Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Of0qqbDaA9JxF5eJfvPDftnhmlA.roa
File: Of0qqbDaA9JxF5eJfvPDftnhmlA.roa (raw, json)
Hash identifier: m2H6yc3AyKkfXWnOBEn0Y2TOi0buUvP0T2VrvI3eoeA=
Subject key identifier: 39:FD:2A:A9:B0:DA:03:D2:71:17:97:89:7E:F3:C3:7E:D9:E1:9A:50
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 33BB97C1
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Of0qqbDaA9JxF5eJfvPDftnhmlA.roa
Signing time: Thu 06 Jan 2022 12:16:54 +0000
ROA not before: Thu 06 Jan 2022 12:16:54 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 91.108.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 867932097 (0x33bb97c1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Jan 6 12:16:54 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=39fd2aa9b0da03d2711797897ef3c37ed9e19a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:fb:b3:10:4d:8f:6a:4c:c6:19:b8:6d:db:59:
80:a0:c2:f9:3e:80:19:06:c8:69:8a:a6:b6:60:49:
67:d4:ba:49:e1:3d:fa:a7:40:ca:6a:9f:9f:0d:10:
07:8d:1b:99:5c:15:27:97:49:f6:1c:25:20:6c:10:
4c:b8:58:5c:78:a4:79:fc:5d:7c:82:86:d0:d1:20:
4a:5f:61:a5:eb:4c:df:b8:e1:c7:04:73:d4:a6:05:
bf:70:f7:5a:c1:51:a3:f1:7a:1a:6a:29:78:6c:01:
17:35:53:91:31:e7:92:93:c1:37:dd:e2:73:b3:7e:
f6:42:9b:57:c7:f4:01:06:33:35:d9:75:38:69:9b:
46:b3:34:f9:7b:6c:ba:a6:80:47:7b:b6:2c:04:c4:
c9:d2:81:44:2d:ac:a7:23:03:60:26:2b:6c:12:9e:
c2:14:e5:5d:0e:cc:78:87:08:83:e5:3b:d1:a1:1c:
d2:bf:b5:fd:2e:8e:1b:73:aa:6d:29:0d:15:87:92:
1a:eb:57:fa:12:6d:43:14:0f:be:43:37:47:64:cf:
ea:62:c7:7a:85:ae:7a:0b:b3:86:2a:a9:35:c2:83:
f3:8e:5d:b8:94:bb:7a:ab:80:a9:77:ff:d7:b2:bf:
11:10:9e:b5:bd:77:ef:23:f9:fd:a6:b9:87:18:09:
21:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:FD:2A:A9:B0:DA:03:D2:71:17:97:89:7E:F3:C3:7E:D9:E1:9A:50
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Of0qqbDaA9JxF5eJfvPDftnhmlA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.192.0/18
Signature Algorithm: sha256WithRSAEncryption
1a:3f:8e:2a:20:97:44:0b:b8:6f:02:4d:3b:9b:55:1b:f2:66:
2d:58:c3:8a:5d:db:b5:aa:e4:12:22:10:4d:1c:75:fe:2e:d4:
1a:e5:e4:7c:e2:54:40:3b:ff:99:c1:f3:5f:1c:e0:39:59:fa:
4d:ad:ed:54:2c:3c:e8:cd:4a:a7:4d:82:6c:73:24:1e:6b:2a:
e7:6e:8f:d5:86:a4:11:4d:b9:af:38:a5:3e:67:ea:1a:f2:47:
4f:eb:1c:5f:20:39:da:b9:75:61:98:5b:a3:1a:1f:09:3b:f5:
e5:e5:97:76:55:f8:b8:d0:5d:e8:91:61:f5:47:c2:3d:4b:d8:
03:a9:25:8c:9c:ae:18:ab:56:cf:d2:27:41:c5:31:35:39:33:
d1:bc:ae:91:c1:a4:4a:eb:a7:00:42:0d:4a:22:e3:8d:64:82:
bf:4c:49:a8:f9:31:64:a0:d2:94:e3:11:14:12:f3:8e:e6:ce:
51:c5:4a:1e:5a:41:dd:f4:25:fd:dd:a1:ac:85:7e:de:69:36:
d7:75:b5:3a:ac:6b:19:6e:16:da:ce:74:09:c6:9a:4a:81:5f:
88:b2:37:c5:90:45:f5:c3:54:b4:cc:79:d3:9d:96:da:66:81:
bf:b4:08:67:91:78:ac:38:47:74:cb:88:ef:ae:d0:22:fd:b8:
9f:d6:6b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:24:26 2025 by rpki-client