Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/_0hv43cXxOUdtVIQ4JZtesGiDwA.roa
File: _0hv43cXxOUdtVIQ4JZtesGiDwA.roa (raw, json)
Hash identifier: 1gWwH/yd2p2iH19gj4HHziNys55m+09ZLofEIAF1qA8=
Subject key identifier: FF:48:6F:E3:77:17:C4:E5:1D:B5:52:10:E0:96:6D:7A:C1:A2:0F:00
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 347B7E64
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/_0hv43cXxOUdtVIQ4JZtesGiDwA.roa
Signing time: Sat 26 Mar 2022 10:12:21 +0000
ROA not before: Sat 26 Mar 2022 10:12:21 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 193.106.199.0/24 maxlen: 24
193.106.198.0/24 maxlen: 24
91.108.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 880508516 (0x347b7e64)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Mar 26 10:12:21 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ff486fe37717c4e51db55210e0966d7ac1a20f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:58:55:33:df:05:99:39:e4:34:43:f7:c2:23:
9a:e8:13:d9:77:ba:73:82:6e:26:c2:b0:ae:be:9b:
33:58:b6:ae:88:88:5d:ec:56:b4:ae:66:df:08:18:
ac:b3:38:f6:4e:1b:c5:67:31:1d:74:5d:c7:17:0e:
8d:3f:73:8c:5d:ed:9a:ec:8a:a4:19:df:e9:34:06:
72:00:15:fd:72:bf:10:6d:84:a3:83:c5:2e:d4:8c:
79:48:91:0a:c6:a6:e6:43:1e:e5:fa:cf:d5:ea:2e:
16:3e:2a:d6:eb:6c:bf:32:25:70:b8:c0:d1:af:52:
ca:14:24:61:d9:45:7a:2a:88:b4:45:12:1e:22:44:
aa:61:21:e0:d1:9e:95:7f:1a:d6:60:5b:7e:93:5e:
b2:f8:c4:8d:cb:63:bf:c1:85:9a:f8:4d:c4:8b:ef:
20:09:15:0d:86:fd:ff:c2:6a:6f:93:9f:fd:4c:11:
a8:69:99:8a:a9:07:bf:a8:e0:97:de:93:91:01:8f:
9d:3b:e9:cb:6e:a2:ec:23:c5:27:ea:b9:12:b6:e2:
9a:79:68:01:09:80:9c:31:42:40:9f:b9:f7:b2:e1:
3c:bc:71:1b:b0:a5:45:85:dd:22:fd:54:b1:16:a1:
67:b5:6d:14:02:89:23:04:15:87:a4:93:17:09:18:
2c:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:48:6F:E3:77:17:C4:E5:1D:B5:52:10:E0:96:6D:7A:C1:A2:0F:00
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/_0hv43cXxOUdtVIQ4JZtesGiDwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.192.0/18
193.106.198.0/23
Signature Algorithm: sha256WithRSAEncryption
2a:29:40:92:d1:23:57:1d:15:1f:ef:db:b0:2c:74:79:67:46:
41:34:7e:3b:7c:64:17:c4:90:fd:4c:6c:a4:ac:71:59:15:4b:
d5:7e:36:a1:a5:ea:a8:b9:44:d4:91:b7:9d:9d:87:42:aa:fa:
4d:16:ae:2b:11:a5:1e:b7:dc:20:b8:9f:99:2e:cf:22:3a:7e:
8f:e2:20:a8:c0:30:4c:8a:60:ef:eb:41:15:d1:73:b4:26:15:
72:9c:88:c0:2b:1b:d3:6b:95:78:01:24:dd:4d:26:ed:10:a9:
57:8b:69:83:2a:1e:31:2d:31:1d:06:c2:8b:b2:06:91:7d:3d:
c3:b2:20:78:18:90:16:01:66:dc:49:01:dd:96:50:e4:dd:0d:
74:8e:d8:17:41:dc:52:2e:fe:61:e8:c7:ea:22:af:84:64:51:
b2:7a:8d:3f:12:ba:ed:10:57:d6:93:85:49:4c:1d:f9:06:5f:
d1:43:2f:99:6a:53:bf:db:28:22:41:23:58:92:d6:9a:83:9a:
84:fb:50:7d:40:58:3b:ac:44:4d:70:cc:db:f8:96:7a:81:90:
27:95:a7:d6:f5:c1:18:37:f1:42:75:f2:42:4e:54:af:48:04:
6c:a3:89:c2:a2:5d:62:a6:1a:c2:2d:ac:86:96:fb:ad:d2:1a:
65:08:45:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:01 2025 by rpki-client