Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/e1548a-01fb-44d9-a4c3-010eaa33318c/1/_aDcxizzTiuiALsnqRmauFvtCGM.roa
File: _aDcxizzTiuiALsnqRmauFvtCGM.roa (raw, json)
Hash identifier: hmzypAz7PI6Q5ekolL/5K7gu3tzLxLersLRpJGDC1vY=
Subject key identifier: FD:A0:DC:C6:2C:F3:4E:2B:A2:00:BB:27:A9:19:9A:B8:5B:ED:08:63
Certificate issuer: /CN=32ee75ea499da25cddb717cd8b8ea6f030e943c8
Certificate serial: 0AF67B62
Authority key identifier: 32:EE:75:EA:49:9D:A2:5C:DD:B7:17:CD:8B:8E:A6:F0:30:E9:43:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mu516kmdolzdtxfNi46m8DDpQ8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/e1548a-01fb-44d9-a4c3-010eaa33318c/1/_aDcxizzTiuiALsnqRmauFvtCGM.roa
Signing time: Sat 01 Jan 2022 14:58:20 +0000
ROA not before: Sat 01 Jan 2022 14:58:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 200363
IP address blocks: 91.197.232.0/24 maxlen: 24
91.197.233.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 183925602 (0xaf67b62)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32ee75ea499da25cddb717cd8b8ea6f030e943c8
Validity
Not Before: Jan 1 14:58:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fda0dcc62cf34e2ba200bb27a9199ab85bed0863
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:de:78:0e:7d:b4:3a:90:73:15:98:68:62:8f:
ba:b9:61:90:53:87:25:06:8d:c1:38:ea:ab:f3:2c:
2f:fb:b1:e6:b7:7b:14:06:5e:0e:f8:31:ab:b9:98:
ab:dc:a6:31:24:af:02:4d:72:01:40:51:d3:58:fb:
af:f2:f8:8c:09:3d:f7:7f:f5:4e:99:74:33:4a:69:
bc:72:8a:d4:a6:55:be:df:c5:66:e9:ce:65:c1:41:
07:de:54:47:ae:f0:2f:ab:75:05:56:84:ea:83:99:
6d:78:f3:0d:e2:ff:70:bd:71:80:f3:9e:ea:0c:0c:
f5:ec:af:e5:ca:30:71:14:00:f7:b6:c3:ad:2d:57:
20:b3:f9:5f:a9:0f:7e:20:43:51:df:79:4e:c4:de:
01:25:6b:f0:2b:bd:84:0b:3d:b9:c1:cf:79:18:e8:
48:e6:d0:8a:6c:d0:f8:ed:d3:c1:53:db:87:35:dd:
dd:b5:f2:dd:30:4c:6c:4c:6b:3b:46:80:01:ef:da:
94:7f:c4:1a:9d:7b:2a:a8:db:50:14:fb:9d:42:5b:
39:56:bd:06:24:c3:95:35:30:ea:32:89:15:4c:2d:
60:65:f6:db:b0:89:d5:56:b9:07:32:40:02:06:1b:
8b:e9:cc:a4:2e:b6:72:9f:1a:d2:81:df:d9:c5:f8:
58:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:A0:DC:C6:2C:F3:4E:2B:A2:00:BB:27:A9:19:9A:B8:5B:ED:08:63
X509v3 Authority Key Identifier:
keyid:32:EE:75:EA:49:9D:A2:5C:DD:B7:17:CD:8B:8E:A6:F0:30:E9:43:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mu516kmdolzdtxfNi46m8DDpQ8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1548a-01fb-44d9-a4c3-010eaa33318c/1/_aDcxizzTiuiALsnqRmauFvtCGM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/e1548a-01fb-44d9-a4c3-010eaa33318c/1/Mu516kmdolzdtxfNi46m8DDpQ8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.232.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:94:6f:f8:3f:fc:61:3e:5f:5d:bc:36:78:a2:35:0a:f3:ed:
0b:62:cd:e2:ef:a7:a4:d1:19:89:aa:16:50:5d:bf:a6:93:8e:
dd:fb:16:6e:aa:dc:9f:e8:23:ad:e6:33:27:51:9c:02:35:4f:
ab:54:a0:30:f3:91:26:5c:c4:0a:a0:60:be:ab:5e:73:1c:0b:
3c:b1:6b:74:05:d7:d0:1f:ee:ab:5b:54:7b:03:18:67:ef:d5:
a3:2a:bd:dc:a4:e9:e5:e9:07:c2:68:b2:71:92:85:f9:d1:d8:
87:80:0e:c1:32:e3:5b:80:17:04:c9:50:1d:6d:0a:1e:91:dd:
52:ef:33:bd:e2:74:43:af:ab:f0:53:33:62:f0:08:77:cf:02:
2e:41:70:bd:99:e2:ab:c8:b1:8c:a3:93:30:29:e2:b9:45:96:
b3:85:22:a5:78:ec:07:44:2b:2f:79:44:89:11:f1:44:cc:07:
18:b8:23:99:a6:65:e4:ab:bf:38:61:fe:48:33:30:f0:9c:5a:
2e:16:0a:36:70:ef:3e:6d:42:0d:7c:f0:46:6a:30:d8:10:de:
fa:6c:fd:51:00:66:ad:ce:2f:b1:27:fc:f0:bf:17:9a:a4:45:
f9:1f:34:71:c5:82:36:ed:01:c9:5d:5b:6f:fa:70:a2:8f:5a:
b2:df:08:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:03:46 2025 by rpki-client