Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/ne6O8Vnwq3hcsnK2I1Rpq9lH73U.roa
File: ne6O8Vnwq3hcsnK2I1Rpq9lH73U.roa (raw, json)
Hash identifier: tSU1Y/a8tp6iWE6CYKvMihFNgAUiqgzMKq7F8M54TZo=
Subject key identifier: 9D:EE:8E:F1:59:F0:AB:78:5C:B2:72:B6:23:54:69:AB:D9:47:EF:75
Certificate issuer: /CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Certificate serial: 0188DE3F97CBAA8CF3D59FAB3E51F0A7F202
Authority key identifier: 3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/ne6O8Vnwq3hcsnK2I1Rpq9lH73U.roa
Signing time: Wed 21 Jun 2023 13:58:09 +0000
ROA not before: Wed 21 Jun 2023 13:58:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209737
IP address blocks: 91.208.204.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:de:3f:97:cb:aa:8c:f3:d5:9f:ab:3e:51:f0:a7:f2:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bec12c21108134f00c0353107d60ccdaebefb2e
Validity
Not Before: Jun 21 13:58:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9dee8ef159f0ab785cb272b6235469abd947ef75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:08:e8:09:c0:de:0e:31:ce:c6:99:3e:72:54:
9b:64:44:85:52:3c:ba:2c:61:8b:93:31:c6:32:af:
de:a3:7e:77:55:e7:49:b6:b5:9d:e1:e6:f4:d7:fb:
f4:c9:64:97:77:03:f1:ca:3d:39:aa:e5:4d:9e:7a:
90:d0:ec:46:f1:ae:f3:9b:63:ac:45:d7:23:24:77:
a8:07:1f:b8:6f:5e:69:fb:91:d7:41:57:d7:c2:21:
57:32:9f:57:7a:97:17:f8:ff:d7:22:d7:3f:ef:e1:
59:ab:cc:92:3e:e7:8f:39:24:67:81:4b:a7:57:bb:
6e:97:bf:e6:c8:bd:30:65:d0:fd:af:5a:97:05:b4:
85:83:e9:11:b2:29:7f:91:d8:ad:ec:53:86:ab:a2:
b6:86:c6:06:0a:43:ef:d6:51:ef:6b:00:5d:e0:48:
2a:8e:4a:a8:e6:90:a3:69:e0:e4:94:f5:71:4d:48:
b7:b3:9e:5d:83:6c:27:1c:0e:5d:2c:a3:0e:d4:70:
ba:a2:15:57:d2:d0:e9:0d:db:3a:0b:99:18:13:bf:
63:ff:c8:30:9a:33:c1:d6:cf:37:27:6a:29:3c:8f:
a0:56:98:d7:9c:1e:0c:f7:93:6b:f1:b4:95:99:6d:
4f:59:79:c4:e1:ad:31:92:8e:56:9c:5f:a1:e4:6c:
45:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:EE:8E:F1:59:F0:AB:78:5C:B2:72:B6:23:54:69:AB:D9:47:EF:75
X509v3 Authority Key Identifier:
keyid:3B:EC:12:C2:11:08:13:4F:00:C0:35:31:07:D6:0C:CD:AE:BE:FB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-wSwhEIE08AwDUxB9YMza6--y4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/ne6O8Vnwq3hcsnK2I1Rpq9lH73U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2dfa97-8c53-4e74-9a2c-484a06a61717/1/O-wSwhEIE08AwDUxB9YMza6--y4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.204.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:7b:7d:16:ff:04:84:74:3b:3e:25:4a:b9:d8:43:df:be:40:
22:83:dd:6b:55:6e:0c:f5:9e:ad:05:94:0d:c8:7a:85:af:ea:
3a:e8:d4:84:65:70:50:0e:e1:fc:dc:d0:c9:e2:8b:49:29:c9:
29:f2:be:64:0e:61:3b:90:60:c1:e2:ac:50:f1:7e:21:23:78:
27:e6:06:89:29:d7:d2:89:90:6e:05:60:58:80:38:0f:c4:ab:
e1:a0:af:7a:97:28:87:12:3b:36:4c:31:fa:ed:29:1e:ca:e5:
e3:9c:b7:73:2a:36:32:a8:a8:3e:2a:aa:68:79:72:d5:03:08:
45:f4:6f:6c:be:3f:76:e1:90:23:b4:08:d2:23:89:69:e8:03:
f9:cf:50:e5:09:8f:4c:7b:a5:dc:0c:f1:2e:43:37:fe:e8:be:
ae:b8:09:c8:40:39:9f:fb:5c:15:b3:00:74:6e:05:79:a5:73:
f7:00:2a:2e:e3:a8:6b:8d:34:9b:09:2c:bd:1e:e3:47:e9:b6:
8b:c1:22:83:a3:9a:2d:30:61:1b:e9:72:f3:0e:34:75:cc:8f:
21:3c:0e:00:db:3f:d6:68:cb:35:ec:f2:6f:8b:e3:02:ae:dd:
b7:44:87:cd:2d:b9:61:ab:9e:38:2a:01:5a:cd:24:7f:8c:38:
47:c6:50:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:33:41 2025 by rpki-client