Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/36cff2-2ea6-4777-85c4-66c81b1e9b34/1/9i7hVgWHpSTzXeuk_YnUmJ1y-RM.roa
File: 9i7hVgWHpSTzXeuk_YnUmJ1y-RM.roa (raw, json)
Hash identifier: ZscbtbQvG+qMxo7GqgdcOiw+Y4Bb4yyW7klCXSLB+24=
Subject key identifier: F6:2E:E1:56:05:87:A5:24:F3:5D:EB:A4:FD:89:D4:98:9D:72:F9:13
Certificate issuer: /CN=bc5afcc2a744fac21a345d5d75990a820010a3d2
Certificate serial: 3EC2
Authority key identifier: BC:5A:FC:C2:A7:44:FA:C2:1A:34:5D:5D:75:99:0A:82:00:10:A3:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vFr8wqdE-sIaNF1ddZkKggAQo9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/36cff2-2ea6-4777-85c4-66c81b1e9b34/1/9i7hVgWHpSTzXeuk_YnUmJ1y-RM.roa
Signing time: Thu 28 Apr 2022 12:14:57 +0000
ROA not before: Thu 28 Apr 2022 12:14:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 3303
IP address blocks: 91.223.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16066 (0x3ec2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc5afcc2a744fac21a345d5d75990a820010a3d2
Validity
Not Before: Apr 28 12:14:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f62ee1560587a524f35deba4fd89d4989d72f913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c2:25:90:81:b0:3f:27:7e:1b:0e:ed:8d:ec:
7f:cc:70:6b:54:1c:fd:d4:6d:42:3f:0f:73:ec:db:
25:af:5d:ef:ca:94:68:55:e5:9c:12:39:7f:0a:ec:
c7:10:7c:9f:9f:64:ca:fe:e2:a7:d5:b1:4a:72:29:
66:ed:03:69:3c:ad:05:75:e6:86:ac:e1:4b:65:81:
9d:d2:f3:3b:63:be:b2:35:3f:02:16:55:96:4f:1a:
f8:ec:63:1d:db:74:cb:82:11:18:62:f4:79:35:1a:
b4:0d:b8:5a:a4:79:4e:87:b0:1f:b9:4b:5e:96:59:
4f:ac:e6:79:0a:84:98:cc:4d:c7:00:00:62:36:96:
0c:83:30:5f:c2:81:e6:10:fc:42:95:90:04:c1:15:
2b:05:09:3c:3e:8a:be:dd:99:04:fe:52:0b:0d:2a:
29:50:8b:f2:e6:75:29:07:ad:04:d9:71:4c:b1:e9:
3a:b7:e1:76:a9:23:6f:65:84:00:d5:64:80:d9:39:
09:c1:e9:0a:75:61:83:69:75:a2:a8:c7:5b:40:a3:
f4:06:e1:9f:af:71:96:b4:8d:f1:67:da:87:c8:d8:
5d:08:56:15:4a:67:ab:a5:44:67:90:ed:a0:99:17:
33:26:f6:07:62:d4:f6:d2:fb:90:8f:d0:e5:0c:cc:
af:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2E:E1:56:05:87:A5:24:F3:5D:EB:A4:FD:89:D4:98:9D:72:F9:13
X509v3 Authority Key Identifier:
keyid:BC:5A:FC:C2:A7:44:FA:C2:1A:34:5D:5D:75:99:0A:82:00:10:A3:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFr8wqdE-sIaNF1ddZkKggAQo9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/36cff2-2ea6-4777-85c4-66c81b1e9b34/1/9i7hVgWHpSTzXeuk_YnUmJ1y-RM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/36cff2-2ea6-4777-85c4-66c81b1e9b34/1/vFr8wqdE-sIaNF1ddZkKggAQo9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.154.0/24
Signature Algorithm: sha256WithRSAEncryption
77:da:21:8d:6e:82:60:7e:a8:c5:d4:c9:b0:c9:f3:f9:32:fc:
ac:fd:46:1f:48:13:75:e1:5c:a6:3b:2a:51:39:ff:90:f1:f2:
c2:41:8f:fb:57:b5:53:01:ae:86:00:84:24:15:2f:e2:8e:79:
10:18:18:99:bb:3b:fc:60:d5:40:1f:6e:65:59:be:c6:05:e0:
cb:9d:8c:77:c5:ac:17:fc:46:c1:16:61:e8:8b:aa:78:7b:13:
b8:4f:e5:2e:53:e2:1c:e6:62:6f:aa:7c:e6:06:e2:6a:a1:7f:
e5:11:79:08:c2:e4:46:e8:ef:36:c4:43:d9:1e:6b:7d:37:94:
04:55:aa:03:0f:3d:4e:fc:ca:e1:3d:4a:41:93:4b:b1:0b:5d:
a0:7f:0e:27:15:20:76:14:a8:03:21:88:fa:37:f1:d1:10:d4:
25:8e:5b:41:3f:ef:1c:93:91:80:dd:0c:5c:91:88:3f:07:87:
77:1a:a5:52:8c:46:10:34:fc:b9:c4:fb:ca:32:be:b5:7f:66:
71:bc:a8:3c:9e:69:8f:e4:fb:1d:1c:8b:8b:66:54:04:95:ab:
d0:32:1a:0f:60:92:74:81:c4:35:11:2b:57:78:af:cf:d3:4a:
d3:1e:8e:29:31:12:e5:52:32:d3:52:de:bb:75:10:4e:28:7c:
ec:c6:6d:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:57 2025 by rpki-client