Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/PHBuhNSr3PYNxOPWDnEqjRIH5_U.roa
File: PHBuhNSr3PYNxOPWDnEqjRIH5_U.roa (raw, json)
Hash identifier: ZgUZgG3sCvr2nV1Nwiboh/CP5CiKPUJEW3vphi6E37M=
Subject key identifier: 3C:70:6E:84:D4:AB:DC:F6:0D:C4:E3:D6:0E:71:2A:8D:12:07:E7:F5
Certificate issuer: /CN=3460486689d1f9799cc07caf7bad14c0f1eecb06
Certificate serial: 018CC3B69D2EA8A0DBF679878E0BC9108AEC
Authority key identifier: 34:60:48:66:89:D1:F9:79:9C:C0:7C:AF:7B:AD:14:C0:F1:EE:CB:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NGBIZonR-XmcwHyve60UwPHuywY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/PHBuhNSr3PYNxOPWDnEqjRIH5_U.roa
Signing time: Mon 01 Jan 2024 06:29:34 +0000
ROA not before: Mon 01 Jan 2024 06:29:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 58061
IP address blocks: 91.226.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b6:9d:2e:a8:a0:db:f6:79:87:8e:0b:c9:10:8a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3460486689d1f9799cc07caf7bad14c0f1eecb06
Validity
Not Before: Jan 1 06:29:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3c706e84d4abdcf60dc4e3d60e712a8d1207e7f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:dd:9f:76:04:f0:0e:cd:ad:21:d1:bb:03:b2:
fe:d9:18:b5:96:25:2b:74:d0:66:4d:6e:e4:76:60:
15:be:d6:be:4d:63:d2:ba:a5:b9:6f:b7:92:08:cb:
f5:55:c2:4a:42:17:a6:ea:c9:06:92:f4:75:36:2e:
c4:1d:2a:02:aa:07:91:2a:c2:ea:6f:3a:0f:32:d1:
01:b2:16:ef:e1:eb:95:ec:44:26:33:fa:17:07:0f:
c3:1e:3c:0d:21:a5:4b:8a:c3:5a:16:ca:68:2c:41:
e5:a7:f1:12:8a:ed:a0:92:51:9b:e8:49:2f:ed:30:
64:4a:d0:c2:26:fc:ad:49:cc:ea:60:df:cb:8d:04:
f3:7e:4d:aa:49:06:5a:e7:ef:76:4b:5f:f8:2f:a2:
3c:dc:6b:59:c4:62:2f:48:d4:9a:cc:14:f5:06:17:
ed:1c:48:6b:b1:46:d6:5b:a6:cd:ca:29:f9:f2:39:
72:be:50:94:7a:ab:a8:af:9e:68:1a:bc:5e:79:ea:
7b:7f:39:4a:53:ad:1a:46:9a:73:1d:4c:3d:cb:b3:
1d:d4:39:8d:c8:ed:4f:61:7c:b4:39:a8:ea:42:2d:
65:6d:ba:92:f4:e9:fb:ca:da:66:74:41:b2:b5:71:
0a:6c:69:ab:c6:d8:b9:5a:df:7a:12:c2:96:4b:0b:
87:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:70:6E:84:D4:AB:DC:F6:0D:C4:E3:D6:0E:71:2A:8D:12:07:E7:F5
X509v3 Authority Key Identifier:
keyid:34:60:48:66:89:D1:F9:79:9C:C0:7C:AF:7B:AD:14:C0:F1:EE:CB:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NGBIZonR-XmcwHyve60UwPHuywY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/PHBuhNSr3PYNxOPWDnEqjRIH5_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/b5734e-a322-431e-94f4-54f107c6702d/1/NGBIZonR-XmcwHyve60UwPHuywY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.247.0/24
Signature Algorithm: sha256WithRSAEncryption
86:9a:c0:39:67:34:62:f7:d0:dc:ca:5b:e1:c0:03:92:9d:67:
75:c1:50:5d:2a:9c:8f:79:e1:cb:7a:96:59:6a:89:b6:b7:00:
8f:5b:0e:41:3f:80:b5:ce:61:ac:87:70:b4:fe:f5:a1:ec:29:
1f:68:8e:77:83:31:b7:2e:ce:0b:90:cf:b3:26:2c:cc:38:17:
27:e5:24:02:24:20:ee:8a:bc:4e:22:31:46:8c:ff:b2:df:34:
d3:62:e5:88:ca:17:44:9c:bf:26:4a:79:e2:0e:4f:67:d3:c3:
6b:2b:53:33:94:20:96:55:8c:97:dc:bf:2e:e0:a7:01:b3:1f:
23:c3:81:e0:db:be:f3:ea:2c:7d:0b:2e:d1:d7:15:b3:ed:cd:
e9:19:7a:d0:5a:b9:fc:32:47:12:3e:69:12:51:82:92:b3:f1:
f2:de:2f:dd:f8:54:cf:d7:b4:df:ba:11:b3:cc:d2:50:d6:5c:
e9:4f:66:a1:f0:23:20:73:94:a9:b5:b8:98:1d:72:d4:1e:c8:
de:c2:1a:2a:a6:dd:de:5e:c3:df:eb:8a:c7:51:76:85:b7:6e:
f6:13:ae:83:86:9e:7d:de:cd:8a:00:d7:81:e4:55:b3:dc:4f:
31:15:3c:67:2b:64:16:de:fa:d4:70:18:72:eb:3a:f3:91:3e:
c2:e5:b9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:05 2024 by rpki-client on console-ams.rpki-client.org