Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/70a2e3-371c-458b-93b0-72a526576642/1/4rXiUj0XF7nX4WzApxwH-vA04zg.roa
File: 4rXiUj0XF7nX4WzApxwH-vA04zg.roa (raw, json)
Hash identifier: o4K4OWP5aHkwfjWSEAdyuQ4wDHFnGtIvrtaBWNhqdqU=
Subject key identifier: E2:B5:E2:52:3D:17:17:B9:D7:E1:6C:C0:A7:1C:07:FA:F0:34:E3:38
Certificate issuer: /CN=08f5c6270dea15bf639d0e169ed7b7c1bc326335
Certificate serial: 03E868C8
Authority key identifier: 08:F5:C6:27:0D:EA:15:BF:63:9D:0E:16:9E:D7:B7:C1:BC:32:63:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CPXGJw3qFb9jnQ4Wnte3wbwyYzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/70a2e3-371c-458b-93b0-72a526576642/1/4rXiUj0XF7nX4WzApxwH-vA04zg.roa
Signing time: Sat 01 Jan 2022 11:02:27 +0000
ROA not before: Sat 01 Jan 2022 11:02:27 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 198337
IP address blocks: 91.234.37.0/24 maxlen: 24
2001:67c:438::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65562824 (0x3e868c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08f5c6270dea15bf639d0e169ed7b7c1bc326335
Validity
Not Before: Jan 1 11:02:27 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e2b5e2523d1717b9d7e16cc0a71c07faf034e338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:6d:02:46:6b:fa:16:39:84:9a:df:ab:ba:09:
e7:ca:83:41:13:05:53:86:65:c0:fc:25:6b:0a:45:
29:6f:82:a2:12:17:e4:ce:f3:14:f7:36:5f:85:cc:
98:c6:66:ed:cb:70:f7:de:cd:b1:a1:c9:5c:86:30:
af:0a:ec:5c:6f:d0:a5:35:5c:df:6e:45:07:a7:37:
de:83:db:aa:fa:89:b0:05:3b:7f:03:3e:a6:eb:28:
01:a5:85:46:aa:ec:d1:c5:0d:74:34:7a:25:d0:33:
4b:b1:74:d4:e7:ed:68:99:4f:a6:e9:c3:eb:82:c5:
54:f3:a6:88:ec:7f:cd:71:28:71:8e:46:eb:02:29:
b3:4d:b1:ef:0c:bc:ba:3b:69:6e:83:3d:80:6e:e5:
6a:6f:0c:e9:12:99:f0:70:93:d2:93:61:4c:8f:9d:
20:40:be:10:6d:7f:7f:a8:0a:3c:b2:08:e7:2b:36:
88:9b:2e:30:61:74:a3:3a:79:d1:5a:4b:9e:b5:54:
22:c9:86:de:7b:5e:34:c1:5b:41:7d:56:6a:65:d4:
ad:17:47:cc:fa:54:d9:c1:f4:39:0d:48:d2:9c:98:
51:ce:fa:8e:03:13:3e:e7:76:e2:99:8c:cc:70:6c:
23:91:42:45:b4:42:75:9a:b9:3b:7e:43:b7:25:75:
60:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:B5:E2:52:3D:17:17:B9:D7:E1:6C:C0:A7:1C:07:FA:F0:34:E3:38
X509v3 Authority Key Identifier:
keyid:08:F5:C6:27:0D:EA:15:BF:63:9D:0E:16:9E:D7:B7:C1:BC:32:63:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CPXGJw3qFb9jnQ4Wnte3wbwyYzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/70a2e3-371c-458b-93b0-72a526576642/1/4rXiUj0XF7nX4WzApxwH-vA04zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/70a2e3-371c-458b-93b0-72a526576642/1/CPXGJw3qFb9jnQ4Wnte3wbwyYzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.37.0/24
IPv6:
2001:67c:438::/48
Signature Algorithm: sha256WithRSAEncryption
cd:89:d8:41:f0:d0:34:a0:6b:c0:e9:d2:b9:72:2d:f6:49:a8:
f7:92:22:81:d1:17:53:97:cf:3b:c2:5f:45:b3:18:9c:93:e5:
25:80:71:ab:34:3f:64:08:2a:ee:ab:74:4f:64:dd:08:0a:54:
17:6b:e6:fb:aa:2a:a4:fd:3a:74:dc:ed:7d:e8:77:2e:e1:b2:
c2:9f:4e:23:b3:39:bf:9b:4a:8c:66:31:bc:ff:c3:09:48:d9:
29:24:91:9b:7e:53:35:f8:40:50:2b:25:eb:1a:0a:6b:f5:40:
69:4d:7e:14:ef:8e:29:a8:f3:39:5a:77:cf:5d:ef:be:a8:95:
4c:68:37:d9:70:6d:e3:b2:5d:35:c1:20:1d:ad:d3:75:af:75:
7c:a4:da:9a:b3:a9:ed:8a:31:55:fe:82:5f:4a:11:ff:ff:83:
ee:84:c1:10:49:b5:a5:ca:ac:62:31:2b:a2:a6:20:f0:42:c0:
a1:80:60:a9:25:5a:7d:04:9e:71:2a:45:79:f3:ea:29:4e:21:
b5:a6:64:80:1f:ed:d7:4c:9d:c4:2e:1d:f7:7a:dc:28:fb:e9:
22:d5:64:02:1a:26:eb:8f:ce:cf:4b:54:aa:c2:b4:ee:cc:be:
e3:7c:c8:7e:43:91:8f:c5:66:c4:f2:24:03:19:87:60:e2:34:
5c:7b:1e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 10:56:14 2025 by rpki-client