Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/_MBxEFK1FF87UXZHkgukRxzha2s.roa
File: _MBxEFK1FF87UXZHkgukRxzha2s.roa (raw, json)
Hash identifier: iwAvkeJTd0IdJ1omedYcAueWx0loUg9fISvPUASlNVw=
Subject key identifier: FC:C0:71:10:52:B5:14:5F:3B:51:76:47:92:0B:A4:47:1C:E1:6B:6B
Certificate issuer: /CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
Certificate serial: 05FE913D
Authority key identifier: 3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/_MBxEFK1FF87UXZHkgukRxzha2s.roa
Signing time: Sat 01 Jan 2022 12:54:13 +0000
ROA not before: Sat 01 Jan 2022 12:54:13 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 43947
IP address blocks: 91.198.219.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 100569405 (0x5fe913d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3eb91f36cffe80efe0dff26123f8f97c15d9763c
Validity
Not Before: Jan 1 12:54:13 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=fcc0711052b5145f3b517647920ba4471ce16b6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:fc:19:fb:46:5b:ed:99:53:4d:b8:66:df:54:
59:ef:14:02:37:95:bb:b5:a4:d5:91:72:9b:ec:31:
14:1d:df:0d:3b:51:2f:23:cc:d3:08:79:ce:15:71:
b9:c3:a4:e1:00:60:4b:46:35:ce:22:cf:90:a6:e7:
06:b8:51:cd:d8:45:85:00:a5:02:ba:18:04:72:02:
a2:dd:0b:f3:8b:f4:7b:bf:bb:f9:b7:c5:e1:73:f2:
27:2d:f8:9d:d2:7f:ac:3b:b1:9e:d2:e4:a8:31:88:
09:68:38:66:4a:d0:6d:92:e6:26:b7:eb:10:5b:7a:
1d:63:c5:fd:34:8f:82:82:e6:07:d9:19:0e:5f:5f:
f0:0b:0b:5f:5d:6f:da:11:64:d1:53:a2:b9:2a:4f:
61:4b:3e:4c:cc:c9:78:0d:8e:c5:d2:49:3a:85:e6:
f9:de:ed:3a:59:0d:d6:29:25:70:c4:a8:02:b4:ea:
87:e2:b9:87:89:a3:b4:0e:71:f9:0c:49:57:26:13:
58:9b:fc:6e:33:58:85:17:39:fe:53:cc:44:10:e5:
85:ea:f3:6d:fa:7d:f3:78:20:17:3f:90:b3:ee:35:
46:73:e2:cd:12:83:98:3a:9a:66:23:1c:f7:4f:ce:
10:ed:f6:74:0b:74:4c:8c:4e:1c:98:cd:1b:a7:fc:
e6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C0:71:10:52:B5:14:5F:3B:51:76:47:92:0B:A4:47:1C:E1:6B:6B
X509v3 Authority Key Identifier:
keyid:3E:B9:1F:36:CF:FE:80:EF:E0:DF:F2:61:23:F8:F9:7C:15:D9:76:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrkfNs_-gO_g3_JhI_j5fBXZdjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/_MBxEFK1FF87UXZHkgukRxzha2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/aa6565-5d97-4a80-9a5d-424c23f50ff3/1/PrkfNs_-gO_g3_JhI_j5fBXZdjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.219.0/24
Signature Algorithm: sha256WithRSAEncryption
05:27:12:5a:f2:fb:67:b6:c2:09:f5:1b:52:06:fc:77:43:7d:
2e:7c:91:3a:0f:fb:81:21:3a:53:77:18:76:c4:db:8e:60:33:
39:58:1b:44:01:1b:84:12:7f:32:21:b6:65:97:c7:19:35:ea:
dc:f0:25:65:18:e3:7a:60:a7:ae:ef:c8:f0:34:a8:ab:23:dd:
a3:d2:32:e1:3c:dc:b1:f1:99:12:65:01:e3:b0:7f:aa:1f:36:
4e:1c:1e:3b:d4:61:26:a3:5d:36:f1:a6:0d:0a:80:58:6f:7a:
c7:cb:4f:e1:67:e1:b2:f3:d7:2e:d0:c5:02:15:a0:d1:c3:fe:
4b:4a:1d:9a:fc:0f:f9:7f:7e:43:18:13:60:1b:46:7c:eb:79:
1c:d6:b0:dd:d5:c5:8f:f9:e2:7f:ee:e3:06:08:8b:73:82:c5:
79:04:38:33:ad:bd:7b:aa:f9:a2:73:33:1d:2e:69:c8:1b:24:
8c:2d:93:c2:f5:44:b2:f1:91:62:eb:e4:69:76:1b:30:9d:61:
37:d5:f0:90:7e:a5:dc:00:50:5d:ba:f8:a4:56:46:52:fd:3f:
d9:20:a3:1d:32:56:b1:8f:e3:f7:fe:a8:d8:67:8d:c8:5d:24:
8e:29:69:59:16:4d:b1:14:36:e1:ce:99:6c:fc:eb:b8:f3:57:
00:98:89:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 04:46:03 2025 by rpki-client