Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ad3465-f579-45df-9a22-bf939cdaef4e/1/1-mOxY1725Dos4AfUbk_SpfvHoHM.roa
File: 1-mOxY1725Dos4AfUbk_SpfvHoHM.roa (raw, json)
Hash identifier: V+GWdkGHcDYuTDDuHtne7zEmRR5HZ+xIzq8YahB8BrA=
Subject key identifier: FA:63:B1:63:5E:F6:E4:3A:2C:E0:07:D4:6E:4F:D2:A5:FB:C7:A0:73
Certificate issuer: /CN=a715df52d71732aa12ef12e0ad29bbb3693cd204
Certificate serial: F016
Authority key identifier: A7:15:DF:52:D7:17:32:AA:12:EF:12:E0:AD:29:BB:B3:69:3C:D2:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxXfUtcXMqoS7xLgrSm7s2k80gQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ad3465-f579-45df-9a22-bf939cdaef4e/1/1-mOxY1725Dos4AfUbk_SpfvHoHM.roa
Signing time: Mon 20 Jun 2022 16:38:44 +0000
ROA not before: Mon 20 Jun 2022 16:38:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43099
IP address blocks: 91.194.66.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 61462 (0xf016)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a715df52d71732aa12ef12e0ad29bbb3693cd204
Validity
Not Before: Jun 20 16:38:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fa63b1635ef6e43a2ce007d46e4fd2a5fbc7a073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:c4:e6:22:dd:51:71:64:5f:eb:12:19:c4:7d:
a6:ed:11:ff:e7:d4:a9:e7:2d:34:ba:75:c0:1f:fe:
1c:19:e4:8f:43:29:29:b8:36:36:c1:97:e7:dd:38:
e0:d0:b6:cf:f7:e8:df:62:37:6e:ac:f7:38:33:b9:
8e:fe:fc:f8:bc:d8:9a:a0:b0:67:2d:a8:d5:94:dd:
ac:a5:c0:5a:e9:1b:6b:32:10:00:30:2e:c8:ac:fc:
81:8b:8b:3f:e0:f0:d8:f8:3b:99:17:d5:fd:ae:c4:
86:0d:71:77:c0:51:87:33:84:14:2f:5b:45:f8:4a:
f3:bd:96:f9:cd:48:f1:e6:7d:d5:e5:29:c4:ad:84:
30:35:29:d9:7c:9b:68:57:40:ff:91:54:79:16:49:
22:c2:27:87:b4:76:16:7d:7b:50:6f:a7:51:d7:b5:
13:0f:6e:9a:77:68:98:a9:2f:cf:cb:73:ac:15:d9:
2f:e0:86:47:39:b1:39:63:1b:ca:b7:9a:5b:29:c8:
59:bc:2c:45:3b:fe:9d:45:d3:74:80:ec:d6:c9:6e:
4f:d8:e1:92:c9:df:14:6f:cf:58:d9:72:8f:67:19:
54:a9:22:a2:b3:c2:e5:99:93:87:63:08:c3:91:3b:
fc:47:85:7e:14:b6:87:66:6b:9f:c2:45:5d:78:a6:
6f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:63:B1:63:5E:F6:E4:3A:2C:E0:07:D4:6E:4F:D2:A5:FB:C7:A0:73
X509v3 Authority Key Identifier:
keyid:A7:15:DF:52:D7:17:32:AA:12:EF:12:E0:AD:29:BB:B3:69:3C:D2:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxXfUtcXMqoS7xLgrSm7s2k80gQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad3465-f579-45df-9a22-bf939cdaef4e/1/1-mOxY1725Dos4AfUbk_SpfvHoHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ad3465-f579-45df-9a22-bf939cdaef4e/1/pxXfUtcXMqoS7xLgrSm7s2k80gQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.66.0/23
Signature Algorithm: sha256WithRSAEncryption
85:1b:26:ce:43:a3:19:18:50:cd:58:a9:ab:9b:9c:20:12:85:
aa:46:64:71:95:6e:5d:11:55:d3:d6:83:cd:95:b2:5c:a5:50:
7a:eb:36:7d:3a:f1:af:88:22:c1:eb:ad:b9:d0:81:d2:9d:e3:
14:2b:81:bc:84:13:22:df:2f:36:94:3d:9d:3d:8b:4e:f8:f8:
d5:96:73:97:b6:cd:81:9e:96:1a:a5:fb:58:6f:16:1a:48:55:
41:43:6a:da:a1:72:2c:c2:3d:e9:44:05:53:04:e1:ff:2a:70:
2d:34:a9:15:1d:96:cf:69:4d:1d:3c:b2:26:d6:02:c4:c3:46:
79:07:05:06:06:c2:03:1b:01:ca:66:94:43:48:21:31:3a:5c:
b9:e4:ce:47:f2:3a:9f:86:18:54:36:10:d2:08:77:6a:95:a3:
98:01:a4:20:d6:46:26:d2:6b:b6:73:75:94:5b:40:9c:1a:67:
1d:7b:44:8b:b5:cc:4a:22:dc:a3:ec:5f:6e:4a:9e:cd:3d:31:
99:e1:b7:10:e0:53:3e:7a:5e:e3:61:61:7f:19:f3:18:58:a1:
a5:aa:53:8f:b6:c9:59:24:73:d2:ed:d2:b5:60:30:6a:11:e5:
5b:9b:8a:bd:4f:b8:76:ad:e2:20:6c:0d:32:8e:24:ec:7d:2e:
7d:c0:fc:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:33:54 2025 by rpki-client