Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/E_1yVjDLIITiMTOqluQg9trY30Q.roa
File: E_1yVjDLIITiMTOqluQg9trY30Q.roa (raw, json)
Hash identifier: RjjkgGt/cpGVaITpTyCVk3+T0Y/rux53w//AAByskAE=
Subject key identifier: 13:FD:72:56:30:CB:20:84:E2:31:33:AA:96:E4:20:F6:DA:D8:DF:44
Certificate issuer: /CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Certificate serial: 010B68
Authority key identifier: D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/E_1yVjDLIITiMTOqluQg9trY30Q.roa
Signing time: Wed 02 Mar 2022 14:10:19 +0000
ROA not before: Wed 02 Mar 2022 14:10:19 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42763
IP address blocks: 91.193.120.0/22 maxlen: 24
77.87.0.0/21 maxlen: 24
193.33.174.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68456 (0x10b68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d524a83fff2f000e99c1f28ec19648986f8ddc37
Validity
Not Before: Mar 2 14:10:19 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=13fd725630cb2084e23133aa96e420f6dad8df44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:c0:af:f4:35:9d:64:bb:52:80:3f:e3:df:0e:
1b:a9:18:ed:72:aa:55:60:2a:b1:10:ab:44:08:89:
00:a3:68:99:0d:28:b4:d3:95:59:b6:26:90:6f:c2:
c9:c5:40:5c:b1:18:ca:26:8f:3d:04:47:08:0c:7e:
0d:cb:0b:79:be:94:ba:1a:d9:50:d7:39:97:6f:77:
bb:18:96:f2:8f:39:2c:bb:49:78:b0:24:3e:70:65:
c7:97:e6:ec:37:bf:0e:56:ce:26:4c:26:08:73:17:
5c:b8:e3:a9:21:f1:82:bb:0b:92:9f:69:0b:9f:67:
81:ed:f1:cd:b6:db:2b:f0:31:ba:b7:de:25:df:19:
d4:46:0e:44:10:47:e6:1b:f1:c9:4e:48:bd:f2:3e:
bb:20:5d:0d:93:ca:7b:7a:ed:94:38:6f:7e:f9:d0:
6a:54:45:85:9d:2a:86:01:f6:89:8e:91:e0:ff:d7:
88:10:b4:72:3b:d0:90:01:56:0f:a5:b6:11:ea:a0:
a9:69:fe:02:a0:1b:ea:81:c8:75:d9:0f:3f:7e:8b:
0e:f9:17:24:d9:88:02:99:41:6b:7e:28:30:c6:5a:
cd:4a:9c:f2:c9:df:6e:4a:df:09:89:d2:a3:54:f3:
cb:68:a8:0b:b4:dc:5e:cf:54:e6:25:df:12:e7:5f:
a4:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:FD:72:56:30:CB:20:84:E2:31:33:AA:96:E4:20:F6:DA:D8:DF:44
X509v3 Authority Key Identifier:
keyid:D5:24:A8:3F:FF:2F:00:0E:99:C1:F2:8E:C1:96:48:98:6F:8D:DC:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/E_1yVjDLIITiMTOqluQg9trY30Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dbafcd-a51d-446b-9cd7-44d40d1c46d5/1/1SSoP_8vAA6ZwfKOwZZImG-N3Dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.87.0.0/21
91.193.120.0/22
193.33.174.0/23
Signature Algorithm: sha256WithRSAEncryption
6a:fb:cb:f0:fc:cc:ad:b8:21:6a:36:0a:92:af:af:4b:a9:6e:
e5:a3:5d:3f:a2:84:dc:93:2a:ea:34:29:c9:32:e6:b7:87:7b:
35:61:65:e4:b0:e9:95:be:65:a2:fa:28:93:61:7a:ff:13:21:
68:f0:67:a2:4e:64:3b:61:1d:46:38:00:0c:43:66:aa:b7:aa:
01:47:11:e6:08:20:2a:04:dc:c0:a7:f6:3a:a3:d1:50:4f:24:
a8:a8:a0:a8:5a:55:40:90:50:a9:f6:8a:58:c8:fe:6b:88:9c:
5e:a8:d7:30:4d:40:5a:cd:47:f5:9e:7a:27:cd:66:37:0c:44:
e7:7d:16:98:3f:b7:f3:99:69:16:48:75:1a:84:07:5a:9d:dc:
91:08:5b:b1:fa:58:83:3a:01:d3:e4:d4:81:18:5d:12:28:4b:
84:39:c8:7e:6f:96:a3:96:b5:5a:38:a5:fd:7d:06:4c:e4:78:
bf:50:15:87:7b:52:5e:32:c3:58:89:f5:b9:22:f0:95:c2:06:
22:1f:4d:03:45:be:9f:f2:51:b3:ac:72:9b:d4:34:6d:94:ca:
56:80:f0:76:6b:6b:01:be:b4:bb:d5:3a:c3:5c:04:7b:31:63:
d1:49:a4:02:39:0f:d6:09:f9:7d:e9:12:52:62:f5:a8:ef:1c:
a2:c6:6c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:52:42 2025 by rpki-client