Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/i0p5fJwsPxs0CyRd6lZ1KGHQEhA.roa
File: i0p5fJwsPxs0CyRd6lZ1KGHQEhA.roa (raw, json)
Hash identifier: OKAVJGOhpAC/e3pz4q3vGJBcy1VscYwnrCZLHMt+vpg=
Subject key identifier: 8B:4A:79:7C:9C:2C:3F:1B:34:0B:24:5D:EA:56:75:28:61:D0:12:10
Certificate issuer: /CN=a4e786e4809373c1985455858c6b02b30a71ad1b
Certificate serial: 0C0D3BEC
Authority key identifier: A4:E7:86:E4:80:93:73:C1:98:54:55:85:8C:6B:02:B3:0A:71:AD:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pOeG5ICTc8GYVFWFjGsCswpxrRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/i0p5fJwsPxs0CyRd6lZ1KGHQEhA.roa
Signing time: Mon 30 May 2022 09:43:14 +0000
ROA not before: Mon 30 May 2022 09:43:14 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 47692
IP address blocks: 91.151.16.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 202193900 (0xc0d3bec)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4e786e4809373c1985455858c6b02b30a71ad1b
Validity
Not Before: May 30 09:43:14 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=8b4a797c9c2c3f1b340b245dea56752861d01210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:9e:73:20:a5:d7:61:c1:e1:99:50:94:a2:92:
29:8d:18:cb:9f:9b:13:66:fb:0f:c2:2d:7e:22:fe:
86:08:7d:e7:ee:a9:58:0d:57:73:5f:a9:1e:b1:f9:
10:31:2b:8d:e2:37:4e:d2:04:1f:55:c5:b9:00:a3:
c7:94:e3:b6:6d:dd:f9:63:e5:f6:84:a7:e4:65:7f:
71:8c:58:6d:c7:4b:d2:c0:7e:73:cb:e3:71:ab:dc:
8f:07:cf:ee:7d:bd:3c:86:9d:b1:d8:1b:c4:6d:77:
cd:72:de:41:d6:91:52:f2:24:9a:25:6b:a6:e3:08:
ea:5e:e9:42:96:a8:e2:e2:ef:02:8f:fd:33:d5:b0:
79:37:3b:99:50:5f:74:00:c2:5c:b0:a1:78:b0:b0:
c9:13:44:42:54:90:79:96:8f:22:e4:fb:7b:ff:4f:
b7:a5:b0:85:48:e6:a0:88:4e:c8:61:d6:fa:35:97:
93:97:51:05:a3:38:9e:fd:a0:d4:90:28:c6:25:a2:
0e:08:c5:5a:e3:45:2b:f7:a2:20:44:ec:a4:bf:2f:
94:1b:22:dd:f9:85:c4:01:f6:3e:5b:76:a4:5c:66:
a5:6b:b8:61:ab:22:d0:4a:4c:de:f5:2f:d9:18:95:
a6:54:e9:4c:a2:a5:36:d5:12:ef:e2:04:09:8d:e7:
2d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:4A:79:7C:9C:2C:3F:1B:34:0B:24:5D:EA:56:75:28:61:D0:12:10
X509v3 Authority Key Identifier:
keyid:A4:E7:86:E4:80:93:73:C1:98:54:55:85:8C:6B:02:B3:0A:71:AD:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pOeG5ICTc8GYVFWFjGsCswpxrRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/i0p5fJwsPxs0CyRd6lZ1KGHQEhA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/3ce395-67da-4161-aef1-f6697bfd2d4f/1/pOeG5ICTc8GYVFWFjGsCswpxrRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.151.16.0/22
Signature Algorithm: sha256WithRSAEncryption
99:63:4c:ad:b1:8f:47:aa:48:d6:9e:cd:e1:69:70:6c:2d:09:
f3:95:a0:4c:db:d1:d5:5b:1a:23:cc:09:30:be:b3:6b:49:f0:
a3:f0:f9:75:5a:94:25:da:a0:08:5d:1a:fc:8d:54:af:04:bd:
a0:46:37:6c:27:1b:7e:c5:64:6c:99:57:8d:70:49:3e:78:34:
1b:98:1c:c6:ca:66:b4:b6:a8:f8:a4:c8:d0:c4:f9:f8:5a:c2:
89:21:a9:10:89:4e:d9:c9:a9:fa:46:86:83:e7:4a:98:08:cc:
3c:1b:93:de:bc:b8:93:81:60:c2:41:ba:48:fb:89:c4:9e:43:
a3:8f:cf:81:f3:04:b0:a1:e5:7e:fc:f8:80:d7:84:3e:c0:22:
87:cb:5a:83:48:a0:41:73:47:e8:ba:09:6b:cd:ee:eb:43:b3:
e4:35:fc:cd:66:a2:a3:ea:98:ca:cc:05:61:2c:98:6d:35:4e:
a1:7a:83:30:27:32:ac:6c:b1:46:aa:3c:b4:40:2d:6d:b2:79:
3a:52:cc:46:a9:e4:4f:90:b9:05:b7:9e:3b:a7:33:52:66:e4:
d2:83:70:16:70:da:14:8b:46:d7:c0:20:4f:81:d1:bf:dd:43:
66:f4:8a:cd:3d:f3:e9:87:e6:b5:1f:6c:40:45:49:77:ff:d6:
40:b9:77:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:13:32 2025 by rpki-client