Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/066CW8IJc__2ca3cGlyU1QOafUw.roa
File: 066CW8IJc__2ca3cGlyU1QOafUw.roa (raw, json)
Hash identifier: GAQCHEU9iEOguZRHG5R73oJrkNsPw9o8tFer2zQavk8=
Subject key identifier: D3:AE:82:5B:C2:09:73:FF:F6:71:AD:DC:1A:5C:94:D5:03:9A:7D:4C
Certificate issuer: /CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Certificate serial: 03C7014C
Authority key identifier: 8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/066CW8IJc__2ca3cGlyU1QOafUw.roa
Signing time: Sat 01 Jan 2022 12:02:48 +0000
ROA not before: Sat 01 Jan 2022 12:02:48 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51733
IP address blocks: 91.209.254.0/24 maxlen: 24
185.156.85.0/24 maxlen: 24
91.221.58.0/24 maxlen: 24
91.221.58.0/23 maxlen: 23
91.221.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63373644 (0x3c7014c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8dff1b0ce9f486a67e63d3f0d0e688a24f700c7c
Validity
Not Before: Jan 1 12:02:48 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=d3ae825bc20973fff671addc1a5c94d5039a7d4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ba:b0:be:cf:36:d1:e0:8a:c5:37:d2:99:8a:
3b:5a:85:c2:47:82:61:d5:18:88:d8:61:14:c2:17:
0e:fd:8c:48:59:16:66:58:ac:4a:5f:16:88:e9:f5:
c5:60:cd:fd:c9:d4:21:af:a1:0a:ec:20:d7:c6:2b:
e8:fd:dc:6e:b9:cd:79:ce:3c:1f:fe:6e:7f:bd:23:
16:7d:7c:60:ee:94:5f:81:79:c4:6b:ff:86:08:1b:
1d:e2:c1:71:e9:2c:d9:c0:fb:59:2e:0d:d7:9f:27:
16:24:a9:f9:50:77:af:cd:ef:06:ca:3a:c0:f5:04:
0e:8b:1b:f8:9c:4b:e5:a2:89:47:80:e7:9f:3c:4c:
48:49:86:75:49:be:4b:3e:05:18:61:0d:42:af:61:
f4:50:3c:a7:84:df:b0:fb:2a:27:41:9a:f4:19:13:
f8:d2:1b:0d:8f:6b:e9:53:a1:0e:a4:31:22:cb:1d:
58:df:77:b9:31:db:88:54:18:68:65:04:ec:cc:b4:
0d:0e:d6:b5:2a:85:79:ab:c9:2e:84:19:66:e6:83:
31:2c:e5:b2:5f:29:14:b8:ed:e3:81:59:e2:8b:98:
c6:41:a4:28:0d:8e:90:f7:5f:cd:5a:82:69:d7:db:
4d:f2:ed:4a:1f:42:b7:e1:e4:bc:4e:92:ce:7a:39:
63:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AE:82:5B:C2:09:73:FF:F6:71:AD:DC:1A:5C:94:D5:03:9A:7D:4C
X509v3 Authority Key Identifier:
keyid:8D:FF:1B:0C:E9:F4:86:A6:7E:63:D3:F0:D0:E6:88:A2:4F:70:0C:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/066CW8IJc__2ca3cGlyU1QOafUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/4af64a-57f8-4643-87ba-d87b7026a3ff/1/jf8bDOn0hqZ-Y9Pw0OaIok9wDHw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.254.0/24
91.221.58.0/23
185.156.85.0/24
Signature Algorithm: sha256WithRSAEncryption
92:af:f7:56:d7:7f:7a:1f:eb:11:19:11:0d:4f:84:7e:a1:bf:
07:db:52:27:ea:83:31:7d:92:76:2c:43:35:5c:d5:31:fc:20:
02:3b:3b:53:ad:92:5e:3b:4f:68:cf:3a:2c:63:1a:5e:bd:fc:
02:49:fb:a0:75:96:43:96:db:94:f4:cd:47:d7:50:d5:6e:8b:
ed:df:f8:bd:bc:af:48:36:49:5d:40:c4:1f:c0:08:70:d7:76:
02:6e:ba:5c:17:f1:71:70:d8:ff:11:b8:4c:ec:3e:ca:c3:1a:
dd:88:3d:c2:6f:e1:d2:29:48:f1:35:f3:04:77:f4:86:f7:13:
24:e3:f9:d0:69:2a:f9:a3:45:89:80:2b:75:13:60:9e:68:de:
03:e2:4f:51:b8:92:92:e8:d1:88:1b:ce:97:43:25:aa:fa:63:
dd:01:03:dc:86:02:88:60:8e:5a:7a:64:c5:10:83:f2:61:c1:
7d:41:97:32:6e:23:d0:c6:0c:f6:f7:46:01:68:48:4a:a5:77:
6d:cd:ed:b1:c1:ac:21:d0:14:25:0b:cf:bc:60:5b:e5:58:52:
56:66:1c:c0:25:a9:b2:d0:2c:0d:e0:8a:5c:b2:1f:36:d3:e5:
67:57:ca:4c:49:63:b1:c6:a4:f2:97:95:a2:e7:99:e6:1e:d0:
7d:0e:60:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:09:03 2025 by rpki-client