Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/xS_iSCxzuIRbP2eHXzRSq2omM9E.roa
File: xS_iSCxzuIRbP2eHXzRSq2omM9E.roa (raw, json)
Hash identifier: lhDcS+yfMy3yimk+0yM5LIEV3Ct4fGd3KvaMx4FvTt4=
Subject key identifier: C5:2F:E2:48:2C:73:B8:84:5B:3F:67:87:5F:34:52:AB:6A:26:33:D1
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 33AA08A6
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/xS_iSCxzuIRbP2eHXzRSq2omM9E.roa
Signing time: Sat 01 Jan 2022 15:03:57 +0000
ROA not before: Sat 01 Jan 2022 15:03:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 213296
IP address blocks: 91.108.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 866781350 (0x33aa08a6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Jan 1 15:03:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=c52fe2482c73b8845b3f67875f3452ab6a2633d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4e:a5:ee:a8:16:58:ba:0f:5b:26:01:58:f4:
f9:7a:87:f6:08:fe:0c:99:24:ee:e9:31:ca:ed:85:
ea:82:f2:e8:60:e6:92:a0:2f:90:0a:8c:33:6a:e9:
bc:fd:e4:38:de:e3:ae:c2:fe:08:9f:d0:b9:07:e1:
44:42:74:88:85:ea:29:71:cb:fa:bb:9d:94:2a:58:
6d:1e:ef:1c:d0:bd:53:74:50:b7:fa:e6:8a:ad:41:
05:eb:3b:7a:11:2d:01:26:a0:1f:59:54:d2:69:91:
d9:3b:aa:08:47:4a:1c:83:06:b1:42:be:fc:68:ab:
44:8e:19:99:1b:fa:ea:c6:dd:fd:ff:54:46:d3:bf:
6d:8f:ed:0f:7f:e2:7f:d9:06:00:98:71:d2:0e:c4:
a7:45:ab:06:9f:53:1a:e6:c6:a4:0b:c1:ae:51:fa:
59:99:66:c7:8e:4a:8d:e7:ca:b0:c7:98:f0:de:40:
b0:05:4b:47:38:b7:20:6f:17:dc:6f:b1:26:f9:f3:
f1:4d:ea:b0:7d:d4:f4:a0:d6:a8:84:10:1f:2f:ad:
bd:c1:52:01:d0:13:14:6a:d5:6b:10:7f:a3:b3:b1:
4c:90:7b:9a:55:6f:58:bc:da:8e:f1:9c:a9:a1:54:
6d:62:39:17:d2:e7:70:39:b3:68:45:be:25:bb:77:
1b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:2F:E2:48:2C:73:B8:84:5B:3F:67:87:5F:34:52:AB:6A:26:33:D1
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/xS_iSCxzuIRbP2eHXzRSq2omM9E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.224.0/19
Signature Algorithm: sha256WithRSAEncryption
4e:bb:7b:60:be:12:c4:35:09:75:8d:d7:9b:6a:96:9b:20:20:
e8:33:df:d4:1a:fb:7d:e6:49:4e:c1:7a:05:24:5b:d5:76:52:
53:a6:58:db:12:a1:73:25:f8:d9:65:59:d6:21:e7:57:bb:a5:
4e:5b:43:7d:b4:95:29:a1:6d:11:13:69:23:98:3e:1e:37:cb:
82:e2:96:f1:57:72:c7:83:75:96:ea:b2:c5:1b:3d:1c:da:75:
69:30:94:88:66:4e:f6:bf:68:a2:3f:1e:b8:ee:46:be:9d:a1:
5f:08:45:cc:cb:ef:dc:d1:60:27:cc:b2:6a:cf:ce:5e:32:28:
88:97:89:2f:20:3d:7d:bb:05:a0:e6:77:1f:3f:a5:4b:15:73:
8e:76:a9:2b:60:7b:60:ef:b0:7b:4a:11:9a:e9:a5:36:16:d7:
5c:03:d5:0b:c0:e8:82:33:e3:21:89:a2:bf:70:10:f4:ab:03:
9a:3a:7b:00:a4:7a:8e:30:98:c8:ed:4d:86:0d:7f:c1:6e:6a:
66:e2:03:f4:84:d7:18:e9:f5:e2:e6:5e:fc:2d:f4:59:de:23:
92:69:e8:29:92:b3:a2:c4:0a:ed:20:3e:c0:64:5c:38:90:b2:
07:07:4c:e1:96:c6:41:a0:b7:24:a4:6c:ab:15:35:e6:c9:e1:
92:29:34:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 05:00:19 2025 by rpki-client