Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/CrZsbsTz0HPZ5YkD-9XX2mF2Sto.roa
File: CrZsbsTz0HPZ5YkD-9XX2mF2Sto.roa (raw, json)
Hash identifier: Dv/78aSHXdTs0d0YqrJEjIJYw/o4+Sv4UC1iWbqJGqo=
Subject key identifier: 0A:B6:6C:6E:C4:F3:D0:73:D9:E5:89:03:FB:D5:D7:DA:61:76:4A:DA
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 35032BE0
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/CrZsbsTz0HPZ5YkD-9XX2mF2Sto.roa
Signing time: Wed 25 May 2022 04:00:14 +0000
ROA not before: Wed 25 May 2022 04:00:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.108.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 889400288 (0x35032be0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: May 25 04:00:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=0ab66c6ec4f3d073d9e58903fbd5d7da61764ada
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:49:9c:09:17:75:b2:93:5d:60:78:b8:fd:7f:
05:74:d2:a1:22:b1:cd:76:e8:30:cf:ef:bd:5e:7d:
19:00:e5:bd:b8:36:f2:71:a0:3c:38:89:fd:d4:75:
da:c4:fd:da:ec:1b:c1:95:95:d7:d2:6f:5f:4c:c5:
00:d9:82:01:1c:db:8d:84:fe:c8:64:85:ee:0a:1d:
b2:f6:ea:75:7a:e3:88:90:26:d3:10:e6:07:e5:5d:
26:68:61:50:f5:72:6e:a5:69:9d:67:1b:62:e4:ea:
3e:b2:ca:2e:59:f2:2e:01:ec:82:bc:35:7e:66:b8:
25:91:b8:32:9d:ea:d4:fe:6a:14:d6:ee:59:b1:2d:
1e:0c:ca:6d:0d:6d:cd:29:d3:22:e1:96:ae:6b:bd:
d8:2c:a6:06:52:a5:90:ed:c9:75:05:ee:f5:b9:50:
ea:0f:1d:a3:7e:95:24:04:d2:53:13:02:ec:61:4f:
ed:84:7c:b8:6b:21:42:f7:f1:7c:f5:61:00:20:26:
17:12:fd:c3:54:0d:cd:9d:e3:3a:f0:19:26:aa:83:
ee:19:c2:80:27:53:87:33:63:49:98:5f:53:5a:0f:
e0:44:c9:e5:8f:71:c5:3d:0a:fa:bb:b2:f6:d6:02:
45:30:4e:cf:d6:a9:05:99:ab:03:90:06:b6:e3:e1:
d5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:B6:6C:6E:C4:F3:D0:73:D9:E5:89:03:FB:D5:D7:DA:61:76:4A:DA
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/CrZsbsTz0HPZ5YkD-9XX2mF2Sto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.192.0/18
Signature Algorithm: sha256WithRSAEncryption
77:72:d0:c8:7b:db:24:9f:b9:1f:6e:c2:9a:7b:d3:81:22:a0:
70:f3:c9:76:e1:5f:38:b0:42:bd:ec:8b:7d:f7:4f:2a:fa:82:
36:bb:59:c1:5b:b2:13:14:65:b4:10:df:44:89:42:82:9e:5f:
93:a5:55:19:d4:45:68:c7:71:a3:b8:c1:e8:8c:d6:e5:f7:cf:
10:13:fb:c6:97:95:38:fb:e4:fd:d0:3b:1d:4a:e7:12:69:37:
67:46:db:72:7f:24:2c:45:1b:cb:b2:6a:fd:19:63:f0:f8:9c:
82:5a:9f:8d:5d:6e:53:f8:73:ba:b3:1c:9c:6b:98:7c:43:83:
bb:49:e6:34:6a:95:be:19:95:1c:7c:c3:53:eb:81:f1:5f:d8:
9a:9a:a4:a5:40:ac:86:11:35:da:7f:b8:60:a4:be:9e:32:71:
34:d9:45:96:ba:8a:6c:ce:c4:31:eb:4d:5b:7f:38:57:d5:13:
af:0f:20:99:db:40:9a:a7:fc:b1:3a:e0:05:27:6f:9d:23:a5:
91:d5:ed:03:8a:64:01:10:dd:47:80:44:bc:12:af:93:0a:11:
34:cf:8b:10:4a:e5:18:aa:df:97:ac:98:76:85:71:22:f2:6c:
e9:07:35:c4:8d:01:89:ca:71:45:75:12:10:7b:cc:d8:23:40:
99:9c:52:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:04 2025 by rpki-client