authority Key Identifier:
keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/PY0THkPgz76ZUHlHKK0IwC8X7S0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.141.220.0/22
Signature Algorithm: sha256WithRSAEncryption
aa:46:69:47:ca:b2:ff:7c:ed:ad:eb:49:ab:0e:12:7c:7b:31:
7a:5d:4d:78:33:f2:ac:6d:57:8a:0c:b9:a5:c5:1e:7f:a4:a1:
9a:31:25:fa:e7:9a:c3:f1:0b:3a:e9:e6:bf:7e:d8:d8:64:3a:
ef:36:7e:d7:b3:e5:ce:ae:19:6b:21:58:40:16:13:3e:fa:2f:
d2:7e:57:86:b1:e1:67:af:31:9c:31:ff:15:f3:26:9e:30:ce:
43:6d:18:45:1a:e2:67:9e:46:13:b0:a7:74:d3:0a:a8:dd:b9:
1a:16:8d:0c:75:17:77:ea:17:2c:ea:be:37:10:e9:cb:2e:02:
18:d8:8d:9c:43:fd:1b:e6:2b:af:00:6d:19:e2:53:3d:9c:10:
40:f8:3f:6f:55:f4:0a:e9:62:fa:f1:11:4f:7d:1a:63:7b:3f:
ac:1a:11:fb:dc:8b:cc:10:de:94:81:53:cf:5b:ba:fa:e5:b7:
12:52:ca:41:6c:e1:92:55:42:95:f5:15:6c:24:89:73:43:1f:
8b:b7:77:76:74:e2:b1:9c:0d:32:20:a7:b7:b6:64:3d:6b:5e:
65:af:4a:c7:da:ac:03:59:d5:e5:6f:82:43:b1:74:d6:0f:8d:
30:57:b4:df:17:56:e5:6a:ef:4a:20:dd:9b:fc:79:b3:b0:87:
fd:7f:47:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 22:36:22 2025 by rpki-client