Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/zXSfv8PfwJaeJgreY5rsje3i21I.roa
File: zXSfv8PfwJaeJgreY5rsje3i21I.roa (raw, json)
Hash identifier: ymxBVoLLjJtJr79biYDgVzz9lJPfHhpAt9nRp56/+YY=
Subject key identifier: CD:74:9F:BF:C3:DF:C0:96:9E:26:0A:DE:63:9A:EC:8D:ED:E2:DB:52
Certificate issuer: /CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Certificate serial: 351D28F8
Authority key identifier: 3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/zXSfv8PfwJaeJgreY5rsje3i21I.roa
Signing time: Sat 04 Jun 2022 03:52:20 +0000
ROA not before: Sat 04 Jun 2022 03:52:20 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209372
IP address blocks: 91.108.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 891103480 (0x351d28f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3adeea3b6aac4d834b4fd7c2e5d3c397f61f43d6
Validity
Not Before: Jun 4 03:52:20 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cd749fbfc3dfc0969e260ade639aec8dede2db52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:43:57:57:b0:0e:ca:3b:d7:8c:b4:5f:db:60:
1d:3a:34:2b:8f:ec:0c:8f:c5:68:12:55:91:37:6e:
cc:a7:43:e1:b4:30:d9:86:cf:d6:b2:58:d6:19:a3:
a7:12:ab:3c:10:65:54:d1:b9:81:af:2d:52:d6:d3:
70:17:7f:56:b4:2e:55:43:03:42:08:07:3e:82:0e:
ea:b9:a2:ca:f3:4b:42:bd:dc:79:4d:57:44:d4:c9:
bf:b2:fd:7d:21:98:84:58:a7:cc:f3:ab:0f:cb:5b:
6d:ba:5c:e8:74:97:df:1c:c0:16:9e:f9:18:dd:46:
82:13:dc:6c:e1:99:c6:52:fd:e4:b1:4a:bd:5c:67:
e3:b3:ed:fe:ed:fc:b8:b7:0f:9c:71:9d:37:1d:43:
49:3f:ed:b5:bd:e5:80:25:86:33:6e:67:be:d5:cc:
7b:c6:8f:ed:10:a4:79:0e:93:d0:1a:b8:c4:04:9e:
9d:19:57:02:9b:f2:9c:22:20:06:d1:10:53:6a:5b:
55:47:36:d6:cb:8d:d4:91:bb:9a:65:ec:4e:cc:c3:
ab:89:3c:e5:61:96:dc:49:ba:a4:68:e3:c7:1b:cd:
02:81:41:98:06:82:94:a1:9e:6b:bd:6d:6b:89:7d:
4f:96:d5:4a:ed:1e:d0:7c:8e:27:15:4b:b4:ee:b0:
e2:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:74:9F:BF:C3:DF:C0:96:9E:26:0A:DE:63:9A:EC:8D:ED:E2:DB:52
X509v3 Authority Key Identifier:
keyid:3A:DE:EA:3B:6A:AC:4D:83:4B:4F:D7:C2:E5:D3:C3:97:F6:1F:43:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/zXSfv8PfwJaeJgreY5rsje3i21I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/015f44-0f4c-4714-8615-23b072f5b188/1/Ot7qO2qsTYNLT9fC5dPDl_YfQ9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.224.0/19
Signature Algorithm: sha256WithRSAEncryption
80:d6:3d:61:76:2a:0c:da:e5:5e:bb:31:26:0c:61:96:d3:e0:
f5:e9:88:7e:a4:a0:1b:be:b5:ad:a2:92:80:3c:bb:c0:2b:e6:
9a:75:6c:82:da:b6:9a:24:5f:fd:58:99:1d:0a:64:6c:53:a2:
8b:6c:2c:6a:bc:d1:ec:ba:7b:0d:98:b5:d2:d0:7c:d8:ac:93:
12:1f:d5:0f:59:f9:de:a3:3a:a7:56:f5:7f:86:93:f5:e9:0a:
02:f0:41:6c:8e:0a:63:f6:8d:4c:20:6c:f5:e4:4f:69:26:c8:
b6:19:60:50:5a:9a:a1:76:c9:34:33:59:a7:c5:9c:39:b3:92:
65:f8:6c:2d:d5:96:3c:ad:40:2a:6c:f5:fa:68:9b:33:79:58:
84:8f:13:51:ba:ed:0e:1f:9e:0c:0f:ba:83:50:06:84:94:20:
70:89:5d:26:b4:df:59:ff:9a:19:e3:2b:06:82:d1:94:f8:54:
b0:38:b5:4b:9b:77:63:32:cc:12:23:59:5a:79:6a:9d:7c:45:
6b:1c:62:9f:59:1a:83:17:75:33:c3:1d:df:9f:27:23:c0:de:
6d:92:c6:a4:43:13:33:38:eb:83:0f:64:1e:05:70:1f:0c:06:
40:e9:61:d0:f7:6b:3a:34:99:96:d7:d7:1e:2c:f9:18:17:23:
36:17:bc:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 02:08:51 2025 by rpki-client