Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/7690b7-df00-4bd8-9ca7-a718514c58ca/1/3St_D54OIRdwdydoMwS-xzcvQEk.roa
File: 3St_D54OIRdwdydoMwS-xzcvQEk.roa (raw, json)
Hash identifier: 5cVegPgwUllE1u8t0v1bWRlr3HUQFrm9Ye7rZ/Bu/gk=
Subject key identifier: DD:2B:7F:0F:9E:0E:21:17:70:77:27:68:33:04:BE:C7:37:2F:40:49
Certificate issuer: /CN=1637a493bc2025bf080c0b5e242e61e417670e86
Certificate serial: 018B1B800197EDBCDB93B89D51539C45AB15
Authority key identifier: 16:37:A4:93:BC:20:25:BF:08:0C:0B:5E:24:2E:61:E4:17:67:0E:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fjekk7wgJb8IDAteJC5h5BdnDoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/7690b7-df00-4bd8-9ca7-a718514c58ca/1/3St_D54OIRdwdydoMwS-xzcvQEk.roa
Signing time: Tue 10 Oct 2023 21:30:55 +0000
ROA not before: Tue 10 Oct 2023 21:30:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 91.213.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:1b:80:01:97:ed:bc:db:93:b8:9d:51:53:9c:45:ab:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1637a493bc2025bf080c0b5e242e61e417670e86
Validity
Not Before: Oct 10 21:30:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dd2b7f0f9e0e2117707727683304bec7372f4049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a9:3d:db:18:63:d1:86:43:3d:21:ec:7b:d6:
0c:9a:a8:29:6f:d3:1a:4d:e3:8d:07:48:54:a8:d1:
55:55:60:39:fd:e9:03:26:4d:be:f4:f0:49:7e:e2:
29:1c:2f:5b:c1:e9:2d:01:57:18:bd:c7:61:3f:ed:
63:da:3d:c1:79:7d:43:22:32:ab:c1:e7:25:af:2a:
c2:79:bd:04:75:7e:98:a0:54:55:43:f3:0d:e6:7d:
cd:26:e1:9b:f6:1e:fd:c1:63:db:fd:d6:ef:b4:a2:
b6:6d:d3:6a:c7:10:96:c2:c2:4b:e7:5a:ca:be:a3:
ef:bd:c8:23:bf:b7:1d:a8:19:82:59:35:47:e9:46:
cc:59:1a:d2:3b:70:06:42:b9:ea:4f:47:e6:5e:da:
3e:64:d9:0c:f5:e4:5a:9e:cc:37:5a:01:6e:74:c4:
f0:30:7a:a7:9e:0a:ec:96:15:52:7a:5c:fd:76:b7:
3f:3a:69:07:c0:bd:d5:3e:9e:cb:06:33:a9:c4:a7:
0f:f4:5e:79:7b:10:ca:28:5e:9c:e5:0f:7d:85:f7:
6a:b5:c9:c7:72:78:68:a8:a8:14:9f:de:1a:bf:a3:
48:55:a3:e5:8c:e1:be:39:44:fa:a1:d2:b0:44:53:
e4:19:23:2d:72:85:7f:3e:48:ef:bd:f2:e7:d7:65:
6f:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:2B:7F:0F:9E:0E:21:17:70:77:27:68:33:04:BE:C7:37:2F:40:49
X509v3 Authority Key Identifier:
keyid:16:37:A4:93:BC:20:25:BF:08:0C:0B:5E:24:2E:61:E4:17:67:0E:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fjekk7wgJb8IDAteJC5h5BdnDoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7690b7-df00-4bd8-9ca7-a718514c58ca/1/3St_D54OIRdwdydoMwS-xzcvQEk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/7690b7-df00-4bd8-9ca7-a718514c58ca/1/Fjekk7wgJb8IDAteJC5h5BdnDoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.117.0/24
Signature Algorithm: sha256WithRSAEncryption
57:44:04:eb:c0:5d:f0:ac:9f:3a:25:79:e7:1d:5e:1a:b9:64:
2e:90:97:5c:49:3f:bc:75:82:20:c2:00:a5:54:85:0e:9c:a8:
ad:90:f3:34:41:27:08:16:e8:b7:bc:70:34:cf:4a:e5:c4:96:
a3:ef:a6:40:ca:ce:e6:db:b9:56:e3:15:79:2f:c8:26:66:04:
c3:72:cc:b6:61:ac:49:25:bd:05:50:c3:71:c9:9e:23:e1:c6:
5d:c7:00:b9:1e:65:c1:3c:82:82:ae:08:ce:00:11:81:6b:52:
ef:d8:da:9d:69:58:9f:14:b9:ea:bd:f6:7b:08:69:47:ad:fc:
7f:3c:bb:e3:0a:34:56:ba:eb:4b:64:ba:23:13:06:5f:a8:ff:
e8:ed:b0:23:b8:41:11:eb:0f:b3:ec:3d:0b:61:51:8c:28:37:
c8:b0:93:b8:87:c7:e0:4c:f9:bf:45:8f:bd:6a:e7:71:9f:c8:
a4:35:03:c3:71:23:17:83:11:91:3a:b2:d9:95:fe:99:a9:9c:
2f:fb:03:3c:0d:e5:83:23:5d:db:09:7c:ef:f6:da:b8:8c:8d:
72:d0:76:fe:b4:78:30:b4:d8:4c:cf:38:ed:c6:cf:d2:80:18:
25:6d:84:ab:9c:c0:3c:dd:b0:89:b2:e1:6e:34:23:90:4f:2f:
c3:cc:2c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 01:33:34 2025 by rpki-client