Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/cm1pqN8f0KYjsYHZjou2kv7-0c8.roa
File: cm1pqN8f0KYjsYHZjou2kv7-0c8.roa (raw, json)
Hash identifier: bMXWVaIeoPi8bx4GY7AW/egwNXzC8Y85Hxuzn8PLCuA=
Subject key identifier: 72:6D:69:A8:DF:1F:D0:A6:23:B1:81:D9:8E:8B:B6:92:FE:FE:D1:CF
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 018570708D2D21203550CB30DF0D5F79E312
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/cm1pqN8f0KYjsYHZjou2kv7-0c8.roa
Signing time: Mon 02 Jan 2023 03:05:02 +0000
ROA not before: Mon 02 Jan 2023 03:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 91.108.224.0/19 maxlen: 19
91.108.255.0/24 maxlen: 24
91.108.192.0/22 maxlen: 24
91.108.196.0/22 maxlen: 24
91.108.208.0/22 maxlen: 24
91.108.212.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:70:8d:2d:21:20:35:50:cb:30:df:0d:5f:79:e3:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Jan 2 03:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=726d69a8df1fd0a623b181d98e8bb692fefed1cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:35:02:eb:49:26:9f:cd:ab:70:99:5f:33:ca:
46:0b:cb:85:83:7e:c1:3a:5c:0f:db:9c:c2:85:d7:
e3:67:4d:f7:3b:73:e3:01:0a:b1:fe:d4:bd:79:5e:
8a:63:ce:58:fc:ec:db:3c:af:b5:0c:0e:69:97:63:
41:d7:b1:b3:59:f1:dd:3d:7b:50:bf:7d:97:de:ca:
6b:8d:99:04:fa:39:bb:24:29:df:98:7a:f6:57:66:
6e:e3:5d:7d:d5:36:d4:14:60:ac:3b:77:92:6c:a5:
49:fc:b8:ef:d9:eb:8c:20:76:33:e4:55:49:0d:2e:
e5:33:f3:87:78:f6:45:f7:ab:12:20:c6:a3:e9:54:
4c:c1:23:52:96:73:42:d8:4d:de:0e:a9:bf:d2:cc:
b0:81:f2:eb:7a:91:f5:f3:c5:ff:18:f2:64:b1:ee:
1e:0e:54:a7:9a:2b:5b:7b:e9:54:a7:b1:67:e4:94:
d0:b0:d1:cb:c3:d6:e4:b5:ae:65:0a:a6:5e:c8:36:
05:e5:f2:65:8b:e6:48:41:f7:0e:7d:c3:d9:13:c5:
72:50:c5:51:3d:2a:22:79:f4:b3:dd:63:97:ea:db:
9f:27:32:81:3d:8c:a6:37:8b:fd:05:c9:25:66:03:
b5:e9:de:40:9c:49:54:a7:7a:15:e2:ee:58:8a:f8:
89:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:6D:69:A8:DF:1F:D0:A6:23:B1:81:D9:8E:8B:B6:92:FE:FE:D1:CF
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/cm1pqN8f0KYjsYHZjou2kv7-0c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.192.0/21
91.108.208.0/21
91.108.224.0/19
Signature Algorithm: sha256WithRSAEncryption
87:97:cb:4d:4a:f1:df:ad:5f:88:08:6e:74:b9:cb:f9:f9:bb:
56:28:f6:b0:d9:26:46:e2:77:31:b7:09:57:56:62:72:5a:f9:
ed:f6:29:c3:b1:45:dd:1f:a7:0a:48:d3:70:42:cb:28:7a:7b:
49:e1:92:6e:2b:56:9f:90:55:71:e8:dd:c4:95:2f:2b:f1:25:
03:ff:96:66:6a:13:e2:59:4e:83:3b:f0:27:42:0e:55:4c:5e:
2b:f4:f1:b1:2a:01:0a:90:a9:32:1f:eb:82:1c:63:ed:9c:fd:
6d:8b:bf:2e:bf:19:96:ae:2d:3d:a0:b3:39:8f:d2:e2:1f:ff:
d1:31:3d:7c:4d:c5:ac:32:c1:69:02:db:c9:31:3e:a1:d0:61:
8b:05:b9:2e:b6:1a:51:c3:1c:0e:19:c7:49:c5:ce:22:c1:18:
d9:2e:87:54:ae:82:5a:a8:27:33:81:e4:7f:62:94:ab:27:8a:
b6:75:0a:58:a4:78:89:aa:fa:4e:7c:44:86:57:e6:aa:73:df:
cb:0c:70:50:9f:29:cd:3a:a4:dc:ac:15:96:28:99:9a:6b:37:
d4:b5:0d:db:46:9d:c5:4d:8d:9f:ec:09:2a:e5:57:9b:ec:9d:
7d:12:a8:e1:89:d0:f1:e7:b1:87:33:7b:3d:f3:12:01:b6:4c:
4d:c8:54:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:29:51 2025 by rpki-client