Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/ACwkKTOaUdmAPFZq894nIm1awTo.roa
File: ACwkKTOaUdmAPFZq894nIm1awTo.roa (raw, json)
Hash identifier: 3/cUFDFkGCE4W/y2kGJPEtb/EVTOEFJSrsbB6gl5lk8=
Subject key identifier: 00:2C:24:29:33:9A:51:D9:80:3C:56:6A:F3:DE:27:22:6D:5A:C1:3A
Certificate issuer: /CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Certificate serial: 043F24AD
Authority key identifier: 0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/ACwkKTOaUdmAPFZq894nIm1awTo.roa
Signing time: Sat 01 Jan 2022 04:58:47 +0000
ROA not before: Sat 01 Jan 2022 04:58:47 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48173
IP address blocks: 91.229.178.0/23 maxlen: 24
193.169.180.0/23 maxlen: 24
91.241.72.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 71247021 (0x43f24ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d7413dcf537374a70daa31fd9a99fd29b033239
Validity
Not Before: Jan 1 04:58:47 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=002c2429339a51d9803c566af3de27226d5ac13a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:c0:60:15:d4:4c:d0:a5:d6:ac:03:a4:da:52:
f2:c0:c4:d6:85:75:97:ac:32:a6:b3:9f:5e:ac:51:
2f:41:d6:61:34:43:be:e8:99:b3:84:79:1a:12:d7:
1e:bd:1a:ca:fb:94:01:9f:6c:68:ae:63:67:8b:d0:
da:41:e4:33:47:e7:1b:87:66:33:d4:a8:86:9e:f9:
5c:c8:d9:9a:79:93:0e:cd:e4:c2:68:46:25:c9:ee:
6b:0e:8a:aa:c0:f6:e7:86:6a:a3:8d:69:a5:34:8e:
4e:6f:ff:89:02:84:64:70:1e:1b:c8:52:76:f2:fe:
04:d4:98:e5:ef:8a:90:e9:b5:e3:81:70:f5:9d:15:
08:e0:db:31:2f:34:8a:7d:86:01:73:cb:5c:1c:d1:
69:28:4b:5c:1a:1a:f4:5f:d2:82:65:5b:83:6b:ef:
63:46:f9:76:3c:b0:ee:eb:cd:c6:c6:c8:83:6b:a2:
a5:3e:de:e1:2c:3b:3c:c0:fa:00:41:07:2a:17:f5:
31:b7:59:e0:7f:87:c1:30:7f:d0:b7:1e:79:dc:76:
08:13:a8:01:5a:fe:4d:44:f1:67:e2:ca:35:de:6c:
6c:39:55:b6:4b:19:16:7e:26:38:80:01:15:27:bd:
90:a8:cb:f4:b4:d0:91:c0:17:e8:1e:42:6c:61:83:
70:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:2C:24:29:33:9A:51:D9:80:3C:56:6A:F3:DE:27:22:6D:5A:C1:3A
X509v3 Authority Key Identifier:
keyid:0D:74:13:DC:F5:37:37:4A:70:DA:A3:1F:D9:A9:9F:D2:9B:03:32:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXQT3PU3N0pw2qMf2amf0psDMjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/ACwkKTOaUdmAPFZq894nIm1awTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/e326b9-795f-4a0b-9efd-e69be395b0f7/1/DXQT3PU3N0pw2qMf2amf0psDMjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.178.0/23
91.241.72.0/22
193.169.180.0/23
Signature Algorithm: sha256WithRSAEncryption
91:04:48:32:dc:a0:b2:84:ad:e8:ad:aa:f9:90:5e:19:f5:39:
85:05:97:aa:dd:3d:92:12:8b:13:5a:48:2b:46:0b:f3:7b:cc:
69:60:64:bd:69:f0:5d:23:02:32:7f:76:0a:42:69:90:83:26:
1d:d6:6e:6e:6b:73:6a:a0:c8:22:6a:fb:2f:25:bc:76:9c:02:
6d:01:ce:45:d4:db:82:14:8c:12:a9:ac:ba:fc:91:91:67:52:
a4:99:ce:7c:b5:54:73:33:23:c8:8b:ec:19:81:86:ab:20:cf:
93:38:0f:cd:15:ed:74:36:ec:c1:26:61:32:e1:81:5d:fd:4d:
1b:c9:9f:c7:ab:ab:9e:85:17:22:5d:53:ed:3e:f2:87:a8:d9:
88:06:1d:cc:44:4e:b4:15:99:4c:aa:ce:ca:fc:9b:87:3d:19:
0e:39:08:e0:61:32:11:d8:9f:fe:2a:c6:a7:f6:2f:d8:10:6f:
77:03:2d:fc:b6:0a:5a:e8:0f:58:29:c8:f1:5e:a9:d0:0c:a1:
94:93:2d:90:b8:a2:57:50:e8:8c:09:44:ba:06:c5:a3:57:95:
90:f1:22:92:16:50:b5:c1:51:dc:e0:e7:c0:87:a1:1b:94:db:
dd:d0:e8:af:4e:68:c0:87:48:1a:26:bd:fa:ba:8e:56:32:fd:
bf:e5:7f:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 09:41:44 2025 by rpki-client