Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/cC3qEyLwvQCoEx0E8fa6hCQIIMk.roa
File: cC3qEyLwvQCoEx0E8fa6hCQIIMk.roa (raw, json)
Hash identifier: t6q5YnGG2tDRloa96C40IAzp6BUV/ndP0HTUzMGh9cA=
Subject key identifier: 70:2D:EA:13:22:F0:BD:00:A8:13:1D:04:F1:F6:BA:84:24:08:20:C9
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 01941F8C9EEFA0B1B6FACD620426406C66CB
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/cC3qEyLwvQCoEx0E8fa6hCQIIMk.roa
Signing time: Wed 01 Jan 2025 01:48:16 +0000
ROA not before: Wed 01 Jan 2025 01:48:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 14618
IP address blocks: 91.231.35.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:9e:ef:a0:b1:b6:fa:cd:62:04:26:40:6c:66:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: Jan 1 01:48:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=702dea1322f0bd00a8131d04f1f6ba84240820c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cc:88:78:3d:21:59:11:50:69:08:ce:57:87:
77:48:8d:31:fb:18:61:4f:5b:8a:47:a7:8a:26:ba:
f4:36:24:fe:6d:10:31:d3:53:e4:a1:28:61:30:6a:
a4:a4:68:5a:01:ad:c2:d5:4d:a8:16:d2:95:15:78:
9e:55:a7:0f:7a:5d:a9:96:92:ab:24:f3:b1:10:95:
eb:53:77:5e:32:e5:1b:30:66:29:40:09:84:d0:db:
c0:56:3a:71:31:be:53:ce:af:3d:24:f8:21:68:d6:
1e:4c:bb:dd:d2:b0:b5:cb:12:fd:d6:25:28:24:6c:
1e:57:c5:6e:b2:1a:83:69:89:f9:71:a1:e2:76:69:
90:bc:8f:03:fd:46:fb:74:c3:22:d7:94:2f:fc:b6:
a3:69:35:41:04:54:46:46:b6:fa:90:17:e6:5b:50:
58:86:14:d5:9e:f1:d8:5b:84:8d:3b:54:75:3c:60:
3e:39:d7:84:00:e6:d3:7d:9e:7d:a0:b4:01:58:bc:
8d:d2:d4:71:3a:54:e1:0c:d6:72:95:46:16:5e:14:
42:e8:29:04:e5:34:26:95:33:12:63:a0:c5:bc:b9:
0c:7d:7d:9c:cc:f8:da:94:e1:bc:35:39:11:75:69:
dd:34:97:de:fa:6f:3f:85:1c:81:51:0a:0d:bd:a6:
8c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:2D:EA:13:22:F0:BD:00:A8:13:1D:04:F1:F6:BA:84:24:08:20:C9
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/cC3qEyLwvQCoEx0E8fa6hCQIIMk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.231.35.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:57:1f:26:ce:49:27:99:c4:9e:a7:20:a5:b0:b1:44:d1:7e:
fd:95:75:99:94:c8:49:e1:94:53:d5:72:a8:77:61:75:85:fb:
e3:bb:f7:5c:17:e3:96:c7:1d:16:a9:f7:41:99:d4:be:0e:ea:
1e:93:17:32:11:7f:b6:e1:90:2e:19:d9:33:03:93:a1:f9:90:
42:63:27:03:33:af:24:31:23:60:05:f0:15:41:85:28:4f:ce:
69:f4:e3:92:0c:c2:c9:77:9b:29:55:e2:09:bd:e3:d5:95:b1:
fe:4a:77:d9:a6:3a:88:d9:09:a2:80:cc:9d:32:e0:45:bd:d1:
53:45:a5:ab:c1:23:58:2d:07:86:f0:5e:52:8d:28:57:67:9b:
07:92:b7:2d:91:1f:28:a5:64:be:51:98:1a:d4:c9:cf:29:1a:
7f:09:33:33:ab:da:ee:fa:fd:39:d5:f3:53:d5:b9:02:68:7f:
91:69:e9:db:3e:ed:24:d1:fa:76:76:af:72:9f:e2:93:33:26:
4d:b0:f3:85:73:e0:2d:c7:69:4d:ca:15:6a:15:ec:22:ac:8f:
6d:9e:d7:b4:ad:ee:4a:0c:c5:4a:67:9e:41:0b:74:7e:93:e0:
a6:52:ef:f4:db:28:bd:37:8d:fa:db:e4:00:69:69:d0:93:15:
ca:41:3d:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:50:12 2025 by rpki-client