Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/0be3df-6080-4655-b238-6576f5901455/1/K3_NttOQWKJgGYBpGKyQp8S4Lg4.roa
File: K3_NttOQWKJgGYBpGKyQp8S4Lg4.roa (raw, json)
Hash identifier: D15K/JM/3mYRJ8i5i9ZXpDKicnwoHZDCFlKm8SgVXa0=
Subject key identifier: 2B:7F:CD:B6:D3:90:58:A2:60:19:80:69:18:AC:90:A7:C4:B8:2E:0E
Certificate issuer: /CN=504d120b1c209849ecf9ae517af81aae81d168b7
Certificate serial: AA4C
Authority key identifier: 50:4D:12:0B:1C:20:98:49:EC:F9:AE:51:7A:F8:1A:AE:81:D1:68:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UE0SCxwgmEns-a5RevgaroHRaLc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/0be3df-6080-4655-b238-6576f5901455/1/K3_NttOQWKJgGYBpGKyQp8S4Lg4.roa
Signing time: Sun 06 Mar 2022 07:53:04 +0000
ROA not before: Sun 06 Mar 2022 07:53:04 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 50131
IP address blocks: 91.246.39.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43596 (0xaa4c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504d120b1c209849ecf9ae517af81aae81d168b7
Validity
Not Before: Mar 6 07:53:04 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=2b7fcdb6d39058a26019806918ac90a7c4b82e0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0f:89:32:60:98:0c:cb:06:30:ff:82:13:22:
0b:61:43:b3:4b:90:b5:eb:65:aa:9d:24:59:68:74:
1f:5b:1a:f4:fd:3d:63:09:8b:a4:de:49:0b:67:f7:
be:9b:61:90:ec:0f:db:ac:c2:40:41:4e:ad:69:1a:
13:91:7c:9a:a3:c6:8a:58:05:94:04:8f:a3:cd:52:
db:fd:31:c6:a0:e4:ab:19:0b:90:7b:59:f5:a5:3d:
e5:b7:ee:9c:42:ba:3f:f5:48:b6:44:b8:69:23:84:
d4:34:9b:ad:11:c0:af:fc:73:14:3e:98:e8:66:ff:
00:49:4e:3c:de:8c:b9:8d:c2:89:7c:b7:a8:9b:9f:
06:c5:c1:1a:d7:7c:2f:29:25:a8:dd:7b:45:e8:58:
17:09:88:c9:ff:7a:6e:ab:fc:94:2e:27:a3:cb:3d:
fb:4f:26:62:e4:05:2e:c7:5d:e2:33:70:60:88:cf:
d7:9c:4c:b9:14:51:d1:86:64:7b:a5:34:8e:c5:a1:
fa:96:48:8a:5e:27:4b:d1:50:6c:64:04:5b:e5:d5:
8b:3d:d8:13:04:b6:f9:07:d4:88:75:30:51:19:82:
ff:76:96:fb:f4:b7:ea:a6:4b:96:70:8e:b6:f2:15:
b5:fc:99:3a:6f:e9:c9:53:9a:1a:b0:29:19:62:05:
31:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7F:CD:B6:D3:90:58:A2:60:19:80:69:18:AC:90:A7:C4:B8:2E:0E
X509v3 Authority Key Identifier:
keyid:50:4D:12:0B:1C:20:98:49:EC:F9:AE:51:7A:F8:1A:AE:81:D1:68:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UE0SCxwgmEns-a5RevgaroHRaLc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0be3df-6080-4655-b238-6576f5901455/1/K3_NttOQWKJgGYBpGKyQp8S4Lg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/0be3df-6080-4655-b238-6576f5901455/1/UE0SCxwgmEns-a5RevgaroHRaLc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.246.39.0/24
Signature Algorithm: sha256WithRSAEncryption
24:d4:81:4e:dc:a1:bd:d3:a7:a7:61:ee:5e:7a:a9:a4:da:c6:
91:e8:64:d9:63:2d:ad:e1:05:26:80:2d:49:6b:88:cd:24:4f:
11:06:a8:a1:42:53:1a:aa:9e:81:05:1b:b5:a8:48:00:a4:a7:
b8:50:70:82:df:8c:a7:50:7f:33:1f:9b:22:08:71:8b:20:df:
02:e2:0f:0e:55:31:97:e9:ff:c2:e2:8f:77:19:5d:ae:55:23:
7a:74:df:a6:21:0a:44:82:ad:79:4b:fa:09:af:80:a5:b2:51:
47:a9:e8:27:55:40:ac:3b:34:04:3b:f8:3a:f6:bb:cf:10:8c:
a5:3e:3a:a0:5a:b1:b5:7d:e5:b2:c9:70:43:20:00:73:ee:7f:
1d:23:8a:66:43:cf:72:9f:16:0f:78:50:65:bd:e3:6d:c6:2f:
09:42:0b:5d:80:49:56:b0:f0:7b:00:80:c9:6e:26:e5:6c:65:
a2:e7:1b:72:b6:d6:54:f0:35:e0:62:4b:1d:74:21:40:1e:5e:
49:73:80:f7:74:10:8b:f0:7c:c0:55:74:69:db:39:ac:ba:f0:
84:00:71:81:6d:b1:7c:73:59:8e:69:2b:c6:e9:95:1a:2c:da:
75:70:b3:bd:b1:df:52:36:7f:fb:85:f3:79:3b:a5:ba:2b:57:
a3:47:ab:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:31:29 2025 by rpki-client