Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/7vpF6HPIny42ZqUYBbAi_Av9exY.roa
File: 7vpF6HPIny42ZqUYBbAi_Av9exY.roa (raw, json)
Hash identifier: xICX/CgyDIuf7VSpQTSllY7eoFjXya3SEwK7BzXEzWU=
Subject key identifier: EE:FA:45:E8:73:C8:9F:2E:36:66:A5:18:05:B0:22:FC:0B:FD:7B:16
Certificate issuer: /CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Certificate serial: 049026E2
Authority key identifier: 3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/7vpF6HPIny42ZqUYBbAi_Av9exY.roa
Signing time: Wed 22 Jun 2022 03:42:45 +0000
ROA not before: Wed 22 Jun 2022 03:42:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.193.232.0/22 maxlen: 24
91.220.249.0/24 maxlen: 24
152.89.194.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76556002 (0x49026e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3cdcc8bcdb6c744acdf43dd72d68d20451a179f6
Validity
Not Before: Jun 22 03:42:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eefa45e873c89f2e3666a51805b022fc0bfd7b16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:d9:7e:ec:ca:c3:32:58:f4:ef:bf:0a:91:9e:
11:a8:b6:1d:5d:70:07:fd:a5:e6:0d:40:37:3d:1c:
fb:8c:c1:6b:6a:26:0a:32:97:07:9a:a3:b7:18:8f:
cd:a8:69:b8:42:0c:23:d3:33:7c:37:e2:ea:86:1a:
9f:16:79:61:ee:7d:64:c0:6a:be:18:45:13:7c:40:
49:f2:96:6a:72:77:f9:d2:ca:5c:29:9b:f7:a4:7a:
d9:57:cc:b4:70:e9:67:95:64:3f:da:71:4f:a6:4c:
30:0d:7d:56:37:34:b6:b1:72:25:12:85:0b:cb:39:
06:b2:0b:c1:95:43:63:96:1a:11:7d:28:f3:a0:ca:
e3:8c:6e:44:65:e3:70:ed:84:83:66:32:41:cc:1d:
ae:18:15:3b:74:40:6d:39:18:8b:18:ef:df:1b:41:
d6:14:f7:26:34:ae:11:54:8c:37:a7:e0:9e:e6:2f:
a8:bf:3b:36:e5:9e:ad:1d:b8:79:fa:c7:f7:71:4b:
37:c0:01:39:da:f0:db:d3:aa:ff:ef:b1:91:1b:05:
5e:81:48:3a:11:c9:5a:59:e0:1d:1e:04:47:e1:24:
4e:0c:67:b8:e4:30:ce:29:e0:45:c7:69:24:ee:ff:
02:ce:28:cc:2a:13:90:77:57:15:ca:4a:11:79:7e:
f5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:FA:45:E8:73:C8:9F:2E:36:66:A5:18:05:B0:22:FC:0B:FD:7B:16
X509v3 Authority Key Identifier:
keyid:3C:DC:C8:BC:DB:6C:74:4A:CD:F4:3D:D7:2D:68:D2:04:51:A1:79:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PNzIvNtsdErN9D3XLWjSBFGhefY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/7vpF6HPIny42ZqUYBbAi_Av9exY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/356826-fc10-4aa9-96a4-637b371da8e6/1/PNzIvNtsdErN9D3XLWjSBFGhefY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.232.0/22
91.220.249.0/24
152.89.194.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:58:51:21:40:bf:3c:6c:b9:42:63:f7:6b:25:37:10:12:67:
92:45:22:70:e9:70:33:12:b8:67:11:45:f4:dd:6c:c3:46:5d:
c4:32:b3:81:9b:a9:a2:0f:39:e7:74:52:df:04:73:bc:86:de:
b6:5c:6b:b3:1a:f3:fe:5b:ea:b6:2b:b3:2f:bd:72:ea:64:0d:
fd:54:45:bd:4a:09:53:7b:c6:51:c8:66:f4:75:eb:2f:ce:f3:
98:4d:0c:10:aa:41:8b:80:56:41:de:1d:0f:00:48:0e:a7:09:
86:4c:da:86:82:92:35:84:08:a8:4f:9c:2a:8b:a2:c3:fe:12:
98:2a:9a:50:b4:1c:3d:4e:da:f4:ab:5a:16:c9:16:87:58:4d:
9f:bb:04:ed:4c:fc:24:10:6c:6e:ec:d3:65:34:0a:36:07:de:
0c:cc:4e:05:f1:15:b9:0e:fa:5f:d5:8d:2c:db:0d:b0:e1:be:
68:9b:34:c2:32:3a:ea:45:d6:a7:04:f1:e6:51:fe:95:ef:ab:
ca:38:c6:2c:1b:c4:bc:dc:a3:2a:5b:c0:04:fb:44:e7:d3:d0:
5a:ce:ec:e6:64:80:1f:b1:c1:0d:6d:1d:ec:da:53:23:7b:1e:
b0:b3:ec:5e:be:7b:3c:e5:93:ea:02:43:c4:27:e9:6c:e8:13:
93:ac:d6:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:53:34 2025 by rpki-client