Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/UFCOfzoSOjyZ43QIGuny5oDZfK8.roa
File: UFCOfzoSOjyZ43QIGuny5oDZfK8.roa (raw, json)
Hash identifier: q4TVq3IFyn3CwYbhYyk9oa5DP8x2oUqJMMv2fmv9Q8s=
Subject key identifier: 50:50:8E:7F:3A:12:3A:3C:99:E3:74:08:1A:E9:F2:E6:80:D9:7C:AF
Certificate issuer: /CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Certificate serial: 019421B1D2E21A77E2B350C08379B01B57F4
Authority key identifier: 14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/UFCOfzoSOjyZ43QIGuny5oDZfK8.roa
Signing time: Wed 01 Jan 2025 11:48:09 +0000
ROA not before: Wed 01 Jan 2025 11:48:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34881
IP address blocks: 91.237.146.0/23 maxlen: 23
91.237.146.0/24 maxlen: 24
91.237.147.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:d2:e2:1a:77:e2:b3:50:c0:83:79:b0:1b:57:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14af12bc28a060b59a2b30af2743c9dcbd748e3a
Validity
Not Before: Jan 1 11:48:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=50508e7f3a123a3c99e374081ae9f2e680d97caf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c2:99:b5:f5:db:e8:4e:0c:ca:78:ec:a5:f0:
cc:2c:c4:3b:a6:44:20:2f:1d:80:b7:a0:67:93:61:
ed:b6:2b:e2:ec:8f:f3:c0:5f:8f:ce:83:ab:00:3d:
ab:56:e0:29:22:bf:57:64:3e:23:0f:ce:ee:b0:54:
19:75:73:cc:89:56:f3:07:6c:02:d5:b7:39:da:15:
af:68:23:d6:9a:3b:ee:8b:21:df:13:c3:a2:23:f9:
93:a7:87:d2:45:78:53:27:24:01:2b:da:1c:82:35:
b6:f3:54:6e:76:8b:5a:a0:e6:0c:fc:9e:d9:31:ed:
bb:06:58:8f:c8:67:e5:46:45:ba:dd:ef:5f:a8:f6:
31:33:59:d8:cd:51:6f:44:b2:2e:4f:00:1a:e3:c9:
84:46:5f:d1:f2:20:0a:11:6e:e7:4a:4c:f7:a0:aa:
1a:ee:cf:08:ff:8a:37:c9:b8:e5:57:2b:96:dd:97:
7a:e0:af:19:69:8d:6f:8f:54:15:5e:b1:7a:5d:5d:
e6:8c:8d:01:12:a0:e8:f9:2d:43:84:01:75:6e:77:
58:a7:e3:18:6e:9c:13:b1:7b:c6:64:d0:43:5a:97:
eb:7c:b6:bf:4f:e7:a9:7d:e6:28:40:46:3d:27:2d:
af:00:5d:2b:f8:99:b3:ce:19:b2:ca:14:a1:9f:db:
67:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:50:8E:7F:3A:12:3A:3C:99:E3:74:08:1A:E9:F2:E6:80:D9:7C:AF
X509v3 Authority Key Identifier:
keyid:14:AF:12:BC:28:A0:60:B5:9A:2B:30:AF:27:43:C9:DC:BD:74:8E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK8SvCigYLWaKzCvJ0PJ3L10jjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/UFCOfzoSOjyZ43QIGuny5oDZfK8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/bdc335-0acb-4f71-bdb7-54ee6c513ff9/1/FK8SvCigYLWaKzCvJ0PJ3L10jjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.146.0/23
Signature Algorithm: sha256WithRSAEncryption
33:7a:b7:15:22:dc:8b:80:a0:46:d7:71:dc:53:ea:2a:eb:85:
64:a9:4d:5d:70:e8:78:8a:74:26:34:b4:75:b0:eb:80:c6:6e:
cb:32:6e:15:03:37:6d:23:5d:9f:f1:2d:78:73:2a:4a:31:55:
69:cf:d6:cb:a7:f2:b2:86:06:7a:f7:2d:40:40:73:20:a8:87:
51:c1:df:94:60:92:75:18:a2:98:cb:47:71:7a:7f:62:51:51:
26:54:81:22:4d:3f:8a:b5:47:c8:05:25:53:9e:5b:26:27:1d:
d3:8c:fe:7a:5b:a3:6b:cc:38:9a:43:46:91:ba:42:f0:14:c9:
a1:e6:0d:ea:0a:db:ce:8d:09:8c:5e:25:db:f4:f8:4e:d8:b7:
bc:34:89:57:30:96:94:46:72:7a:22:27:b2:8e:24:9a:42:0d:
df:26:6f:51:3f:a0:ee:db:26:df:3d:56:06:89:87:d4:27:3e:
b0:e6:fe:b7:74:e8:e4:90:54:84:7d:58:c1:55:a3:37:25:eb:
3f:b2:c2:cc:a0:4b:8b:f3:7f:88:fb:42:0f:15:36:f7:b9:32:
6e:e4:9f:99:e6:83:e8:9b:3d:49:0f:4b:a3:7c:6d:0f:45:17:
a1:7f:16:d4:24:6b:c5:7b:3e:88:6f:2c:a7:5b:e3:36:9a:7c:
5e:81:be:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:43:57 2025 by rpki-client