Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/1-TX4b_r8eOvijK44vfgkTTM6Skc.roa
File: 1-TX4b_r8eOvijK44vfgkTTM6Skc.roa (raw, json)
Hash identifier: fTn1rCoKvzezWGPCsGhXKSFQCuuUjeAghltp4lP4+So=
Subject key identifier: F9:35:F8:6F:FA:FC:78:EB:E2:8C:AE:38:BD:F8:24:4D:33:3A:4A:47
Certificate issuer: /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial: 018CE8379E434089D7958D292B42DC9AA868
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/1-TX4b_r8eOvijK44vfgkTTM6Skc.roa
Signing time: Mon 08 Jan 2024 08:36:48 +0000
ROA not before: Mon 08 Jan 2024 08:36:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51741
IP address blocks: 91.217.219.0/24 maxlen: 24
2a12:62c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e8:37:9e:43:40:89:d7:95:8d:29:2b:42:dc:9a:a8:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Validity
Not Before: Jan 8 08:36:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f935f86ffafc78ebe28cae38bdf8244d333a4a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:30:d0:45:0e:89:b7:c2:fc:e9:f9:32:2a:16:
2e:82:fc:53:12:23:da:b1:9d:a4:5b:08:7b:41:d9:
42:b2:3a:aa:92:db:81:a1:37:c9:3f:b0:fd:e7:89:
17:fc:9b:41:3b:50:b4:c4:8d:ad:92:03:17:b6:3f:
67:95:8a:d2:52:a7:6a:73:17:b2:61:b1:c2:29:00:
ff:86:f1:8e:e0:79:2f:14:93:74:ec:da:32:93:c1:
79:f3:a8:12:77:6a:7e:54:12:e4:eb:7c:1b:55:3e:
08:7b:32:fc:1d:f9:ad:85:4c:04:57:d8:81:bd:b7:
a8:89:1e:66:c6:0d:f6:50:63:9e:f9:7c:b2:42:cf:
d5:d6:a7:d5:58:83:80:8d:08:21:c6:3d:fc:f0:55:
a0:ec:12:d1:ec:bc:0b:20:b0:c6:9c:37:19:a3:61:
98:19:4d:79:c7:2e:67:54:1c:8b:95:86:49:9a:36:
ab:2f:b3:7c:a9:1e:a2:5c:77:86:1c:7f:40:50:03:
e9:d8:ce:ea:03:01:8e:c1:71:7c:60:5d:7b:1e:7e:
b9:fa:3b:ab:ee:29:2f:95:55:05:58:86:7d:be:08:
a7:9b:9e:92:71:44:67:06:14:6f:40:6c:11:31:d3:
a2:6e:15:07:0f:c1:4b:f4:6f:f3:c9:34:fb:15:5b:
52:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:35:F8:6F:FA:FC:78:EB:E2:8C:AE:38:BD:F8:24:4D:33:3A:4A:47
X509v3 Authority Key Identifier:
keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/1-TX4b_r8eOvijK44vfgkTTM6Skc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.219.0/24
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
91:b0:2a:b6:a9:ee:ee:8e:36:08:e1:24:bf:aa:ac:a1:85:92:
94:06:38:51:36:eb:09:a3:3b:e2:17:8a:ae:83:c5:cb:2d:a6:
4f:ec:59:10:64:8a:1a:5f:d0:4f:a0:95:9a:9f:cd:f7:bd:e6:
b2:95:97:de:13:be:03:53:52:f6:a3:c1:e2:99:bc:a7:b6:2a:
dc:54:51:0d:eb:08:47:b0:f1:73:b3:7f:2d:c5:3c:6b:f7:c2:
4f:52:ce:62:bc:92:14:49:98:f5:17:58:56:04:3a:cb:f8:ff:
03:8b:8d:40:3d:16:1e:52:8f:e2:c9:4d:22:b7:38:52:89:b1:
74:1a:73:61:3b:00:a9:d3:a3:ba:0d:7b:36:0f:76:44:e6:f3:
fb:3b:d8:c8:93:8f:d0:3a:64:c5:2b:5a:43:e6:ee:77:27:4c:
2a:86:1c:d8:38:f7:03:d5:a8:bc:2c:32:0e:92:13:94:cd:fc:
1f:30:dc:8e:35:58:ec:90:eb:d8:56:13:de:7b:cb:9d:96:9e:
26:1e:0e:d3:46:be:4c:f3:e2:01:16:2f:05:ed:a5:64:14:41:
3b:9a:ea:41:b7:38:4d:81:bf:0a:40:0a:d7:e8:48:44:c9:3c:
ed:46:d4:97:39:54:7c:01:fd:8f:5d:16:4f:ed:63:76:ff:89:
ab:5e:c4:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:14:06 2025 by rpki-client