Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3-CeBnshHuRaivw3WbqdE0Qd_Xs.roa
File: 3-CeBnshHuRaivw3WbqdE0Qd_Xs.roa (raw, json)
Hash identifier: QxTBnM9GZ47qowObu5DgA3PPZPI+pK+0T/E1jxfDI4A=
Subject key identifier: DF:E0:9E:06:7B:21:1E:E4:5A:8A:FC:37:59:BA:9D:13:44:1D:FD:7B
Certificate issuer: /CN=de9461c211bf3551c5507c930b4204c6ec43b322
Certificate serial: 0194FE8DF1997D6C97D334B0C5B85AF461A0
Authority key identifier: DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3-CeBnshHuRaivw3WbqdE0Qd_Xs.roa
Signing time: Thu 13 Feb 2025 09:05:02 +0000
ROA not before: Thu 13 Feb 2025 09:05:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 211392
IP address blocks: 91.192.106.0/23 maxlen: 23
91.192.106.0/24 maxlen: 24
91.192.107.0/24 maxlen: 24
91.193.58.0/23 maxlen: 23
91.193.59.0/24 maxlen: 24
193.106.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:fe:8d:f1:99:7d:6c:97:d3:34:b0:c5:b8:5a:f4:61:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de9461c211bf3551c5507c930b4204c6ec43b322
Validity
Not Before: Feb 13 09:05:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dfe09e067b211ee45a8afc3759ba9d13441dfd7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1b:c0:90:91:22:4e:6d:bc:6d:6e:33:4c:da:
e7:56:5a:ce:6b:6d:60:5d:2c:90:c5:99:76:35:c8:
db:d2:1e:65:71:8d:17:ae:d6:dd:2f:3b:92:fa:5c:
80:e0:a5:a9:60:b2:86:d0:15:b4:1a:a6:e5:07:57:
e0:34:c6:55:bd:ce:97:2e:1b:7e:fd:a1:af:5c:22:
34:58:ad:7f:f8:8e:6a:96:22:4b:4a:5c:af:12:3c:
74:d8:83:28:97:19:19:4c:e7:74:d2:2d:d0:cc:b7:
91:f0:d4:12:57:97:2d:06:f8:80:f8:ac:f9:db:0f:
b1:32:ef:c7:c3:af:16:30:d3:6b:ca:a0:3a:0c:9f:
c1:c9:e1:90:7e:7c:67:59:cb:97:a6:a3:b9:f2:b9:
6b:2e:5c:48:70:64:39:9c:f7:fa:a3:2b:b3:00:60:
75:22:10:3a:b0:8b:6c:90:f3:08:59:ef:25:82:66:
97:85:e3:9a:b6:67:0f:43:74:fe:98:51:56:d8:39:
68:71:57:de:98:08:58:b9:c5:2d:31:ac:46:11:e7:
0f:eb:83:d7:d0:87:9a:5f:10:d1:88:d2:7a:9d:ed:
2a:e4:2c:7c:6c:ec:74:91:fd:b2:25:67:c0:34:74:
30:4f:5d:01:05:a2:41:0e:ad:e7:fd:e4:51:da:24:
cc:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:E0:9E:06:7B:21:1E:E4:5A:8A:FC:37:59:BA:9D:13:44:1D:FD:7B
X509v3 Authority Key Identifier:
keyid:DE:94:61:C2:11:BF:35:51:C5:50:7C:93:0B:42:04:C6:EC:43:B3:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3pRhwhG_NVHFUHyTC0IExuxDsyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3-CeBnshHuRaivw3WbqdE0Qd_Xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/9183d4-0779-49c4-96f7-8202a467d753/1/3pRhwhG_NVHFUHyTC0IExuxDsyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.192.106.0/23
91.193.58.0/23
193.106.189.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:9f:8c:ac:c5:69:08:9d:19:cf:29:0d:f4:e1:3a:11:b9:dd:
b2:13:1d:fe:57:2a:83:80:ce:c8:66:11:b8:c3:0f:bb:9e:74:
ce:bf:53:5b:eb:04:ad:01:df:d6:ad:0e:e3:a8:77:0a:79:a2:
db:24:0f:29:34:35:0b:93:94:ab:bd:d7:92:ae:7f:64:b6:51:
25:5b:b7:53:56:65:bb:67:22:88:87:c9:20:6a:32:48:2c:58:
f5:83:40:9b:86:e1:9d:e3:3b:8c:78:09:61:c2:ed:76:b3:c7:
92:1d:3d:90:9f:d7:3a:a1:34:08:d4:b6:cb:ec:bf:0b:11:9c:
30:97:69:b3:f2:ac:8f:96:7b:b3:40:f0:f6:b2:f1:b2:8f:2d:
1a:6e:8a:cd:07:2d:c8:71:9d:d4:13:43:3c:0a:70:09:5c:74:
14:f4:16:81:f9:cb:94:d3:bd:cf:39:1d:d5:14:92:17:10:78:
ab:ba:47:dc:bd:7f:c9:f0:b9:27:4b:c9:70:e8:e4:d8:c3:d0:
05:76:41:ce:b6:63:35:95:4a:44:79:85:99:c8:ad:26:29:2d:
11:b2:16:51:18:fb:b2:6e:4c:06:70:36:55:43:9e:be:1d:21:
ae:c5:1f:9c:e3:e6:b4:a3:77:51:1e:85:c4:9b:6e:46:17:3a:
46:bc:5a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:30:19 2025 by rpki-client