Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/bf4679-7490-4446-b320-9ff6a387fcf6/1/rynwX8F3OYbBiTnRaLjW95wiSe0.roa
File: rynwX8F3OYbBiTnRaLjW95wiSe0.roa (raw, json)
Hash identifier: lW95E1KKMrKrfWC+kiUheDVBWR8i2USJ+y0V9w5pw6k=
Subject key identifier: AF:29:F0:5F:C1:77:39:86:C1:89:39:D1:68:B8:D6:F7:9C:22:49:ED
Certificate issuer: /CN=d3b33bd01482071648d697737eaf91612b27fc27
Certificate serial: 018CC26D836435C6776368B799D70BE72E3B
Authority key identifier: D3:B3:3B:D0:14:82:07:16:48:D6:97:73:7E:AF:91:61:2B:27:FC:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/07M70BSCBxZI1pdzfq-RYSsn_Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/bf4679-7490-4446-b320-9ff6a387fcf6/1/rynwX8F3OYbBiTnRaLjW95wiSe0.roa
Signing time: Mon 01 Jan 2024 00:30:06 +0000
ROA not before: Mon 01 Jan 2024 00:30:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49340
IP address blocks: 91.211.144.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:6d:83:64:35:c6:77:63:68:b7:99:d7:0b:e7:2e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3b33bd01482071648d697737eaf91612b27fc27
Validity
Not Before: Jan 1 00:30:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=af29f05fc1773986c18939d168b8d6f79c2249ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d7:0e:09:88:51:ce:0f:70:d0:80:c3:f0:40:
bc:c7:56:67:b6:f8:b5:45:36:0f:f9:67:36:46:e2:
87:c1:5e:09:2a:56:ea:ee:e7:65:11:a8:5b:dc:33:
a3:60:4b:ca:7a:6a:29:5e:f4:d3:ea:52:21:0b:f6:
6c:e7:8e:4a:7d:6a:fd:ec:a4:fc:9a:7c:c7:7c:f9:
17:2a:19:b3:87:1f:4d:ea:0c:65:88:9f:a5:67:3b:
fe:42:d7:46:8a:59:8a:55:b0:6d:54:14:ee:57:ba:
1d:1d:a3:d0:c6:00:af:3c:da:47:cb:c3:a1:94:9a:
5d:8f:84:cb:ac:c3:d5:72:95:78:e5:7b:34:0c:1e:
1a:4e:61:52:ba:99:4b:d8:82:9c:7d:58:e9:40:ee:
ec:ed:e1:77:da:e4:cb:8f:f8:b0:cc:5e:ed:b8:b2:
02:d0:c7:b6:92:aa:8b:a0:4e:f1:34:f3:a8:f1:09:
91:7d:06:f8:af:49:c0:0d:e5:9a:e4:9f:01:1d:7f:
82:d3:14:a2:22:cd:90:03:88:a1:a6:06:2f:2c:ee:
26:8e:2d:8e:42:18:5c:d4:90:3c:d9:24:99:3d:23:
1d:64:48:f5:e4:9d:2c:d8:9a:41:0f:d6:c3:d8:0d:
fe:50:27:d1:39:85:61:31:0f:ae:44:1a:4d:5d:a4:
1c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:29:F0:5F:C1:77:39:86:C1:89:39:D1:68:B8:D6:F7:9C:22:49:ED
X509v3 Authority Key Identifier:
keyid:D3:B3:3B:D0:14:82:07:16:48:D6:97:73:7E:AF:91:61:2B:27:FC:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07M70BSCBxZI1pdzfq-RYSsn_Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/bf4679-7490-4446-b320-9ff6a387fcf6/1/rynwX8F3OYbBiTnRaLjW95wiSe0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/bf4679-7490-4446-b320-9ff6a387fcf6/1/07M70BSCBxZI1pdzfq-RYSsn_Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.144.0/22
Signature Algorithm: sha256WithRSAEncryption
37:18:b0:82:d9:01:a4:d2:45:4e:34:9e:59:17:3c:50:3e:0b:
b0:94:34:b4:3f:b1:04:7d:01:b7:27:9c:a1:d3:46:31:53:2f:
09:b7:e1:67:38:bd:da:c9:7f:f2:53:54:1c:a6:3c:f1:1f:b7:
5c:03:44:92:c2:32:92:fb:92:9a:fc:d1:b2:9b:6c:8d:a2:29:
3e:3a:b8:3e:b9:7f:39:87:81:85:31:10:e5:d9:b0:13:f0:4b:
74:42:7e:97:a4:7d:18:e7:91:f7:75:ea:7f:b5:94:ef:95:f9:
46:90:bf:bd:4e:bc:ab:e9:ed:14:0b:b4:a1:45:86:4b:66:e5:
70:14:8e:e2:e4:1d:fa:b9:a6:d5:df:e0:10:0c:d4:a5:79:32:
bf:00:ca:96:2c:f5:ad:96:de:58:e6:c3:27:76:e8:c6:4d:3f:
d0:89:c8:17:22:ad:1d:88:50:fc:b1:4c:f2:18:9c:7e:aa:68:
26:85:f2:b4:3a:75:4d:88:5d:4a:5b:2e:48:15:a9:f4:03:27:
94:f3:0b:57:c4:33:1c:d4:94:4f:7d:1d:09:30:04:e8:4d:ef:
31:e6:8d:6e:28:b8:88:23:ee:44:24:f6:e4:ff:a2:67:aa:82:
0b:76:ec:b6:cc:0e:d3:26:c5:a8:e8:99:6a:4a:9e:50:4c:a0:
93:6c:2f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:02 2025 by rpki-client