Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d15599-d7b5-4391-b2c5-ea49312aa1cf/1/3WS5eVYOlWoWtnoRmh7ehWgblwY.roa
File: 3WS5eVYOlWoWtnoRmh7ehWgblwY.roa (raw, json)
Hash identifier: Hi0XPo5LQDdTbVczSd993Qd+lGoNW3YnS+Ny6ALQWF8=
Subject key identifier: DD:64:B9:79:56:0E:95:6A:16:B6:7A:11:9A:1E:DE:85:68:1B:97:06
Certificate issuer: /CN=f6d0bc1f351f85d1254dd94787c98d04e0f7166b
Certificate serial: D880A2
Authority key identifier: F6:D0:BC:1F:35:1F:85:D1:25:4D:D9:47:87:C9:8D:04:E0:F7:16:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9tC8HzUfhdElTdlHh8mNBOD3Fms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d15599-d7b5-4391-b2c5-ea49312aa1cf/1/3WS5eVYOlWoWtnoRmh7ehWgblwY.roa
Signing time: Sat 01 Jan 2022 03:51:57 +0000
ROA not before: Sat 01 Jan 2022 03:51:57 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 79.110.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14188706 (0xd880a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6d0bc1f351f85d1254dd94787c98d04e0f7166b
Validity
Not Before: Jan 1 03:51:57 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=dd64b979560e956a16b67a119a1ede85681b9706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3c:58:96:cf:b9:c8:e8:93:b1:09:4c:16:fa:
ef:f0:1b:f5:19:c2:b8:ff:46:e5:93:2c:84:a7:02:
19:ae:c2:92:2a:29:cb:3c:8c:79:fe:e4:10:4f:e0:
61:23:42:c9:ab:62:fa:6f:03:a4:26:45:ce:21:1d:
be:9f:fd:c5:b5:33:a1:f1:b4:af:d5:a6:3b:95:03:
36:b0:52:ec:bf:59:c2:c3:98:2a:68:c8:2e:7c:4d:
c5:c9:ed:de:00:95:57:f4:53:fa:0c:e2:ee:ed:67:
cc:33:85:9c:9f:59:7a:30:03:ad:91:9c:5d:77:89:
1f:d4:22:27:9b:bd:cb:34:e8:27:40:fe:74:8b:f6:
8c:eb:d1:ae:dc:7d:10:5e:95:52:a5:58:c1:60:38:
8c:05:fb:6d:ae:02:2f:4a:0d:bb:e1:0e:2d:a9:fc:
f0:45:31:e4:b4:b3:10:1e:3b:14:35:40:63:2d:ca:
e4:16:2d:22:e0:bb:40:0f:fa:9d:64:17:37:ff:99:
f7:03:b3:9f:05:fa:15:8c:9b:0c:e5:49:4b:dd:72:
19:52:0c:f8:18:20:65:e0:59:4b:e1:f4:7b:b5:ba:
a7:09:1e:58:ab:e0:68:fb:c4:19:08:62:83:ee:59:
85:5a:c3:51:62:76:3f:3e:e3:cc:5b:31:21:0f:01:
2c:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:64:B9:79:56:0E:95:6A:16:B6:7A:11:9A:1E:DE:85:68:1B:97:06
X509v3 Authority Key Identifier:
keyid:F6:D0:BC:1F:35:1F:85:D1:25:4D:D9:47:87:C9:8D:04:E0:F7:16:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9tC8HzUfhdElTdlHh8mNBOD3Fms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d15599-d7b5-4391-b2c5-ea49312aa1cf/1/3WS5eVYOlWoWtnoRmh7ehWgblwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d15599-d7b5-4391-b2c5-ea49312aa1cf/1/9tC8HzUfhdElTdlHh8mNBOD3Fms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.228.0/24
Signature Algorithm: sha256WithRSAEncryption
60:34:4a:4e:e1:e7:62:47:0e:75:51:a6:5b:42:54:86:25:6d:
68:c9:38:83:6c:98:e6:e4:02:c2:2b:8a:51:ea:a1:a3:8c:d9:
05:8b:57:96:32:fb:f8:89:4f:96:1a:b3:c7:0e:40:eb:12:c1:
1b:5a:3a:03:f4:35:62:3e:ce:94:91:92:d5:67:2c:8f:07:8c:
b0:9e:37:c9:58:3b:89:2f:1c:c5:48:f0:61:80:c4:32:29:5e:
e9:00:08:aa:a2:43:3c:68:60:a3:64:c0:d3:f1:76:fe:4b:e8:
61:cc:d8:8b:ef:87:42:11:27:8d:36:94:33:9a:5e:c3:ff:73:
72:4b:f0:55:9d:f6:1c:42:f5:26:36:a8:18:27:ec:b0:49:4e:
3b:8f:db:a4:ca:68:01:60:e3:34:c3:c5:b9:ca:47:a1:dd:ca:
f3:54:76:d6:9e:4c:c6:7c:9e:e3:36:10:d7:c2:fe:98:9a:c0:
7e:b0:82:ea:dc:e4:66:4a:b2:76:cd:38:46:61:96:e5:de:7e:
fb:b5:10:95:7c:76:19:f8:c1:c1:e3:56:4c:a6:b5:91:12:d1:
55:e6:d7:e0:25:3d:8a:f2:a0:33:10:e0:34:9b:3e:3c:6e:aa:
1b:7a:2a:56:82:36:d5:18:a1:b9:de:71:20:44:e0:b2:6b:7d:
ee:53:b5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 20:44:30 2025 by rpki-client