Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/oMFsZa-WZ4DjlpRy-B-d08CrAqU.roa
File: oMFsZa-WZ4DjlpRy-B-d08CrAqU.roa (raw, json)
Hash identifier: ab3ovh0Gyl+2L5XY1T5u328BleiZ4HNb965oel1GfwY=
Subject key identifier: A0:C1:6C:65:AF:96:67:80:E3:96:94:72:F8:1F:9D:D3:C0:AB:02:A5
Certificate issuer: /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial: 0189DF16C329AF3130F2A04CA03EB3226E7E
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/oMFsZa-WZ4DjlpRy-B-d08CrAqU.roa
Signing time: Thu 10 Aug 2023 10:55:58 +0000
ROA not before: Thu 10 Aug 2023 10:55:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51741
IP address blocks: 91.217.219.0/24 maxlen: 24
2a12:62c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:df:16:c3:29:af:31:30:f2:a0:4c:a0:3e:b3:22:6e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Validity
Not Before: Aug 10 10:55:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0c16c65af966780e3969472f81f9dd3c0ab02a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bf:52:19:5b:6b:9b:1b:1d:3c:2b:7d:26:8e:
be:5c:af:e9:26:1e:85:e1:2d:5a:b8:04:c0:a7:b1:
11:d8:92:bb:6a:eb:cc:92:95:68:34:17:20:9a:a6:
7f:7f:f4:0d:12:cb:23:90:b3:c4:cf:5e:4b:aa:86:
ea:96:ad:e5:b4:aa:ec:73:2e:8f:25:da:d5:43:61:
ca:1f:96:8b:e4:62:f9:45:09:c3:dc:a9:ec:0a:b1:
32:8d:7a:fe:23:3a:2a:76:55:04:17:75:fc:ce:e8:
f3:b3:a5:5a:87:9f:f5:fd:9d:76:73:38:15:6e:7e:
b7:cc:f2:84:8f:8a:3d:8a:42:73:75:6c:2b:2a:73:
f9:d9:40:05:de:83:85:71:fd:e7:57:85:8b:3e:8c:
9c:42:57:51:57:29:96:e4:7f:71:ef:cc:9b:cc:a2:
60:81:19:49:d0:ce:6f:72:24:b2:44:b5:40:bb:fd:
32:0e:2e:54:3a:5f:74:cc:09:01:6c:c4:e8:6a:7c:
cc:8c:f4:90:8d:40:43:aa:35:e1:e9:fb:34:e6:25:
0a:d8:03:2a:84:a7:5e:1f:d5:11:88:f4:01:3c:85:
85:a2:f2:07:b4:96:fd:cc:e8:a6:ca:26:1a:03:13:
e4:67:71:e8:ce:7f:73:5e:eb:02:74:7c:5a:ec:ed:
61:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:C1:6C:65:AF:96:67:80:E3:96:94:72:F8:1F:9D:D3:C0:AB:02:A5
X509v3 Authority Key Identifier:
keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/oMFsZa-WZ4DjlpRy-B-d08CrAqU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.219.0/24
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
4a:54:f1:0d:4f:e3:7f:46:dc:2c:97:5a:be:cb:1d:b8:6a:a0:
e9:b3:bf:8d:0d:2d:d8:e3:af:16:dd:eb:f1:df:11:25:3a:8b:
4f:18:eb:7d:ac:55:66:54:b2:cf:5f:57:d4:c8:04:07:34:4d:
b5:49:a0:58:38:cf:78:b6:25:86:7e:34:a3:fa:7c:ed:08:e7:
67:06:a8:28:69:cd:4f:13:be:a0:38:f9:96:7c:8f:42:a2:75:
2a:70:9f:ef:85:75:e4:c1:d4:ad:67:e8:5a:7c:5e:cc:27:15:
fd:21:93:e6:32:c4:59:24:9f:54:2b:d7:fc:23:dd:3d:89:d3:
30:ad:19:69:f6:53:2d:59:31:11:5e:a9:ed:1e:db:14:47:a4:
d7:f7:24:14:fd:85:f2:8d:fc:94:8f:db:1f:05:9f:77:9d:98:
35:38:c7:a4:d1:d5:e3:f0:fb:9b:3a:c4:d9:d1:19:8b:da:5b:
2a:b8:90:0e:92:be:23:10:34:ee:49:a3:da:b7:97:43:11:e3:
a1:f8:7f:79:4b:09:7c:cc:f9:7e:d6:1e:75:1e:8c:ec:1c:37:
b8:76:9e:b3:e4:72:58:70:e3:9d:a9:6d:de:55:2a:ec:1e:7d:
a8:09:88:67:8d:87:aa:fe:18:a7:b2:06:4e:d5:ff:cf:61:99:
77:4b:b7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:41:25 2025 by rpki-client