Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/s3O1RT3A_neel4LjsROQKVqeqXU.roa
File: s3O1RT3A_neel4LjsROQKVqeqXU.roa (raw, json)
Hash identifier: lrnYXOY5TR+crDYQyFL95ZyC/rs7h5TPBV+spbcJXGM=
Subject key identifier: B3:73:B5:45:3D:C0:FE:77:9E:97:82:E3:B1:13:90:29:5A:9E:A9:75
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 018AFAAA9621EE7D85E585643AA36249BFFB
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/s3O1RT3A_neel4LjsROQKVqeqXU.roa
Signing time: Wed 04 Oct 2023 12:29:58 +0000
ROA not before: Wed 04 Oct 2023 12:29:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211439
IP address blocks: 185.169.228.0/22 maxlen: 22
91.132.12.0/22 maxlen: 22
193.37.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fa:aa:96:21:ee:7d:85:e5:85:64:3a:a3:62:49:bf:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Oct 4 12:29:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b373b5453dc0fe779e9782e3b11390295a9ea975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5f:57:c7:9e:cc:96:6d:58:82:9e:18:67:55:
ce:91:a4:9f:ba:14:0e:88:e6:e4:0a:e2:ad:01:a1:
21:9c:c6:be:1e:30:53:82:ff:6a:d4:4d:59:f8:b9:
32:8f:e2:d6:fa:15:e3:1f:52:d8:98:31:a0:18:27:
0c:9c:88:5b:70:0b:9a:8d:71:9b:e6:83:92:97:9d:
81:4f:be:c1:af:d5:e8:14:b1:d8:cd:31:10:9b:92:
8d:ef:62:65:ee:aa:2d:b5:23:1a:30:4f:61:c6:b0:
12:8d:06:2d:07:57:61:9e:e0:30:f4:59:69:73:10:
ca:55:16:e4:dd:fc:40:21:c3:c2:af:39:d6:46:e8:
e5:df:85:0c:7e:d0:93:f4:f8:c5:be:a2:99:d8:63:
b7:1b:c4:d1:03:38:16:eb:5b:7a:36:d1:65:52:43:
e9:b2:08:d5:a5:16:8c:d6:59:61:27:17:4c:55:91:
40:b6:82:67:c2:7b:db:b4:44:7f:bc:5a:5a:18:1a:
7b:eb:3a:d9:3f:66:e6:a8:c7:e5:6a:90:e4:81:93:
5f:4b:47:cd:1f:36:0f:45:a4:f6:a4:00:10:0a:b5:
72:15:37:52:2f:36:0f:3a:e0:d3:4a:f3:cf:6b:8b:
35:b1:e1:63:9b:8f:a9:66:e1:6a:4d:20:44:96:91:
a6:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:73:B5:45:3D:C0:FE:77:9E:97:82:E3:B1:13:90:29:5A:9E:A9:75
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/s3O1RT3A_neel4LjsROQKVqeqXU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.12.0/22
185.169.228.0/22
193.37.220.0/22
Signature Algorithm: sha256WithRSAEncryption
3c:9c:c9:e3:8c:bc:7d:23:5e:68:6e:a3:45:6a:ca:49:e2:5c:
f8:2d:9f:ee:56:06:a2:c4:9e:5a:fd:12:8a:78:f3:59:ad:e7:
0c:e7:97:76:46:63:d0:a6:14:80:d3:f1:6c:18:aa:65:09:71:
74:20:90:a9:98:36:de:dc:6e:24:14:72:bc:2a:53:f9:38:47:
9c:a6:b8:91:62:cb:6b:1d:db:54:8d:26:ad:2e:a3:2b:a0:0c:
2a:43:44:1f:4a:e9:ea:01:6a:d9:f3:b1:9a:29:15:8d:57:4a:
f9:03:5a:93:9c:da:b1:ec:f1:d1:04:9c:b3:41:68:e6:a2:07:
45:b1:77:fe:f5:6a:46:13:5e:1d:ef:6f:c6:d6:ea:fe:1a:03:
a1:ee:16:fc:4a:35:22:82:91:70:af:dd:b4:63:b8:4d:d5:6d:
b1:21:15:01:09:1d:92:47:5e:3b:e6:c7:f6:0e:7f:81:9b:91:
9e:11:ca:b4:bb:64:c4:2e:75:ba:33:72:f4:8f:77:a4:31:1b:
c2:91:bb:de:d8:86:f3:15:f7:fa:9f:ff:bc:68:18:e4:56:07:
6b:19:43:c6:ea:90:fd:09:e6:21:3e:32:bf:6f:a7:55:a2:69:
d7:b2:c2:39:1c:7c:39:c3:e4:21:2c:6c:aa:b9:c4:54:95:4f:
8b:14:65:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:07 2025 by rpki-client