Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/745d47-a2f1-4e79-bb4a-2fcb511851b1/1/SNosd2kg6fGR5chiiTyQcLKLbqA.roa
File: SNosd2kg6fGR5chiiTyQcLKLbqA.roa (raw, json)
Hash identifier: a3aQpjEBH+eFNl87SemCWlC64L14XsZfjjNk6PrhTBQ=
Subject key identifier: 48:DA:2C:77:69:20:E9:F1:91:E5:C8:62:89:3C:90:70:B2:8B:6E:A0
Certificate issuer: /CN=6d2dd3570e57d399d4a6ef2a51379bcc3cff9ddf
Certificate serial: 0183F57420F8E5D8F528AAD49EA078D1658E
Authority key identifier: 6D:2D:D3:57:0E:57:D3:99:D4:A6:EF:2A:51:37:9B:CC:3C:FF:9D:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bS3TVw5X05nUpu8qUTebzDz_nd8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/745d47-a2f1-4e79-bb4a-2fcb511851b1/1/SNosd2kg6fGR5chiiTyQcLKLbqA.roa
Signing time: Thu 20 Oct 2022 12:52:51 +0000
ROA not before: Thu 20 Oct 2022 12:52:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 42093
IP address blocks: 91.224.242.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:f5:74:20:f8:e5:d8:f5:28:aa:d4:9e:a0:78:d1:65:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d2dd3570e57d399d4a6ef2a51379bcc3cff9ddf
Validity
Not Before: Oct 20 12:52:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=48da2c776920e9f191e5c862893c9070b28b6ea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:25:1f:a8:ac:b8:4b:d4:f2:d7:7d:6d:71:d5:
c4:24:ab:e3:f8:a8:46:7d:84:bc:58:4c:94:02:88:
5f:b6:f3:f1:80:27:71:de:c5:fa:b7:56:83:10:e3:
a9:56:ac:61:ff:dd:e8:00:f6:81:f6:33:d6:77:eb:
11:92:7f:9d:d1:fc:df:28:d3:34:f1:b5:88:ce:31:
cd:3a:f0:86:1a:7b:ed:6c:1f:75:4e:84:00:8b:41:
05:2e:0d:74:95:44:d5:9b:6e:02:e2:5e:d7:fb:c1:
76:f6:09:30:12:0a:8e:29:f9:f1:57:ad:f1:0e:19:
43:e4:bc:1c:1f:f0:59:b7:6e:ff:00:3f:84:e0:fe:
d6:66:7c:5d:c2:03:89:53:d5:66:57:7d:2d:a1:d3:
80:7a:38:4b:a3:f8:20:e2:da:3a:e7:2e:e6:e0:ca:
d9:0b:67:39:be:5d:15:9d:e2:92:f4:e7:e0:a8:c0:
c0:7d:90:66:d4:48:21:fb:07:0a:1e:1c:0d:a5:cf:
22:84:89:43:16:c9:00:51:a1:2e:fb:05:a4:41:65:
90:5c:46:06:3e:a5:80:22:57:ff:5e:95:a4:df:db:
5a:87:d6:cd:6d:36:75:b3:d9:4b:48:c4:55:92:56:
bb:13:37:da:8e:96:24:cc:d9:4e:43:aa:e5:c0:12:
70:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:DA:2C:77:69:20:E9:F1:91:E5:C8:62:89:3C:90:70:B2:8B:6E:A0
X509v3 Authority Key Identifier:
keyid:6D:2D:D3:57:0E:57:D3:99:D4:A6:EF:2A:51:37:9B:CC:3C:FF:9D:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bS3TVw5X05nUpu8qUTebzDz_nd8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/745d47-a2f1-4e79-bb4a-2fcb511851b1/1/SNosd2kg6fGR5chiiTyQcLKLbqA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/745d47-a2f1-4e79-bb4a-2fcb511851b1/1/bS3TVw5X05nUpu8qUTebzDz_nd8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.242.0/23
Signature Algorithm: sha256WithRSAEncryption
36:99:aa:13:de:1f:75:78:9b:13:3f:63:0d:7a:c0:17:ee:bc:
99:c5:8c:60:08:b3:65:e4:78:bc:44:29:78:ad:a6:8b:ff:48:
7b:91:01:fd:43:d9:17:88:98:6f:01:c6:77:67:76:d7:ee:98:
06:5c:2e:15:50:7b:3d:55:c9:1d:ac:8e:d9:61:79:3c:24:bd:
50:bc:d0:00:4b:6e:67:f8:91:89:ed:9d:21:53:93:f6:20:3e:
da:5a:92:fa:46:d7:80:49:b4:20:f6:e7:1e:ca:00:97:68:7c:
a5:ba:1f:c6:aa:b8:79:9e:d9:7e:54:c9:68:72:12:a2:fd:43:
43:27:f5:b2:36:4a:7e:30:6a:eb:06:3b:a5:67:9c:e1:23:b5:
7d:61:4b:74:87:29:20:c6:fb:de:33:0e:3e:10:da:a6:50:c3:
c8:fe:01:b0:c4:f9:fc:af:a7:14:64:43:9b:82:a9:a5:dc:24:
bb:87:56:a7:bf:9c:a4:fc:3a:fd:50:00:44:4c:9f:29:b0:ff:
62:fe:ab:fe:95:48:6f:8f:3e:29:18:be:34:91:3b:45:1d:49:
f8:eb:6e:d9:47:55:a9:8d:02:7a:03:5f:b5:74:8a:22:f5:d0:
9a:1e:39:6e:20:7c:b2:d0:bd:9b:c5:4c:6c:85:47:c7:62:45:
cd:0c:ed:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:58:43 2025 by rpki-client