Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/nG9mtYg8q1kGRcLOzrQ0zrcJNXo.roa
File: nG9mtYg8q1kGRcLOzrQ0zrcJNXo.roa (raw, json)
Hash identifier: NR1u/u06mfn9R60ZDdVX6xK+lRqZj3DMLSUcbKnjixw=
Subject key identifier: 9C:6F:66:B5:88:3C:AB:59:06:45:C2:CE:CE:B4:34:CE:B7:09:35:7A
Certificate issuer: /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial: 018CD3438A9590D45EF9099DFD93587D38AD
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/nG9mtYg8q1kGRcLOzrQ0zrcJNXo.roa
Signing time: Thu 04 Jan 2024 06:57:48 +0000
ROA not before: Thu 04 Jan 2024 06:57:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51741
IP address blocks: 91.217.219.0/24 maxlen: 24
2a12:62c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:d3:43:8a:95:90:d4:5e:f9:09:9d:fd:93:58:7d:38:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Validity
Not Before: Jan 4 06:57:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c6f66b5883cab590645c2ceceb434ceb709357a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:87:30:d4:90:4c:67:7f:e8:98:e4:f9:6a:b9:
9b:20:26:2c:b8:21:e2:bb:03:72:cb:6c:47:62:d7:
30:74:02:da:47:08:27:5c:38:80:6f:38:7d:ad:cf:
4c:4f:e3:f9:c7:e4:31:29:35:61:73:a4:de:34:f9:
63:c2:01:06:40:dd:bf:df:9b:7b:7c:72:93:c1:fe:
ca:e9:42:53:87:98:ef:5d:ea:13:b0:bc:92:61:f3:
d2:d2:d8:23:05:7a:8a:56:b5:0a:28:a3:9f:6c:88:
89:e6:16:f2:29:84:46:85:a7:74:5e:a0:3a:c0:b3:
b7:6b:d2:94:ad:6a:ed:5d:32:4b:31:f6:bb:0c:dc:
f8:6d:9e:77:26:79:55:09:e9:22:0f:c8:48:b4:d2:
11:c9:6b:08:49:89:db:52:e3:57:57:5a:65:14:7d:
03:2c:47:f1:72:33:c3:21:47:d2:72:ae:19:4b:f1:
98:d5:e7:69:af:d2:32:39:5e:90:29:54:2c:54:08:
97:ad:ce:96:52:89:d2:28:b5:ff:09:8c:66:38:87:
d5:f1:d3:8a:8f:30:d0:26:34:64:8c:da:5e:73:4c:
82:15:2b:cd:70:b0:2a:a2:95:6d:0b:57:00:9b:b2:
a0:47:07:4f:37:bf:28:0d:05:33:ab:1b:48:24:90:
01:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:6F:66:B5:88:3C:AB:59:06:45:C2:CE:CE:B4:34:CE:B7:09:35:7A
X509v3 Authority Key Identifier:
keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/nG9mtYg8q1kGRcLOzrQ0zrcJNXo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.219.0/24
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
79:82:94:23:90:fa:e1:c9:66:f8:cc:ba:b4:77:77:b6:e3:27:
c0:c6:d7:71:63:13:d1:f7:62:5a:94:d5:bb:dc:eb:db:90:c3:
7e:95:e1:57:8c:a3:4b:8f:04:4c:6f:5e:71:c3:ed:d7:06:e6:
14:3e:69:13:6b:c3:1a:80:8d:3d:d4:b7:25:12:07:3b:a3:9d:
2f:67:1c:14:a9:ca:ae:75:53:e5:0d:22:db:05:ce:08:e7:17:
68:0e:43:73:7d:23:48:f8:95:43:fa:40:34:a4:02:f2:9d:75:
be:6e:0f:4c:91:7f:12:c1:c3:6c:a6:da:18:31:74:ce:b7:47:
57:c1:46:dc:d9:5a:a4:26:1a:8c:01:56:e1:c3:d7:f5:62:03:
72:6c:99:b5:74:b9:02:c5:18:9b:1c:51:b7:88:57:1f:b2:93:
2b:99:f4:cd:4d:94:69:c6:80:83:b6:6c:9e:b9:65:4f:0e:d1:
26:3d:ae:aa:4b:b6:cd:57:a0:14:b5:ac:2c:01:4e:06:68:c1:
ce:b7:12:c6:06:38:4a:45:31:b4:f0:b7:e5:b8:ab:65:b0:dc:
e0:54:8c:d8:8d:db:60:a0:6a:29:d1:7c:87:12:73:7e:3f:83:
9e:7c:3e:11:3a:26:2b:59:85:65:e5:20:5c:c0:14:21:e5:f7:
64:46:27:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:34:02 2024 by rpki-client on console-fra.rpki-client.org