Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/yWzSO9LI6jv3jKcTFQcXtb3su_g.roa
File: yWzSO9LI6jv3jKcTFQcXtb3su_g.roa (raw, json)
Hash identifier: WA+S4OQBabWncsyDeFOfKDrvcfdOqebfEvrxjiA3cWw=
Subject key identifier: C9:6C:D2:3B:D2:C8:EA:3B:F7:8C:A7:13:15:07:17:B5:BD:EC:BB:F8
Certificate issuer: /CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Certificate serial: 0185ECFD2DD1718B6F0C540FF8AA00308DCC
Authority key identifier: 3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/yWzSO9LI6jv3jKcTFQcXtb3su_g.roa
Signing time: Thu 26 Jan 2023 07:31:33 +0000
ROA not before: Thu 26 Jan 2023 07:31:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51741
IP address blocks: 91.217.219.0/24 maxlen: 24
2a12:62c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ec:fd:2d:d1:71:8b:6f:0c:54:0f:f8:aa:00:30:8d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ebcb79ef58a1c98e151f60c51426f74eb1c3938
Validity
Not Before: Jan 26 07:31:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c96cd23bd2c8ea3bf78ca713150717b5bdecbbf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7c:49:82:c9:96:1f:a9:d7:8d:ff:d2:8e:4d:
b0:0a:af:77:37:b7:53:bf:4c:e7:5f:b0:55:83:8d:
7a:5d:36:c9:c2:a6:a6:22:6d:e8:6c:6f:cd:92:76:
1d:27:06:1c:ab:ef:d0:6e:94:74:a6:f6:e3:fb:1c:
e5:1d:35:00:a7:dc:47:f4:d5:c8:70:fa:70:d5:fe:
b8:e7:53:b9:bf:35:3d:9e:69:c6:cc:be:11:72:56:
31:84:4d:c6:06:e2:7c:37:5c:ea:da:b2:9a:15:c8:
8a:a0:62:12:d4:fc:87:83:0e:53:de:92:47:00:24:
8a:74:6a:fd:4d:d5:df:b9:21:69:7d:2d:df:79:a7:
bc:a2:76:8d:bb:d8:ad:92:cc:dd:d0:5c:f7:9f:0c:
1e:5a:1d:e4:04:83:2c:5f:83:ce:eb:68:27:b0:17:
87:87:bb:31:dd:e6:b9:a8:6d:31:db:13:e3:93:30:
a7:77:37:79:bf:1d:52:cd:dd:9b:fb:77:9f:c4:b4:
a2:6d:55:33:ed:c8:5c:41:91:df:7c:ab:fb:52:15:
00:7b:b7:9b:67:32:f3:79:5a:dc:b3:66:e5:26:61:
82:7e:bd:ae:f0:22:33:be:da:ea:46:bf:2f:3b:68:
d7:d9:93:58:97:74:04:9f:68:87:6f:a3:6e:30:ff:
9b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:6C:D2:3B:D2:C8:EA:3B:F7:8C:A7:13:15:07:17:B5:BD:EC:BB:F8
X509v3 Authority Key Identifier:
keyid:3E:BC:B7:9E:F5:8A:1C:98:E1:51:F6:0C:51:42:6F:74:EB:1C:39:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pry3nvWKHJjhUfYMUUJvdOscOTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/yWzSO9LI6jv3jKcTFQcXtb3su_g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/dd9ed1-02cd-4b35-a3b4-e9f79dfbd2e6/1/Pry3nvWKHJjhUfYMUUJvdOscOTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.219.0/24
IPv6:
2a12:62c0::/29
Signature Algorithm: sha256WithRSAEncryption
38:96:95:9d:37:3a:85:95:55:91:52:fc:fc:fa:22:39:05:dc:
ae:64:42:7d:26:1f:38:af:25:68:e3:df:b3:b9:68:fe:8d:ac:
29:7d:05:92:f4:96:be:42:94:9b:f1:4a:7d:89:61:c1:d5:be:
25:6a:4a:9a:32:76:56:a0:30:02:ec:a5:d1:a3:f6:60:18:2f:
13:a4:21:e5:6a:bb:34:14:ad:a7:5f:ec:2f:3e:8d:2b:41:36:
32:c6:53:41:e4:a4:5b:ec:61:ec:6e:25:d6:22:39:56:bd:14:
a4:f8:16:bf:8d:b6:82:dc:fd:98:9d:da:82:05:35:8a:cc:74:
38:f7:66:22:17:c9:5a:40:65:87:f1:62:32:16:d1:bd:67:87:
af:52:09:41:5a:e8:0e:21:b6:63:24:8b:f7:63:d3:71:12:ae:
3e:6f:0a:5b:5f:54:12:73:b3:4b:49:17:2c:dc:ae:c6:d2:df:
c5:fb:64:46:8d:8f:03:82:fe:4d:21:fd:fe:c0:34:6d:23:f1:
fa:d2:c2:05:bd:94:6b:03:27:db:f5:19:75:f6:15:66:70:c3:
d5:07:8a:fa:f2:84:f0:44:fe:7e:ff:4f:ce:a7:9d:f6:ab:68:
e2:e4:9b:fc:7d:bb:39:81:61:c7:64:f3:73:b9:b9:b6:2a:65:
8c:d0:7d:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:29:22 2025 by rpki-client