Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/wktgLB0fMLJg1Fa7Pisnn1kvE2s.roa
File: wktgLB0fMLJg1Fa7Pisnn1kvE2s.roa (raw, json)
Hash identifier: lpp5IcVx7q3IMIHIcRzrPArt/2LdVflbV1zvwAXZ05M=
Subject key identifier: C2:4B:60:2C:1D:1F:30:B2:60:D4:56:BB:3E:2B:27:9F:59:2F:13:6B
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 33A7509B
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/wktgLB0fMLJg1Fa7Pisnn1kvE2s.roa
Signing time: Sat 01 Jan 2022 15:03:55 +0000
ROA not before: Sat 01 Jan 2022 15:03:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 9009
IP address blocks: 91.108.216.0/22 maxlen: 22
91.108.220.0/22 maxlen: 22
91.108.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866603163 (0x33a7509b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Jan 1 15:03:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c24b602c1d1f30b260d456bb3e2b279f592f136b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:1c:f4:5d:eb:1d:1c:9b:e3:6c:81:b3:aa:18:
fd:4c:67:5e:97:c7:fb:bb:45:de:2c:6d:d1:c6:c7:
01:cb:a5:aa:c9:76:a0:37:f3:7d:4a:1d:c8:ca:0b:
53:7c:64:81:ab:69:2a:6f:9e:dd:a9:c8:c7:44:87:
ef:6e:7a:f0:3a:54:0b:38:b4:e0:1e:fd:0a:09:60:
19:e3:b2:3d:01:e2:82:3a:2b:c5:62:84:e4:fa:17:
28:63:bb:c7:33:30:db:07:bb:df:fb:8a:ec:bc:da:
74:0c:e0:2e:3d:01:87:8f:28:13:94:dd:f0:a0:de:
c7:ee:41:37:c1:2c:8c:6e:9c:9e:83:de:24:3e:ce:
3b:69:d3:2c:c3:e8:67:19:e8:bc:a9:2d:8d:10:b1:
b6:61:b1:1a:3e:d1:15:3c:38:91:67:85:92:27:ff:
72:e3:46:e6:15:49:1d:47:1d:af:a4:9b:85:f0:ce:
b8:18:27:38:f6:7c:6a:6e:9b:f9:7b:15:0e:d3:d8:
50:37:df:cf:fc:af:0f:e0:18:9e:a0:cb:2e:bc:2f:
38:2a:40:9f:52:98:e7:80:05:61:bd:3b:2a:e0:30:
f2:db:78:66:1a:66:c5:34:89:dc:c2:fa:ea:41:eb:
cc:7c:a0:8a:a5:ab:be:67:89:99:05:f6:5a:b1:71:
97:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:4B:60:2C:1D:1F:30:B2:60:D4:56:BB:3E:2B:27:9F:59:2F:13:6B
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/wktgLB0fMLJg1Fa7Pisnn1kvE2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.204.0/22
91.108.216.0/21
Signature Algorithm: sha256WithRSAEncryption
8e:98:f9:35:be:09:41:d9:3c:5e:46:ee:e3:23:f9:b3:4e:ad:
18:73:19:d9:91:35:15:c3:86:5b:2f:6c:6d:63:9d:bb:0c:34:
39:d8:63:f9:36:a7:10:d5:35:6f:3b:02:17:cc:62:a4:f7:da:
91:f8:83:14:6b:a4:55:f8:d2:e0:a9:72:35:a1:12:52:f8:d7:
0b:2d:01:2b:14:50:70:b3:00:8c:5e:53:fc:3a:d5:14:bf:c8:
5b:e7:a7:ab:fe:0d:04:43:d9:5e:db:ac:3a:f6:d2:b5:85:fb:
f4:8a:b4:45:00:27:e7:e8:2b:0f:f2:5a:51:5f:94:23:3d:da:
dc:1a:20:f7:a1:66:45:99:62:7b:96:ca:dc:d9:19:a8:c9:68:
30:ad:a0:4b:68:59:cd:b8:65:00:d2:3a:fe:46:8c:a0:63:a9:
86:06:23:e9:e7:55:a7:14:12:06:f0:b2:93:85:e5:64:5a:0a:
62:b7:e3:fe:4e:d8:61:34:6e:75:6d:fd:f2:25:b8:6d:1c:1c:
62:c6:8f:1f:ba:49:da:82:ee:b8:07:ea:3f:e1:e9:f9:08:9d:
19:12:35:df:ec:a7:e3:13:91:ef:a2:e5:8b:7d:a4:2e:ed:bc:
44:81:8d:1b:a6:ca:ad:0a:6c:05:b0:2f:9b:fa:42:e2:82:48:
20:18:4a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:18:56 2025 by rpki-client