Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/ad0707-ed5a-4c7a-b6e8-476b0763370f/1/z3J6bGU2DqRm6keLUJ2mN4dCIao.roa
File: z3J6bGU2DqRm6keLUJ2mN4dCIao.roa (raw, json)
Hash identifier: P5WAqZ/JLSMW2oB84wtYF5w6AOo05gIMPdF7F6Vggdc=
Subject key identifier: CF:72:7A:6C:65:36:0E:A4:66:EA:47:8B:50:9D:A6:37:87:42:21:AA
Certificate issuer: /CN=4eaa16e3c81b04b0b24f7fc144fb4e023352eedf
Certificate serial: D74185
Authority key identifier: 4E:AA:16:E3:C8:1B:04:B0:B2:4F:7F:C1:44:FB:4E:02:33:52:EE:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TqoW48gbBLCyT3_BRPtOAjNS7t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/ad0707-ed5a-4c7a-b6e8-476b0763370f/1/z3J6bGU2DqRm6keLUJ2mN4dCIao.roa
Signing time: Sat 01 Jan 2022 00:58:33 +0000
ROA not before: Sat 01 Jan 2022 00:58:33 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 79.110.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14107013 (0xd74185)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4eaa16e3c81b04b0b24f7fc144fb4e023352eedf
Validity
Not Before: Jan 1 00:58:33 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=cf727a6c65360ea466ea478b509da637874221aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:15:c6:bd:a8:ee:0f:fe:71:b7:c9:dd:4b:f0:
ef:6f:3a:6b:c2:46:0b:cf:7f:38:dc:53:4e:dc:1c:
e2:ad:c7:1b:1c:27:24:c2:c1:cc:77:f6:97:0e:91:
99:a2:2f:2f:8a:d3:ff:89:c8:23:3b:58:c9:54:39:
b4:1c:68:80:89:b7:19:11:ff:78:70:53:35:ab:0c:
9a:aa:20:d5:26:8d:6a:cc:c4:8a:ef:b8:cd:0a:08:
a3:79:74:a5:54:f3:77:a2:53:3d:d2:2a:69:39:ba:
d9:78:13:98:ec:96:de:c6:db:77:6e:2f:03:29:83:
77:fe:59:19:1e:d0:48:36:8a:e6:8d:79:ed:9d:ad:
af:f9:2e:7b:a0:ea:83:24:70:0e:88:67:6d:62:29:
18:44:41:2a:7f:c2:b5:a8:e1:e2:77:40:65:21:bb:
a7:e3:e4:b2:7b:ad:c8:b9:d3:09:48:25:e3:7e:ec:
d1:32:f0:4e:0f:55:bb:dc:96:3c:02:b6:4f:50:be:
e7:58:5f:a4:24:d5:59:e1:23:e4:b6:c9:25:0d:a2:
53:52:e3:79:e5:e8:e8:84:61:ab:74:47:b0:7e:51:
8a:5a:fd:d2:55:62:bb:13:2b:12:c7:73:27:99:c2:
0e:a1:85:5e:da:39:18:24:42:8f:1f:cb:05:c9:a8:
71:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:72:7A:6C:65:36:0E:A4:66:EA:47:8B:50:9D:A6:37:87:42:21:AA
X509v3 Authority Key Identifier:
keyid:4E:AA:16:E3:C8:1B:04:B0:B2:4F:7F:C1:44:FB:4E:02:33:52:EE:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TqoW48gbBLCyT3_BRPtOAjNS7t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ad0707-ed5a-4c7a-b6e8-476b0763370f/1/z3J6bGU2DqRm6keLUJ2mN4dCIao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/ad0707-ed5a-4c7a-b6e8-476b0763370f/1/TqoW48gbBLCyT3_BRPtOAjNS7t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.236.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:d7:c4:06:6a:6a:6e:bb:f9:e4:9e:34:d7:5d:39:15:1f:eb:
9b:05:d6:9a:cb:75:a1:0d:80:15:61:01:59:ca:b1:55:42:b8:
ac:a7:82:02:dd:32:2c:c2:d3:79:4d:74:e6:8c:9b:bf:d8:2a:
7b:49:cc:8c:fa:d6:5f:48:8f:6a:79:26:d6:5c:52:d2:c1:63:
8b:35:c6:53:a6:63:24:73:da:34:26:15:c6:e3:f5:68:04:c9:
4d:89:8d:5f:f0:ea:23:4f:f7:c6:19:de:81:d0:4b:43:e3:46:
2b:87:cc:cb:37:f4:1f:98:42:92:01:56:a9:f3:1b:8c:ff:00:
be:e9:fc:7e:f4:49:13:8a:8b:2f:5b:5a:e4:e2:90:1c:80:a0:
0a:9b:b5:1b:cb:03:d6:21:60:b9:31:45:a8:d5:67:14:f0:c1:
fe:d6:7c:e2:19:6e:c3:e3:21:23:2c:bb:78:bd:a9:44:a9:04:
03:0a:eb:da:76:3e:32:37:26:6e:94:4b:d5:67:79:a2:51:6a:
3e:51:8f:74:8e:aa:fd:7d:db:1b:d7:03:39:6c:6b:67:ad:11:
c8:07:6e:e5:16:2e:6c:3c:02:70:1c:e3:24:af:ec:52:53:de:
d2:fd:cb:cc:6a:5a:d2:46:21:72:d9:03:9b:e1:c5:50:fa:1e:
f2:26:4e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:30:38 2025 by rpki-client