Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/RDLPRSp8hVLVBlhYtYtcLhbSs1Q.roa
File: RDLPRSp8hVLVBlhYtYtcLhbSs1Q.roa (raw, json)
Hash identifier: Yw2qg5Y8DyogXvrzkNRkNQJznh65RXBurajNlnWRZLk=
Subject key identifier: 44:32:CF:45:2A:7C:85:52:D5:06:58:58:B5:8B:5C:2E:16:D2:B3:54
Certificate issuer: /CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Certificate serial: 0185C8C9156A9100D5D5D3FD8944AF54B7A9
Authority key identifier: 92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/RDLPRSp8hVLVBlhYtYtcLhbSs1Q.roa
Signing time: Thu 19 Jan 2023 06:48:19 +0000
ROA not before: Thu 19 Jan 2023 06:48:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13075
IP address blocks: 91.213.104.0/24 maxlen: 24
83.149.13.0/24 maxlen: 24
83.149.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:c8:c9:15:6a:91:00:d5:d5:d3:fd:89:44:af:54:b7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=92d7c2a1072d73507adbf6507de68aaac01785c0
Validity
Not Before: Jan 19 06:48:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4432cf452a7c8552d5065858b58b5c2e16d2b354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b9:ab:5e:a9:0e:90:53:78:c7:77:5e:7e:32:
3f:f7:57:a7:e2:24:97:a6:c0:86:2d:85:d3:6f:8b:
9e:58:0e:0c:39:1c:86:8f:a7:01:36:d5:e9:5b:b6:
ec:66:7e:72:0e:64:93:0a:74:85:0c:29:58:76:22:
06:b9:da:a2:95:bb:93:51:e5:4b:6e:26:57:aa:2f:
3f:fb:7d:f2:fa:6b:c6:28:6b:1f:1b:f2:09:3b:a5:
17:ef:bd:b5:e9:bc:39:85:f1:ed:bd:a8:8d:4c:a3:
7c:5b:1d:5d:22:99:00:d8:db:dc:c1:a7:d3:82:67:
81:03:8e:7e:c1:5c:94:a8:fc:1c:72:55:f1:a6:6a:
78:56:af:ed:0f:23:85:41:65:de:5a:2b:73:5e:62:
57:dd:09:d7:15:5e:53:6c:47:08:ae:44:86:3a:b5:
eb:55:17:da:c0:7d:5e:1d:c1:1a:e3:dd:2f:8c:d3:
77:1b:de:fb:53:d4:49:24:c2:0c:4d:b1:1b:12:27:
1e:7a:5c:bc:30:b6:03:e8:55:a7:c2:8c:21:09:3d:
13:c7:a7:bb:21:23:e2:62:f3:5f:6b:16:19:47:cf:
81:0a:de:fe:ee:09:86:69:a6:5f:45:10:b5:b6:37:
b6:d3:aa:ae:92:5a:c9:b1:2d:79:90:85:8e:15:d7:
7d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:32:CF:45:2A:7C:85:52:D5:06:58:58:B5:8B:5C:2E:16:D2:B3:54
X509v3 Authority Key Identifier:
keyid:92:D7:C2:A1:07:2D:73:50:7A:DB:F6:50:7D:E6:8A:AA:C0:17:85:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ktfCoQctc1B62_ZQfeaKqsAXhcA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/RDLPRSp8hVLVBlhYtYtcLhbSs1Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/9cff7c-f05a-4e02-bea7-89e56c80d1d0/1/ktfCoQctc1B62_ZQfeaKqsAXhcA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.149.13.0-83.149.14.255
91.213.104.0/24
Signature Algorithm: sha256WithRSAEncryption
43:90:e4:05:09:36:62:5b:73:30:33:4d:0b:d9:67:70:93:6b:
dc:6c:d1:c7:45:df:1e:10:38:14:76:40:f4:9d:a7:99:37:8a:
41:8c:8a:44:d2:8e:34:79:ad:29:8b:64:f1:d6:22:aa:e6:93:
d6:7a:8b:89:2a:c3:2a:0a:05:13:a1:92:33:b6:6c:9e:fd:ba:
80:0b:3d:aa:a4:eb:39:79:cf:68:fd:66:66:c6:1c:cd:c7:77:
5a:73:b6:96:a1:1e:3e:f8:aa:2c:0a:27:14:24:53:d8:08:dd:
04:eb:61:ba:a4:3b:ef:03:25:80:ff:af:9b:0f:b1:6c:8c:16:
9d:24:88:63:03:a1:0d:cf:19:5f:f9:19:fe:ef:b5:ac:40:d8:
6f:fb:62:c1:af:a7:4b:4d:c3:de:3c:e2:24:29:fe:90:25:d8:
73:7c:b5:76:55:04:c9:4d:9e:a8:8a:59:47:17:d6:22:77:a9:
7e:0f:3d:33:14:95:1c:01:47:86:3f:c6:81:33:c1:1d:7d:5e:
3d:74:41:47:d2:10:5b:5b:b3:ef:e5:47:2d:9e:b4:90:a2:25:
f1:ad:a8:70:4e:3a:ef:ad:2c:99:f8:eb:86:61:4b:35:c6:75:
f9:25:85:62:a0:d9:9f:cc:32:be:87:e3:26:cc:63:96:14:88:
42:39:68:56
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Apr 8 04:23:38 2025 by rpki-client