Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/3HJoM10paCiFllXqhV8ygCrBtFo.roa
File: 3HJoM10paCiFllXqhV8ygCrBtFo.roa (raw, json)
Hash identifier: pRzSEg7pGg/1FE6czSZFxS2Mh0djVn4SsGM6zDXfxeU=
Subject key identifier: DC:72:68:33:5D:29:68:28:85:96:55:EA:85:5F:32:80:2A:C1:B4:5A
Certificate issuer: /CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Certificate serial: 01841E5F94D3BE61310C38C204BD3F7EECAA
Authority key identifier: FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/3HJoM10paCiFllXqhV8ygCrBtFo.roa
Signing time: Fri 28 Oct 2022 11:34:51 +0000
ROA not before: Fri 28 Oct 2022 11:34:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 209288
IP address blocks: 91.202.210.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:1e:5f:94:d3:be:61:31:0c:38:c2:04:bd:3f:7e:ec:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Validity
Not Before: Oct 28 11:34:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dc7268335d296828859655ea855f32802ac1b45a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cb:e6:d0:a9:56:c4:44:af:b8:40:40:0d:12:
6c:a9:69:13:8d:9d:bf:03:31:3f:47:7b:b1:c1:fb:
00:7d:e6:7e:a6:59:bd:2b:ab:9e:75:d0:f4:8a:5b:
b4:8f:55:e9:c3:82:d9:5f:bc:c1:3b:31:62:80:25:
43:df:34:5c:17:5a:66:11:62:63:74:3e:c9:07:1e:
43:88:16:46:ad:50:db:14:e2:ea:25:21:40:8e:69:
9b:d4:55:a4:23:8c:d8:30:50:a2:64:82:9f:2f:d8:
20:fe:23:0c:17:99:53:46:ed:e7:26:a3:2c:23:79:
f5:f1:83:83:5b:94:4d:47:c2:16:53:a2:d7:5d:6a:
70:83:09:86:d3:9a:e5:e3:07:ed:c4:c2:fd:a4:28:
33:2f:06:3f:f3:95:72:9c:98:f2:57:a2:3b:6c:28:
fc:50:68:16:c8:2c:54:14:47:f0:f9:54:49:2e:cf:
ad:02:51:71:08:e6:3b:27:69:77:87:6a:d3:44:fe:
22:b0:47:d8:59:14:e7:02:b4:76:e8:5f:36:d6:50:
71:2f:19:64:1f:a9:fd:7f:ab:5e:88:67:bb:17:34:
fe:00:c7:54:94:79:54:ef:14:65:bc:c9:b0:64:9f:
f8:4c:1d:1d:3b:6b:32:f2:49:12:d3:00:fa:07:71:
d4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:72:68:33:5D:29:68:28:85:96:55:EA:85:5F:32:80:2A:C1:B4:5A
X509v3 Authority Key Identifier:
keyid:FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/3HJoM10paCiFllXqhV8ygCrBtFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.210.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:da:13:ed:1b:f6:5f:f5:13:a9:c4:d5:e2:56:8f:07:97:2a:
21:09:be:25:14:0f:ec:ff:3f:51:ec:03:d9:aa:5c:9f:b7:07:
7f:46:15:1d:08:df:61:9b:b5:a2:e9:8c:54:bd:12:20:da:ad:
19:51:1d:69:23:12:b2:63:49:68:53:6c:cf:82:45:cd:e4:78:
3b:2f:6b:43:13:ea:84:76:89:ed:45:14:67:bb:bc:4f:95:41:
2f:36:b9:95:be:b6:bb:e8:93:79:8a:cf:07:2f:db:39:90:37:
da:37:31:b3:e6:a4:dd:f4:60:ad:94:61:97:e8:3e:07:9f:fe:
6d:82:95:ac:21:40:43:2e:b6:a3:3a:9f:22:fb:be:91:32:86:
f2:df:6a:4c:02:76:42:1b:f9:e9:cf:a4:ea:24:ca:a9:0b:64:
d9:2b:b1:de:27:b3:8b:52:76:0e:4d:bf:37:44:a9:db:2f:94:
de:ba:12:21:7b:e7:c4:4c:2f:41:a9:47:7d:54:e9:13:44:c5:
ed:27:bd:31:2a:9c:3b:28:11:86:21:ce:ac:e6:4c:ac:11:01:
4a:d3:ad:ff:0a:6f:81:26:a0:9a:15:97:48:36:5b:2b:89:72:
d6:f7:70:30:6b:34:66:97:4e:3a:94:e2:85:db:3e:5e:95:ca:
ea:18:3f:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 01:30:27 2025 by rpki-client