Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/2vbZ64ajWRTpOFFKHPyd6pWVVQ0.roa
File: 2vbZ64ajWRTpOFFKHPyd6pWVVQ0.roa (raw, json)
Hash identifier: N7jd8MZkZnleaNkNiQmH8inpABhXbrwxgevkbSM6dUc=
Subject key identifier: DA:F6:D9:EB:86:A3:59:14:E9:38:51:4A:1C:FC:9D:EA:95:95:55:0D
Certificate issuer: /CN=fb50683383f8f3836633f4d4230ada73ccb215cd
Certificate serial: 01839F9F616B0D8EC4296391F6F7EFB2D459
Authority key identifier: FB:50:68:33:83:F8:F3:83:66:33:F4:D4:23:0A:DA:73:CC:B2:15:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-1BoM4P484NmM_TUIwrac8yyFc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/2vbZ64ajWRTpOFFKHPyd6pWVVQ0.roa
Signing time: Mon 03 Oct 2022 20:52:45 +0000
ROA not before: Mon 03 Oct 2022 20:52:45 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 7029
IP address blocks: 91.241.164.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:9f:9f:61:6b:0d:8e:c4:29:63:91:f6:f7:ef:b2:d4:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb50683383f8f3836633f4d4230ada73ccb215cd
Validity
Not Before: Oct 3 20:52:45 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=daf6d9eb86a35914e938514a1cfc9dea9595550d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:3d:71:82:e7:68:14:bb:fd:a7:f6:c0:d5:a8:
c7:72:cf:82:bf:31:c8:e3:4d:06:d7:1f:32:0e:7a:
d2:37:1e:dc:01:07:4d:dd:48:04:a0:1e:48:4a:8b:
ba:e2:8f:06:43:1a:b5:4d:25:d0:38:20:e1:4e:91:
54:70:51:0e:c3:7b:17:10:3f:6c:03:79:50:bf:bd:
ec:69:bc:c0:27:f4:01:dd:a2:a5:e6:69:4c:66:e0:
10:3f:12:10:a9:63:f2:a9:bc:d8:ba:7a:97:58:45:
f2:ad:0c:ff:ee:76:c7:f6:3d:f4:77:c6:36:d3:65:
2f:9a:f2:23:50:02:30:33:2a:e0:21:9f:e6:5e:92:
e6:39:8c:b6:9a:c0:6d:59:fc:34:0c:ca:8b:d4:1e:
8b:64:4c:c2:62:a0:5d:d0:21:2d:77:34:9d:5d:85:
85:0d:64:d4:83:64:a8:ab:24:7b:6e:c5:09:ee:cf:
4c:60:f9:48:a9:92:15:ef:c4:7b:05:7f:da:11:43:
4c:12:42:a9:6f:5c:c1:79:7d:aa:f7:ce:51:23:6a:
2d:8a:e6:4e:12:52:7d:52:c3:9e:c4:39:05:fc:d0:
62:ea:10:1f:fa:e7:b5:a3:87:fc:ec:a8:b5:1d:0f:
a6:c1:64:27:09:83:60:00:a5:77:47:50:30:77:f3:
0f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:F6:D9:EB:86:A3:59:14:E9:38:51:4A:1C:FC:9D:EA:95:95:55:0D
X509v3 Authority Key Identifier:
keyid:FB:50:68:33:83:F8:F3:83:66:33:F4:D4:23:0A:DA:73:CC:B2:15:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-1BoM4P484NmM_TUIwrac8yyFc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/2vbZ64ajWRTpOFFKHPyd6pWVVQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/72500f-05f5-426b-88ce-c62a23af3f67/1/1-1BoM4P484NmM_TUIwrac8yyFc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.241.164.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:53:93:7d:97:0d:53:eb:ba:56:3a:d7:e3:a0:03:f0:de:6d:
c0:10:99:19:8d:2a:7d:30:63:bd:11:2d:f6:2e:f4:ad:d1:dc:
f6:33:05:8d:c9:9c:13:ed:25:0c:3e:66:bd:aa:4f:6e:f4:c3:
ab:c0:49:db:37:e4:85:8b:fe:9d:39:8b:93:69:84:1e:95:34:
ae:09:bc:24:da:a4:29:aa:5a:69:bd:65:d2:d5:2d:0d:b5:f4:
0f:ca:e7:c2:07:01:40:59:ad:1e:ae:97:22:5b:e9:42:87:9d:
28:89:a6:ab:f2:49:8a:53:e7:26:db:6a:42:83:3a:86:95:ec:
64:51:4c:02:f9:09:cb:b5:96:53:51:19:52:15:b6:14:c2:ab:
8b:d9:00:01:16:24:f5:91:f8:41:5b:91:9f:23:eb:78:04:3b:
74:e1:8c:5d:b2:e1:0c:69:e2:e7:88:59:d2:21:b5:95:88:af:
2f:f2:02:2d:a6:af:64:6a:9c:92:6d:e1:38:26:2a:77:a2:cb:
40:2c:1d:a1:f3:ba:1f:f9:8d:13:08:6d:ce:1e:ea:ee:82:c6:
3f:32:9c:69:ea:79:e7:c7:f1:3a:54:85:fa:c6:8a:6b:2c:97:
6b:04:4d:d1:3e:42:60:04:d1:5a:9b:97:10:b8:64:c4:51:41:
29:e0:d6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 04:22:27 2025 by rpki-client