Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/fgyWUKiLE0OZeTUEx0Smms1oGpg.roa
File: fgyWUKiLE0OZeTUEx0Smms1oGpg.roa (raw, json)
Hash identifier: AHeTFnd9/3Ya5gM1/CWDldxtU07jo0EX28tqs9xGzHA=
Subject key identifier: 7E:0C:96:50:A8:8B:13:43:99:79:35:04:C7:44:A6:9A:CD:68:1A:98
Certificate issuer: /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial: 01881A7E5ED9B7B3BEE713141368EE2AF81B
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/fgyWUKiLE0OZeTUEx0Smms1oGpg.roa
Signing time: Sun 14 May 2023 13:41:09 +0000
ROA not before: Sun 14 May 2023 13:41:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51741
IP address blocks: 91.217.219.0/24 maxlen: 24
2a12:62c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1a:7e:5e:d9:b7:b3:be:e7:13:14:13:68:ee:2a:f8:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Validity
Not Before: May 14 13:41:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e0c9650a88b134399793504c744a69acd681a98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:58:27:93:29:46:90:a9:15:fb:59:e4:94:58:
db:e4:9d:b8:a3:6d:2e:4b:46:ca:a6:c5:57:8a:32:
45:49:2e:23:9e:2b:16:8b:7d:ad:59:b1:02:6e:dd:
f1:75:28:f1:e7:f0:2e:d6:bb:70:23:92:60:23:5c:
a3:24:28:5f:c0:c5:9c:d6:47:d8:1f:4c:8a:a6:ca:
2b:41:0f:65:2c:86:12:55:ff:d3:9a:32:fd:1b:56:
bf:8a:a8:d5:63:53:e4:32:80:11:fb:ab:f6:e3:2d:
b6:54:ac:f7:59:99:7a:b7:5f:17:98:19:a3:4d:cd:
f7:cd:81:33:f2:52:7a:39:e6:ec:cc:f3:04:1b:14:
21:da:2b:9f:82:d4:e1:60:e6:3c:5c:7f:4b:14:8c:
a2:9c:79:60:09:73:1d:cc:8d:1c:c1:a0:c6:ac:49:
87:d4:26:48:88:5f:94:38:6e:ae:e5:59:ff:31:6f:
44:f3:a6:3d:8a:85:e5:74:85:20:e3:62:a3:0a:b0:
62:ab:0f:46:0f:ac:c0:00:fe:81:a4:fe:2a:6c:3e:
f0:76:09:88:f1:ab:4b:6c:ad:1f:4c:c8:b0:e0:be:
bb:fe:90:0e:80:f7:8e:76:7d:03:27:49:4d:c1:28:
b4:0c:1b:e7:4d:0e:da:16:0a:54:f3:d9:f0:23:b0:
29:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0C:96:50:A8:8B:13:43:99:79:35:04:C7:44:A6:9A:CD:68:1A:98
X509v3 Authority Key Identifier:
keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/fgyWUKiLE0OZeTUEx0Smms1oGpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.219.0/24
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
06:10:ef:67:04:f9:0c:60:5b:80:60:2d:e3:40:67:27:96:28:
ee:98:30:00:0f:f4:5b:f5:80:50:7b:71:84:d6:60:ae:f9:a9:
dc:3e:3c:87:99:2e:a7:e5:44:62:7f:b8:04:93:e5:f9:b3:42:
da:fb:4b:2b:ae:cf:b7:35:89:39:94:74:d3:7d:eb:68:ff:fb:
56:2a:9f:2c:6f:b9:2b:0d:f0:82:ab:48:1f:b3:cd:cb:63:b9:
b8:90:21:3a:d9:f9:55:2d:70:f4:f1:98:8a:07:4e:59:0a:63:
c7:69:5c:43:66:0c:aa:74:1e:5e:3c:8b:73:68:35:5d:90:01:
97:e2:d9:0b:10:4a:f8:de:f8:28:fd:f9:78:7f:42:a8:6e:fb:
67:f9:fe:5c:2d:9a:ed:b2:4f:f7:69:ca:7d:8f:2d:61:11:1b:
b1:44:28:96:e9:59:85:a1:e2:82:b6:ca:73:d2:98:06:fb:2c:
12:7d:83:ef:69:ba:ae:99:c9:af:0c:8b:7e:be:94:d9:48:62:
f4:94:b2:5d:a1:22:a2:f5:8a:04:63:5f:fc:53:63:d3:d8:da:
10:2b:64:a9:ac:2f:60:39:0e:5a:40:93:ca:2e:5c:c1:4c:33:
03:18:f6:6b:ed:07:12:c2:c0:95:36:b1:59:ac:15:a2:aa:f2:
77:18:62:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 13:09:05 2025 by rpki-client