Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/de82da-b086-42ea-8c43-5e499468cc2f/1/K8YTgzxCdNo4BYz93bLzB9QwucA.roa
File: K8YTgzxCdNo4BYz93bLzB9QwucA.roa (raw, json)
Hash identifier: 4GCKWEreF4hEwJsDJ21u7/JnJu3E6dh/kCb1+mvKRkc=
Subject key identifier: 2B:C6:13:83:3C:42:74:DA:38:05:8C:FD:DD:B2:F3:07:D4:30:B9:C0
Certificate issuer: /CN=8b2895beaada6d2f957c7ed430ff846b7ebcdb1b
Certificate serial: 018248AAB554A970086C6B0CE0EA7B0078C5
Authority key identifier: 8B:28:95:BE:AA:DA:6D:2F:95:7C:7E:D4:30:FF:84:6B:7E:BC:DB:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iyiVvqrabS-VfH7UMP-Ea3682xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/de82da-b086-42ea-8c43-5e499468cc2f/1/K8YTgzxCdNo4BYz93bLzB9QwucA.roa
Signing time: Fri 29 Jul 2022 06:35:23 +0000
ROA not before: Fri 29 Jul 2022 06:35:23 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34259
IP address blocks: 91.223.77.0/24 maxlen: 24
91.220.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:48:aa:b5:54:a9:70:08:6c:6b:0c:e0:ea:7b:00:78:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b2895beaada6d2f957c7ed430ff846b7ebcdb1b
Validity
Not Before: Jul 29 06:35:23 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2bc613833c4274da38058cfdddb2f307d430b9c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e9:c4:fb:70:fc:7a:5c:ef:e9:fe:df:c9:7c:
f7:85:8d:64:ed:dc:d2:9e:59:39:b2:62:8f:89:20:
e8:d6:eb:d7:2e:71:89:4d:80:50:93:d1:9a:96:e3:
93:c1:48:63:a8:3e:12:10:f9:c3:51:d5:28:bc:e1:
41:ce:32:32:39:bf:d7:46:48:92:b4:76:5d:0c:4f:
73:8a:3d:1f:9a:13:3f:75:e9:4b:ed:af:dc:cd:32:
54:af:71:c0:19:cc:ab:d8:0b:11:fd:1c:01:86:4f:
66:9c:9e:96:3a:1c:a9:93:e8:ac:0d:ff:68:c2:c5:
76:59:fa:27:b0:a2:fb:5a:bf:e1:d3:f8:bb:5f:3a:
38:9b:04:e7:0a:07:8c:74:fb:9b:88:88:30:fb:28:
bc:e9:12:8f:bb:8c:2d:3d:94:93:88:06:67:02:8a:
ed:b8:f2:f1:b2:8d:6b:ca:3f:fa:eb:e1:e5:a8:c5:
fb:ee:ff:e0:91:c4:8e:40:21:b8:d7:9f:0a:6f:9f:
47:e4:e8:8f:35:0a:6b:f0:7d:c0:ce:66:bc:6a:0a:
59:57:0f:84:32:4a:a1:81:60:a0:be:3e:21:ff:e9:
6f:42:05:b6:5a:61:11:15:4d:69:46:52:84:a8:89:
4d:98:33:4d:e8:36:5f:07:21:d1:69:4a:a4:2d:50:
0b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C6:13:83:3C:42:74:DA:38:05:8C:FD:DD:B2:F3:07:D4:30:B9:C0
X509v3 Authority Key Identifier:
keyid:8B:28:95:BE:AA:DA:6D:2F:95:7C:7E:D4:30:FF:84:6B:7E:BC:DB:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iyiVvqrabS-VfH7UMP-Ea3682xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/de82da-b086-42ea-8c43-5e499468cc2f/1/K8YTgzxCdNo4BYz93bLzB9QwucA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/de82da-b086-42ea-8c43-5e499468cc2f/1/iyiVvqrabS-VfH7UMP-Ea3682xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.101.0/24
91.223.77.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:53:4f:31:3c:b5:4e:d3:9c:45:86:c1:dc:64:dd:6b:63:d3:
77:0d:50:0b:9b:37:c3:e1:d3:6e:1e:3c:41:bc:66:cf:52:8c:
a9:bf:9e:e8:12:c3:71:36:ff:4c:ef:df:0b:cb:12:ad:24:2d:
b8:ea:f9:bd:f4:f8:1a:ad:45:fa:0c:90:c5:fb:fa:ae:b8:61:
04:62:15:e2:6d:1c:a4:54:51:7b:12:c3:a5:f7:c8:3d:f2:d3:
53:44:0b:53:b2:e1:66:bb:fc:07:c7:b5:ca:74:43:98:4d:74:
82:d4:3a:c6:db:70:04:34:e9:14:eb:20:be:54:03:59:9a:72:
97:5d:63:24:df:9b:04:ba:f6:25:13:1e:6e:6a:49:fa:ac:16:
c2:37:d6:68:24:8d:f9:81:d2:4e:b4:88:34:6c:b9:e3:c7:c9:
92:14:8a:53:5f:b2:e1:37:0e:1c:cb:42:6c:97:99:ce:eb:0e:
91:f8:44:51:86:f1:2d:55:8a:ac:38:8a:a6:c0:0c:0f:ac:50:
15:c3:9f:73:0c:a4:e4:29:2d:e2:ee:36:e3:55:92:a3:0f:f9:
7d:ef:21:02:a4:c9:26:04:c1:4f:5f:3c:2b:d3:3c:26:38:ae:
2f:2c:f1:e4:f3:2e:53:9f:fe:81:4b:0c:35:6e:a5:d9:0a:3a:
19:63:e8:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 22:36:46 2025 by rpki-client