Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/b6181b-2237-4ee2-9e73-1976d81c0bc6/1/TrdU6PScnn4E_xfbl-qwCjXnaJU.roa
File: TrdU6PScnn4E_xfbl-qwCjXnaJU.roa (raw, json)
Hash identifier: DK9Jku/TOH/68ODxjiGDnCXgK7nec5CUhRmkFLVnOcs=
Subject key identifier: 4E:B7:54:E8:F4:9C:9E:7E:04:FF:17:DB:97:EA:B0:0A:35:E7:68:95
Certificate issuer: /CN=08a07690756eedf69d24510897f941eb196e5b59
Certificate serial: 018CC86EF8A7178FCE01A8BDCFA297292CC1
Authority key identifier: 08:A0:76:90:75:6E:ED:F6:9D:24:51:08:97:F9:41:EB:19:6E:5B:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CKB2kHVu7fadJFEIl_lB6xluW1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/b6181b-2237-4ee2-9e73-1976d81c0bc6/1/TrdU6PScnn4E_xfbl-qwCjXnaJU.roa
Signing time: Tue 02 Jan 2024 04:29:24 +0000
ROA not before: Tue 02 Jan 2024 04:29:24 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47676
IP address blocks: 91.208.88.0/24 maxlen: 24
2001:67c:2744::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:6e:f8:a7:17:8f:ce:01:a8:bd:cf:a2:97:29:2c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08a07690756eedf69d24510897f941eb196e5b59
Validity
Not Before: Jan 2 04:29:24 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4eb754e8f49c9e7e04ff17db97eab00a35e76895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cd:47:0f:64:0e:d2:a5:ca:dd:c3:7e:57:28:
f9:36:29:4a:47:07:9c:c7:52:89:c4:da:97:39:c0:
02:f9:24:fb:ae:d0:df:9a:64:dc:23:f7:02:6e:db:
78:20:bd:35:09:cd:95:f2:35:ed:82:f7:4e:dd:cd:
71:0e:2c:64:b1:74:76:15:b0:6b:c9:31:bf:80:b3:
a5:db:67:01:91:0a:5c:72:27:1a:ab:ff:72:a2:ac:
12:43:00:64:6a:20:c6:e4:3e:07:c0:ac:53:72:de:
47:9d:3e:ff:46:73:70:d7:44:b2:88:12:55:3d:1d:
d4:ab:a7:41:21:fe:23:ae:be:bf:9c:08:23:1a:87:
29:b3:66:d7:90:7e:90:66:cc:7e:80:9b:cf:a0:24:
13:05:0b:18:60:19:0e:b2:e6:5e:1f:52:2b:0c:96:
bf:89:d0:ca:e3:83:d5:ea:83:15:ef:f2:f8:c9:2d:
b9:b2:96:2a:4e:eb:00:19:09:25:a4:81:4c:6e:f2:
fc:98:02:78:79:01:ac:90:b4:ae:31:7f:06:56:dd:
4d:9c:7f:b7:03:fa:1d:a0:3e:11:eb:e4:e5:50:7a:
b4:8e:0c:40:77:c7:5a:d4:d2:57:51:89:6d:7f:16:
06:a8:d5:51:8c:65:7d:d8:a1:aa:df:32:d6:18:2d:
1a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:B7:54:E8:F4:9C:9E:7E:04:FF:17:DB:97:EA:B0:0A:35:E7:68:95
X509v3 Authority Key Identifier:
keyid:08:A0:76:90:75:6E:ED:F6:9D:24:51:08:97:F9:41:EB:19:6E:5B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CKB2kHVu7fadJFEIl_lB6xluW1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b6181b-2237-4ee2-9e73-1976d81c0bc6/1/TrdU6PScnn4E_xfbl-qwCjXnaJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/b6181b-2237-4ee2-9e73-1976d81c0bc6/1/CKB2kHVu7fadJFEIl_lB6xluW1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.88.0/24
IPv6:
2001:67c:2744::/48
Signature Algorithm: sha256WithRSAEncryption
7f:20:2b:d6:dc:ee:b0:83:f7:b1:d4:f1:61:fa:db:84:24:ec:
d9:95:d1:2d:94:cf:6c:4f:cd:72:74:72:49:1d:5d:fe:b9:81:
da:d1:60:39:dd:bc:fa:73:a0:d5:42:8d:2d:a5:4d:20:81:d7:
c1:5f:29:8c:37:95:d4:f3:9e:0f:28:37:09:f0:7b:c8:1f:7a:
e0:e4:ed:ce:3b:31:dd:9a:76:0d:7c:66:3c:1a:15:45:f6:eb:
11:b3:9d:37:38:b2:86:52:8c:b5:b2:aa:dc:bb:62:2f:7c:17:
3b:58:5c:2f:c7:7e:55:b2:0a:b7:36:fb:e0:8b:3d:8f:51:7b:
6e:6a:15:08:57:54:ca:7f:cd:90:b1:de:d2:fa:f5:54:28:64:
e6:f0:c8:ea:33:6a:70:a9:b8:b7:02:89:d5:ae:01:3e:45:88:
49:b9:b5:f7:aa:b1:67:ef:be:26:bc:48:bd:c4:63:32:55:cd:
38:d7:a9:16:fb:2e:d5:2a:85:cd:32:28:8b:b8:ff:96:da:ce:
4e:a0:ca:6c:22:d4:c4:9f:14:d2:5b:84:d6:14:4e:89:cd:27:
0e:f3:10:d4:65:72:7d:44:28:52:04:ea:90:76:ca:ac:b2:4d:
18:f8:86:48:3a:07:45:64:ac:12:ed:2c:bd:37:66:c5:67:18:
42:b3:6d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:30 2025 by rpki-client