Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/Y7XamdIimDBDP24MMI9E_Zn1quo.roa
File: Y7XamdIimDBDP24MMI9E_Zn1quo.roa (raw, json)
Hash identifier: pbgqHNptg/pQgeKfPD8NHO84UV5nDHE6HuwB7yuvQNY=
Subject key identifier: 63:B5:DA:99:D2:22:98:30:43:3F:6E:0C:30:8F:44:FD:99:F5:AA:EA
Certificate issuer: /CN=3f283af20fe6cf39100169d776bafa78241f44ed
Certificate serial: 018CC5000B1DDF8D19EC077E2AC79FB34110
Authority key identifier: 3F:28:3A:F2:0F:E6:CF:39:10:01:69:D7:76:BA:FA:78:24:1F:44:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pyg68g_mzzkQAWnXdrr6eCQfRO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/Y7XamdIimDBDP24MMI9E_Zn1quo.roa
Signing time: Mon 01 Jan 2024 12:29:23 +0000
ROA not before: Mon 01 Jan 2024 12:29:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8100
IP address blocks: 91.202.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:00:0b:1d:df:8d:19:ec:07:7e:2a:c7:9f:b3:41:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f283af20fe6cf39100169d776bafa78241f44ed
Validity
Not Before: Jan 1 12:29:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=63b5da99d2229830433f6e0c308f44fd99f5aaea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:94:16:2e:c6:cb:e6:b8:a6:5e:d6:e6:64:cf:
ef:0d:a0:8d:5c:81:9f:63:82:11:f7:2c:cd:5e:30:
b9:d7:f8:1a:ab:74:fc:28:3f:c7:6f:31:ee:21:9a:
18:9e:b8:0c:d3:10:90:e5:e0:f1:26:2e:55:0e:4e:
fe:48:8d:34:0d:39:cc:7b:12:0c:34:37:b7:53:74:
80:a6:e8:d8:02:79:cb:1e:0a:48:21:42:c1:4f:03:
fe:64:3d:80:42:58:9b:7d:1d:fd:d2:7b:38:a0:8c:
57:da:01:8f:95:69:73:71:53:83:0f:d4:a9:ea:cc:
6b:82:c0:8f:b3:ae:f1:01:49:73:ac:43:2b:0e:8c:
32:35:f5:64:df:8c:d0:96:80:01:2f:9e:29:d5:39:
a8:33:17:ec:ed:10:d6:3d:39:d2:eb:de:f6:dd:54:
4d:73:3c:fb:96:4c:b7:70:e4:1c:16:18:f2:0e:14:
fb:36:71:00:57:5b:6f:f4:36:89:a5:c4:29:b7:f9:
a2:4d:1d:d2:f7:89:af:1e:1f:2d:d4:38:0a:51:0f:
32:a3:f3:e8:65:18:ed:24:35:6c:80:0c:25:66:e6:
f2:9e:5e:cd:69:55:6e:6b:ea:1c:8d:d2:07:7b:8e:
db:15:a5:a2:dc:1f:dc:4f:c8:40:84:e3:72:18:72:
84:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B5:DA:99:D2:22:98:30:43:3F:6E:0C:30:8F:44:FD:99:F5:AA:EA
X509v3 Authority Key Identifier:
keyid:3F:28:3A:F2:0F:E6:CF:39:10:01:69:D7:76:BA:FA:78:24:1F:44:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pyg68g_mzzkQAWnXdrr6eCQfRO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/Y7XamdIimDBDP24MMI9E_Zn1quo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b16080-1813-492b-a7c2-98d4ffea210c/1/Pyg68g_mzzkQAWnXdrr6eCQfRO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.211.0/24
Signature Algorithm: sha256WithRSAEncryption
97:11:81:3b:5a:a1:00:97:a6:f6:13:33:2d:7b:2b:d7:ef:a8:
d9:da:db:93:10:aa:09:65:16:21:23:64:c2:42:a7:c4:d0:05:
04:27:0f:fb:65:a4:a7:39:de:03:30:ca:df:84:7c:02:a8:e3:
e8:e9:26:02:1f:93:9e:27:e9:1a:35:99:64:d6:6e:b8:9b:93:
92:67:c7:1e:7d:43:c2:dd:4f:f0:a7:e9:49:8a:7f:35:54:26:
e7:85:3c:d2:31:23:76:d1:a7:21:09:a4:7e:d9:6c:3c:4e:b2:
37:52:d4:a1:f0:c2:27:3f:cb:4c:54:e0:6f:63:aa:5a:13:34:
07:5d:84:f4:f6:57:b2:97:26:9a:e2:d6:56:8f:7e:f9:32:fa:
50:76:fe:e0:06:c0:b8:6f:eb:78:b6:86:52:ae:b7:5e:1f:e0:
45:b3:7b:79:46:9c:12:27:3b:83:36:aa:22:6f:00:4c:c4:95:
6f:87:ca:eb:fd:2f:8b:08:44:b7:6c:86:38:5c:cd:56:02:7e:
da:bb:52:5f:9e:c5:a0:8f:08:0a:c4:dd:df:dd:4c:2a:5f:df:
6d:b3:b2:52:6f:41:f7:97:09:86:d2:a1:45:77:36:72:af:3f:
7f:68:c5:1f:ea:ce:ce:c3:34:c4:9d:8a:49:6b:d3:25:18:59:
9e:36:9f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:19 2025 by rpki-client