Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/T-W6tsjHMN-CuKCbT-Tn-RMcuWI.roa
File: T-W6tsjHMN-CuKCbT-Tn-RMcuWI.roa (raw, json)
Hash identifier: prL1or0bctNIscGgSWmtWbSapm1yeZLjJgY+oVUN1g8=
Subject key identifier: 4F:E5:BA:B6:C8:C7:30:DF:82:B8:A0:9B:4F:E4:E7:F9:13:1C:B9:62
Certificate issuer: /CN=3f283af20fe6cf39100169d776bafa78241f44ed
Certificate serial: 018CC5000C0E77D919E206C4CBBCB4133DED
Authority key identifier: 3F:28:3A:F2:0F:E6:CF:39:10:01:69:D7:76:BA:FA:78:24:1F:44:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pyg68g_mzzkQAWnXdrr6eCQfRO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/T-W6tsjHMN-CuKCbT-Tn-RMcuWI.roa
Signing time: Mon 01 Jan 2024 12:29:23 +0000
ROA not before: Mon 01 Jan 2024 12:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210439
IP address blocks: 91.202.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:0c:0e:77:d9:19:e2:06:c4:cb:bc:b4:13:3d:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f283af20fe6cf39100169d776bafa78241f44ed
Validity
Not Before: Jan 1 12:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4fe5bab6c8c730df82b8a09b4fe4e7f9131cb962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:6b:9f:ff:c0:24:e5:cc:fe:c2:e0:ac:69:d6:
9e:7c:0e:70:37:31:7c:e1:51:af:f7:c1:29:96:3f:
37:b5:03:4a:95:db:df:83:db:62:4e:1b:ff:b2:5d:
1f:b7:ea:a2:3e:75:1a:61:b6:4a:72:c8:5e:bd:ef:
76:87:90:bc:26:f6:1b:6d:9e:b2:09:b8:c4:3c:ad:
b9:fc:2b:47:44:2c:36:6c:ff:fa:40:83:23:eb:fe:
c7:01:e0:5e:17:d5:24:78:e5:66:1e:7f:d8:ec:46:
27:35:ae:53:f5:a5:3e:0c:5f:98:88:ce:99:f0:40:
35:bd:2b:f9:a4:69:b5:38:a6:11:14:2a:df:22:4f:
1d:f2:08:58:29:73:a7:cf:56:c8:34:68:13:d7:14:
2b:92:a4:c7:c1:df:bb:56:80:ef:b6:77:2c:79:5a:
d8:83:3e:9e:1b:ae:c5:db:68:49:93:41:be:28:f0:
7b:a7:26:f9:3d:f5:2b:91:eb:57:ad:e4:67:46:de:
5e:fe:60:bd:98:cd:cf:ce:80:ec:75:0c:ea:45:12:
0b:9d:41:d0:4b:4c:d7:9b:95:43:90:fd:8c:23:8f:
73:fa:f4:d6:49:72:f1:ad:0c:ca:a2:05:1d:b9:52:
9f:97:62:7f:aa:15:e9:69:44:b6:63:cd:23:52:cb:
8d:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E5:BA:B6:C8:C7:30:DF:82:B8:A0:9B:4F:E4:E7:F9:13:1C:B9:62
X509v3 Authority Key Identifier:
keyid:3F:28:3A:F2:0F:E6:CF:39:10:01:69:D7:76:BA:FA:78:24:1F:44:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyg68g_mzzkQAWnXdrr6eCQfRO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/T-W6tsjHMN-CuKCbT-Tn-RMcuWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/Pyg68g_mzzkQAWnXdrr6eCQfRO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.211.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:c9:e5:ec:5d:22:68:d9:ec:f9:47:55:84:45:82:37:58:78:
4e:c3:56:04:66:b3:a2:cc:3b:30:2a:ad:bd:06:f6:f3:50:96:
ec:dc:36:26:54:91:3a:6b:af:11:a9:cb:9d:23:be:cf:69:8c:
38:32:38:55:d6:c6:70:a7:e3:d6:ce:ea:a5:b3:77:3f:4f:38:
3d:33:b2:1e:3a:1d:6a:79:76:c4:53:61:f3:19:d4:2c:dd:4b:
a3:40:d2:31:03:17:06:76:54:fc:da:31:56:75:07:67:5e:58:
2c:bd:5f:2d:ae:8f:1d:fb:a2:e4:77:19:ac:05:d2:67:f1:1f:
12:f5:ce:19:de:33:8d:58:cd:c5:06:fc:6d:ee:5d:21:0e:f6:
20:c6:11:a0:f5:44:25:46:fb:b8:d3:a2:c5:90:d0:7c:18:3d:
52:9a:3f:51:09:bc:5d:f4:d4:0a:14:67:a9:44:cd:3d:30:e7:
41:9d:97:41:47:3c:4c:33:ab:49:2d:b4:4a:c7:0c:d7:75:a1:
9e:d9:37:24:7f:22:59:37:43:d9:24:27:66:56:c6:61:6d:9a:
64:ad:4f:e8:fb:f1:1a:e4:d0:d2:63:26:24:3d:12:63:b2:b7:
81:1b:49:35:c3:18:2c:9c:4c:b7:f4:f4:9d:3a:9a:f9:aa:c4:
d2:d2:b7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:47 2025 by rpki-client