Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/T5-GxIvc_jAfdNYg2ngoYw2Q_VM.roa
File: T5-GxIvc_jAfdNYg2ngoYw2Q_VM.roa (raw, json)
Hash identifier: JcQrHjZVjW1kjnlGYTOhyzVwOnSLOAiA9Tt8avG9pCc=
Subject key identifier: 4F:9F:86:C4:8B:DC:FE:30:1F:74:D6:20:DA:78:28:63:0D:90:FD:53
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 018570708E5318EC336D48CC20CC683C4F75
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/T5-GxIvc_jAfdNYg2ngoYw2Q_VM.roa
Signing time: Mon 02 Jan 2023 03:05:02 +0000
ROA not before: Mon 02 Jan 2023 03:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213296
IP address blocks: 91.108.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:8e:53:18:ec:33:6d:48:cc:20:cc:68:3c:4f:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Jan 2 03:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4f9f86c48bdcfe301f74d620da7828630d90fd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:49:43:b8:51:d4:eb:9b:26:5b:77:5d:80:bc:
1c:dd:7c:98:09:ea:ca:94:9a:89:b2:9a:1d:7a:90:
f6:e6:d6:87:b2:47:cb:02:ba:9c:25:11:30:b4:4d:
65:47:9c:61:39:ac:37:ba:0e:a6:6a:fa:60:42:8c:
23:ae:32:75:89:fc:43:7b:5a:ec:44:1e:77:f1:76:
0b:7d:2d:9d:40:f1:af:51:8f:d2:80:e9:c1:9c:83:
7a:7b:68:a6:6f:f4:b1:2f:7a:8c:15:a3:49:76:31:
eb:4c:27:eb:41:0c:ee:9c:80:f8:77:92:49:ff:c5:
83:f2:9c:d5:12:5f:f6:10:1f:3d:11:0e:0c:71:e3:
e4:cc:40:c4:84:9f:db:bc:7b:ad:92:38:64:cb:b3:
cc:4a:be:89:b7:22:08:c6:a7:0a:26:7a:99:d9:e5:
86:7c:c6:62:10:bb:3e:8d:b7:b8:5b:0a:c0:cc:97:
53:50:3a:f6:68:40:c7:5c:95:64:9e:5b:0e:b6:47:
f1:d4:ef:de:39:c8:41:69:e5:ae:fe:15:90:cb:b7:
92:24:4e:ad:43:bf:44:73:4d:96:5b:d1:48:d1:29:
31:7c:a5:11:40:9a:b4:1a:5d:75:eb:7f:b4:f3:7f:
40:13:5c:2c:a8:e6:e1:74:ca:b0:3d:a6:f3:bf:97:
5d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:9F:86:C4:8B:DC:FE:30:1F:74:D6:20:DA:78:28:63:0D:90:FD:53
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/T5-GxIvc_jAfdNYg2ngoYw2Q_VM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.224.0/19
Signature Algorithm: sha256WithRSAEncryption
58:ec:f7:ea:c5:ac:88:62:83:c1:f4:41:71:ae:85:68:8d:59:
ed:5c:69:65:7c:66:34:d5:5b:ec:5b:64:29:bb:21:a6:3a:c3:
40:07:37:1a:b0:7d:f0:41:33:de:b7:32:5a:e9:22:75:e0:9c:
b5:51:58:15:83:87:54:0d:5b:b2:42:b3:0b:26:ab:72:b3:32:
e1:86:e6:e0:bd:73:26:80:be:c1:19:4a:dd:11:a4:49:6a:dc:
46:af:74:4d:ee:e0:ab:53:36:6c:bc:8e:69:8f:b7:a6:aa:7e:
3c:78:51:99:7d:f9:35:c4:33:f3:51:93:b9:18:cc:84:f9:f8:
06:6c:73:aa:c1:fd:24:4b:be:0b:6e:05:36:bd:6f:18:7e:66:
28:80:f4:a2:2c:ed:6e:1d:05:2f:f2:63:54:ea:e4:5f:61:fd:
32:10:c6:cc:30:ba:52:68:b3:c3:eb:4a:06:dc:17:27:94:be:
5b:c2:8e:5a:e2:b7:dd:57:26:29:f2:8e:c7:a1:a0:94:37:da:
3d:14:7f:9d:59:6d:c4:0a:21:c0:7b:eb:d3:19:83:e3:9e:6f:
e3:ea:42:ba:0c:d1:ca:71:ac:93:a9:e7:9f:00:25:ef:9d:4e:
ec:d0:b9:3b:e9:a0:bc:93:84:57:18:e3:4a:34:48:53:53:e8:
3c:b0:cd:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 03:32:57 2025 by rpki-client