Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/C3yypRlZtvO4qRUDoeqrvhpXXFU.roa
File: C3yypRlZtvO4qRUDoeqrvhpXXFU.roa (raw, json)
Hash identifier: U5x8oZ9ETTHkITHFM+Dz7ZwF5Z54RJdp83tFjx6Le08=
Subject key identifier: 0B:7C:B2:A5:19:59:B6:F3:B8:A9:15:03:A1:EA:AB:BE:1A:57:5C:55
Certificate issuer: /CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564
Certificate serial: 019425FC07BF1E32B487293BE79592D1DF04
Authority key identifier: 43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/C3yypRlZtvO4qRUDoeqrvhpXXFU.roa
Signing time: Thu 02 Jan 2025 07:47:41 +0000
ROA not before: Thu 02 Jan 2025 07:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48642
IP address blocks: 91.235.188.0/22 maxlen: 22
109.197.224.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:07:bf:1e:32:b4:87:29:3b:e7:95:92:d1:df:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4300d06e2a69a3664b6abcfe22bd2d06b5336564
Validity
Not Before: Jan 2 07:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b7cb2a51959b6f3b8a91503a1eaabbe1a575c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:a3:d2:77:b3:62:92:e2:00:62:fb:05:36:67:
f6:4c:0f:49:c0:20:00:52:24:74:88:5e:f3:89:b0:
07:bc:2e:91:c1:9c:42:72:db:ae:ca:85:f5:d6:5b:
ce:33:05:81:a0:2b:e1:a9:22:78:50:6b:58:2f:cc:
34:4a:4c:6e:1c:6a:09:c9:92:45:42:5f:53:27:9f:
62:72:82:3b:d2:64:76:7b:cd:ba:42:e5:79:66:34:
2d:ed:25:66:76:58:7d:15:4a:14:dc:70:0c:58:42:
9a:a3:83:76:38:56:e7:2b:f9:a9:cc:c2:c6:f5:b3:
67:df:5e:72:35:a3:b3:22:25:16:d0:73:c8:9e:14:
d4:b3:86:0f:ae:4f:7d:46:70:4d:e6:58:db:58:69:
d2:83:df:02:6f:7e:fd:c2:4b:e9:65:45:33:6f:bd:
f7:23:99:8a:78:27:e1:db:0a:24:81:61:16:8d:f7:
d8:1b:b4:fc:38:f7:e9:95:bb:68:19:2e:ba:ba:5a:
25:f0:af:64:60:55:55:5a:20:36:e0:33:26:a9:7c:
d9:76:f3:ce:f5:30:26:e6:28:5b:86:f1:a6:49:fa:
48:5b:60:37:7c:1b:5f:c0:75:0a:d1:70:33:4d:a7:
75:32:52:c3:5b:9e:94:6d:77:f0:a2:d6:b5:cd:6e:
2d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:7C:B2:A5:19:59:B6:F3:B8:A9:15:03:A1:EA:AB:BE:1A:57:5C:55
X509v3 Authority Key Identifier:
keyid:43:00:D0:6E:2A:69:A3:66:4B:6A:BC:FE:22:BD:2D:06:B5:33:65:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwDQbippo2ZLarz-Ir0tBrUzZWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/C3yypRlZtvO4qRUDoeqrvhpXXFU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ae8da3-9cbd-444a-aaef-290a3fc4bb60/1/QwDQbippo2ZLarz-Ir0tBrUzZWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.235.188.0/22
109.197.224.0/21
Signature Algorithm: sha256WithRSAEncryption
03:7d:b2:cd:2a:fb:6b:fe:ca:3b:cd:97:83:c0:6f:19:dd:5d:
bc:c2:07:55:e2:df:ae:6e:85:6f:c3:6e:fe:c4:7d:fb:7c:27:
ba:34:95:a6:f8:b8:63:0b:18:8d:7a:8c:c2:50:b9:b0:ac:32:
d7:82:88:5c:2a:96:42:7e:a9:ee:83:72:49:58:e1:9a:6e:50:
b2:c9:ff:0b:1a:f9:3b:9d:64:fb:79:16:7c:b8:70:9e:95:e0:
74:fd:fe:55:62:9f:59:57:01:9d:00:00:8e:22:0f:4e:67:18:
66:af:d3:79:d8:0e:31:79:60:f3:d5:ef:d2:9c:41:dd:e2:2a:
d7:69:08:41:82:b6:53:d1:fa:9e:3f:e0:48:0c:d0:bb:f5:78:
2b:91:47:f5:78:bc:2d:be:fa:8f:25:b0:57:32:ee:71:b7:a3:
11:31:93:45:ee:1b:f3:8f:4b:25:db:fe:ba:98:50:58:b1:29:
dc:04:ed:33:21:48:9e:54:f1:0c:2c:41:26:b7:9d:ad:30:28:
b9:66:13:2a:af:a1:86:26:d4:a9:4f:5c:a6:02:4c:9b:9b:de:
62:be:fb:48:66:e3:f6:7b:05:b5:be:57:60:13:3a:82:9b:e0:
cc:0a:73:5e:46:bd:2e:a9:c9:94:73:0b:68:c5:3a:ec:98:34:
c5:ae:96:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:58:51 2025 by rpki-client