Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/cDd-9uZd8TAOELlVpto9Ze1TtTk.roa
File: cDd-9uZd8TAOELlVpto9Ze1TtTk.roa (raw, json)
Hash identifier: pw+OdO6xwpHUeqATxmtsa4lRfSHM3Xq+64JHRuq2w5k=
Subject key identifier: 70:37:7E:F6:E6:5D:F1:30:0E:10:B9:55:A6:DA:3D:65:ED:53:B5:39
Certificate issuer: /CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Certificate serial: 01887164CFBCE3A2931107264839ED029551
Authority key identifier: C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/cDd-9uZd8TAOELlVpto9Ze1TtTk.roa
Signing time: Wed 31 May 2023 10:40:12 +0000
ROA not before: Wed 31 May 2023 10:40:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3214
IP address blocks: 91.193.75.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:64:cf:bc:e3:a2:93:11:07:26:48:39:ed:02:95:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2c3b5e97c46a93bc3a35cc71055c4f0dfc6c451
Validity
Not Before: May 31 10:40:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=70377ef6e65df1300e10b955a6da3d65ed53b539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:96:9c:14:8f:f1:0f:7e:dd:14:a6:11:d2:d3:
e3:72:d0:e6:85:ab:fd:ce:b1:e8:4a:54:9d:e7:c4:
2a:d1:13:4e:ac:19:a2:70:1e:29:a6:e0:06:66:e3:
0a:d7:77:78:3a:c6:e0:d5:3f:59:97:68:8c:14:d8:
7e:b1:00:90:df:c2:c2:73:48:3b:63:29:5a:ff:a7:
15:53:51:2d:14:3c:47:da:e3:f8:bc:c5:a2:8e:05:
d2:a2:03:db:d5:4b:e4:6f:a2:7e:0a:2d:65:b7:91:
4a:c4:b4:a4:04:99:d9:02:7b:d3:f7:81:2e:6b:12:
17:8b:75:64:15:98:00:ce:14:e5:1b:de:cf:4d:8b:
d0:35:cb:7a:80:2d:10:85:3e:98:d6:12:63:c9:53:
e5:41:f0:45:57:5a:d6:bd:bc:52:42:4a:9a:39:e2:
3e:85:fb:99:5b:b2:a3:88:c7:92:24:c0:3c:05:0c:
77:69:06:0f:8d:5a:2a:f2:18:ce:42:9f:53:d9:75:
c9:55:d2:c3:72:cb:52:ab:ec:5f:1e:20:59:5b:47:
8f:04:13:aa:00:61:43:52:2b:e1:ee:86:c4:7b:d4:
3f:25:6f:41:3c:81:ee:85:17:36:57:a4:7e:63:05:
c4:40:42:6d:b6:61:f0:2e:ee:fb:7d:7b:81:ba:18:
82:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:37:7E:F6:E6:5D:F1:30:0E:10:B9:55:A6:DA:3D:65:ED:53:B5:39
X509v3 Authority Key Identifier:
keyid:C2:C3:B5:E9:7C:46:A9:3B:C3:A3:5C:C7:10:55:C4:F0:DF:C6:C4:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsO16XxGqTvDo1zHEFXE8N_GxFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/cDd-9uZd8TAOELlVpto9Ze1TtTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/1651b5-cde5-4cdf-a29f-42b4fb834f15/1/wsO16XxGqTvDo1zHEFXE8N_GxFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.193.75.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:6c:cb:0c:40:ce:8b:d9:1e:d0:e8:ce:4a:5a:58:eb:fe:ab:
84:fb:3d:87:05:f9:52:4d:36:30:2f:70:72:5d:f0:00:1a:1b:
68:b8:7f:e9:66:ab:fd:5e:dc:d5:11:e8:ca:c7:9f:ef:2a:57:
ee:fd:d1:a3:d2:39:1a:2a:3b:db:b8:38:67:b3:d4:aa:3c:17:
53:0c:9e:d6:cc:2c:06:48:1d:13:b6:5b:90:ca:07:09:f8:3a:
38:dc:89:80:af:f7:c5:75:d2:0d:73:f4:dc:f6:30:60:c3:58:
b6:e9:9e:f9:c6:fc:45:cb:a5:a6:cc:2b:2d:dd:f4:e7:87:0d:
5f:ea:e1:08:04:db:98:a9:a1:d8:a5:08:54:c1:5d:22:85:11:
fd:cf:b9:5c:3a:f1:6f:a8:6d:f4:ad:ca:3a:17:2b:a5:94:ce:
19:95:78:21:22:d6:15:5c:a0:fb:7f:24:aa:81:26:db:82:ae:
f1:ec:61:29:b6:68:7a:e9:f1:93:9c:cd:59:54:68:f8:2c:fa:
5b:0f:61:b1:64:8a:f1:f2:d6:52:ca:95:73:d7:f4:4a:0f:d0:
70:1d:1f:bf:f9:17:28:25:90:f9:05:85:84:3e:6c:ac:84:36:
f2:8e:79:af:3c:92:4d:73:09:e4:dd:35:5e:07:f3:1e:a7:2f:
a0:c4:bc:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:03:49 2025 by rpki-client