Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ad0707-ed5a-4c7a-b6e8-476b0763370f/1/3fkmDTqwLeNYJ-fbGEtxLa_5ybM.roa
File: 3fkmDTqwLeNYJ-fbGEtxLa_5ybM.roa (raw, json)
Hash identifier: XQDMfYqwL2wV7JoGpObV88DXRjfZTyGyfJ9InF8pqHE=
Subject key identifier: DD:F9:26:0D:3A:B0:2D:E3:58:27:E7:DB:18:4B:71:2D:AF:F9:C9:B3
Certificate issuer: /CN=4eaa16e3c81b04b0b24f7fc144fb4e023352eedf
Certificate serial: 018570F076FE4A93A1182FDE6742473C2E12
Authority key identifier: 4E:AA:16:E3:C8:1B:04:B0:B2:4F:7F:C1:44:FB:4E:02:33:52:EE:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqoW48gbBLCyT3_BRPtOAjNS7t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ad0707-ed5a-4c7a-b6e8-476b0763370f/1/3fkmDTqwLeNYJ-fbGEtxLa_5ybM.roa
Signing time: Mon 02 Jan 2023 05:24:45 +0000
ROA not before: Mon 02 Jan 2023 05:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 79.110.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:76:fe:4a:93:a1:18:2f:de:67:42:47:3c:2e:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eaa16e3c81b04b0b24f7fc144fb4e023352eedf
Validity
Not Before: Jan 2 05:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ddf9260d3ab02de35827e7db184b712daff9c9b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:a6:df:df:d5:3a:fa:4f:15:3b:e2:e2:f6:8c:
81:98:e9:10:ec:ce:d0:f1:ec:e0:ea:b6:29:40:92:
07:00:c4:c6:26:ee:9e:58:a3:ec:71:ee:52:40:b4:
0d:07:2f:3a:7c:54:f0:21:64:30:b4:50:7e:59:c5:
06:3f:3a:44:da:b8:5c:4e:f0:01:2e:52:f9:6f:9b:
78:46:01:0b:fa:c2:1a:0e:74:f9:c5:db:9d:f8:54:
a8:45:d8:b0:7e:b2:fc:74:d7:f6:85:f0:69:a8:a9:
ac:2c:78:d4:9f:b6:6d:a7:16:05:9a:fc:0b:c1:f5:
e9:ee:15:67:48:eb:94:59:0f:b0:b7:15:07:c2:97:
05:8b:73:d0:18:94:28:83:d4:9b:93:46:3f:7c:5a:
3d:ee:d1:9b:c2:43:a5:69:3e:2b:e9:13:d8:79:fd:
f0:17:f3:5a:80:e5:f2:0d:ef:f1:4c:0c:33:88:0d:
c9:b3:05:8f:c5:1c:dc:eb:cc:aa:f7:71:00:40:71:
7a:99:85:d1:64:7f:e8:aa:96:16:20:0d:85:c5:dd:
d4:e7:dc:ae:7f:24:2a:33:0b:41:ae:9b:6c:f4:a8:
09:00:85:53:0a:8f:b7:8a:8b:37:ad:c0:8c:b6:43:
c7:7d:6d:ad:2e:03:f3:c2:26:2f:fa:78:ae:22:2b:
af:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F9:26:0D:3A:B0:2D:E3:58:27:E7:DB:18:4B:71:2D:AF:F9:C9:B3
X509v3 Authority Key Identifier:
keyid:4E:AA:16:E3:C8:1B:04:B0:B2:4F:7F:C1:44:FB:4E:02:33:52:EE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqoW48gbBLCyT3_BRPtOAjNS7t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ad0707-ed5a-4c7a-b6e8-476b0763370f/1/3fkmDTqwLeNYJ-fbGEtxLa_5ybM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ad0707-ed5a-4c7a-b6e8-476b0763370f/1/TqoW48gbBLCyT3_BRPtOAjNS7t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.236.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:7b:bc:c7:ca:fc:07:5c:6f:1a:30:0c:63:ac:ed:80:8e:fa:
5b:09:a7:69:a6:2b:d6:69:49:d0:3b:4c:e1:00:61:a6:af:0f:
f4:0c:88:dd:05:fc:74:63:c7:bb:12:3b:96:9b:ee:85:f8:85:
ec:db:24:84:ad:d6:cf:6f:55:2a:47:f2:1f:90:ef:62:16:f4:
a0:2b:b7:da:43:f5:82:6c:e2:f4:d1:58:0a:0f:ac:2e:92:e3:
f0:a2:57:74:fb:83:b9:4d:24:29:65:70:9d:db:5a:24:75:9a:
47:8d:32:6a:ae:8d:35:8b:9c:cf:50:96:27:9c:21:e9:a0:0e:
ee:83:c9:6e:fc:cf:6e:e4:73:1c:58:2b:19:22:d6:88:b1:48:
d8:8c:23:ab:66:2e:cd:20:bf:ba:d3:65:50:d7:6e:c8:ad:08:
e9:b1:ef:ec:77:d7:ae:39:d6:34:eb:21:d6:b4:eb:77:25:2c:
5c:38:70:02:94:7b:d0:b1:06:65:6b:e9:c2:28:81:75:d6:5d:
4b:98:d4:49:9b:15:6f:8f:ea:88:59:df:98:38:1a:74:20:03:
34:ee:3d:8a:0f:63:87:71:31:8a:73:90:96:8f:c6:c8:4c:4d:
d2:43:f3:2b:84:de:46:25:f7:d3:4f:e0:3a:13:e6:c7:b5:e7:
78:ae:f2:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 05:39:05 2025 by rpki-client