Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/430218-7fc7-41f5-be43-1b4a117bb394/1/sSjF6s9LjxJgpBLBF5e2PM7TDbo.roa
File: sSjF6s9LjxJgpBLBF5e2PM7TDbo.roa (raw, json)
Hash identifier: UVnowOKgt4ut1cGoEXzG65QpO4Ikq6Oipm5AkFJZSRs=
Subject key identifier: B1:28:C5:EA:CF:4B:8F:12:60:A4:12:C1:17:97:B6:3C:CE:D3:0D:BA
Certificate issuer: /CN=fd909273841b50a81ebd21f5ca0110fceee1ff3d
Certificate serial: 018CC94E4E04D39BB67E495E9130C947FA4E
Authority key identifier: FD:90:92:73:84:1B:50:A8:1E:BD:21:F5:CA:01:10:FC:EE:E1:FF:3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ZCSc4QbUKgevSH1ygEQ_O7h_z0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/430218-7fc7-41f5-be43-1b4a117bb394/1/sSjF6s9LjxJgpBLBF5e2PM7TDbo.roa
Signing time: Tue 02 Jan 2024 08:33:21 +0000
ROA not before: Tue 02 Jan 2024 08:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48361
IP address blocks: 91.209.127.0/24 maxlen: 24
185.16.116.0/23 maxlen: 23
185.16.118.0/23 maxlen: 23
2001:67c:1484::/48 maxlen: 48
2a04:280::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:4e:4e:04:d3:9b:b6:7e:49:5e:91:30:c9:47:fa:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd909273841b50a81ebd21f5ca0110fceee1ff3d
Validity
Not Before: Jan 2 08:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b128c5eacf4b8f1260a412c11797b63cced30dba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:be:47:53:f4:94:fb:76:66:5c:c4:f1:3c:64:
bf:af:9c:2c:d4:fa:ca:f3:e5:ee:c4:69:1b:05:4d:
32:c8:9d:01:ed:f2:26:cd:fa:0c:c2:b0:59:48:99:
52:4e:fb:97:ad:58:4f:89:f3:93:94:fd:f1:f6:0d:
81:f3:ba:92:ac:9d:6b:4d:b9:d2:05:0d:b6:40:37:
c6:be:e1:40:4f:81:40:1c:97:5c:9d:0a:ca:88:4b:
9d:21:d7:6e:87:b1:94:cc:87:d9:21:c1:ae:5b:d1:
ac:e8:eb:ab:07:16:16:e3:19:c0:48:5c:97:ff:34:
c0:d0:bd:42:fb:f9:d8:f0:1f:33:8d:ba:12:c9:37:
52:e9:43:de:66:72:4d:6c:e6:0d:0a:07:04:cb:9e:
0f:77:db:25:1f:82:28:57:d5:cc:1d:15:a9:b8:02:
4a:6e:56:cb:c6:d0:a2:4a:ae:7d:b9:fc:3b:81:17:
01:c8:74:5b:4d:4b:f1:53:77:ca:1b:12:45:ee:62:
e7:b8:6c:be:06:ad:92:8d:f0:c7:61:c3:b1:ff:77:
02:5b:09:f4:61:80:8c:77:1a:06:0b:01:3b:00:3e:
92:12:63:eb:31:49:d8:bf:f1:c3:63:12:50:be:d4:
0f:13:af:5d:3d:a4:fb:84:54:46:2c:45:ea:44:f8:
2b:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:28:C5:EA:CF:4B:8F:12:60:A4:12:C1:17:97:B6:3C:CE:D3:0D:BA
X509v3 Authority Key Identifier:
keyid:FD:90:92:73:84:1B:50:A8:1E:BD:21:F5:CA:01:10:FC:EE:E1:FF:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ZCSc4QbUKgevSH1ygEQ_O7h_z0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/430218-7fc7-41f5-be43-1b4a117bb394/1/sSjF6s9LjxJgpBLBF5e2PM7TDbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/430218-7fc7-41f5-be43-1b4a117bb394/1/_ZCSc4QbUKgevSH1ygEQ_O7h_z0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.127.0/24
185.16.116.0/22
IPv6:
2001:67c:1484::/48
2a04:280::/29
Signature Algorithm: sha256WithRSAEncryption
75:b2:de:9d:3e:60:86:13:19:f3:20:18:0e:70:b9:ae:ad:36:
0d:8a:b2:73:9e:71:af:15:15:fd:39:7c:e3:d9:34:c7:eb:3f:
16:c3:b2:5d:41:4a:e2:c5:06:ad:4e:ab:97:e0:b9:f0:47:01:
61:96:c5:da:f8:21:57:51:9c:32:2c:03:d0:41:d5:29:65:c7:
37:cd:bb:10:d9:1f:66:49:d2:b4:3b:d6:c9:d9:07:53:1b:e2:
dc:0d:55:e9:25:d7:9f:23:4d:2b:b4:d9:f9:d1:63:c6:72:a0:
67:3f:37:91:93:29:dc:4c:22:41:b8:d5:2b:15:60:10:f0:c9:
aa:53:e0:37:53:a6:ca:37:46:22:62:8c:c0:33:eb:71:53:a2:
c6:d9:67:8f:c1:6a:2c:65:bf:28:96:d7:6e:38:f5:6b:39:62:
62:b5:67:17:07:5c:24:65:1b:65:df:41:1e:53:ff:f5:c8:ef:
bd:24:f1:a7:d1:55:8c:9a:5b:a2:6d:06:5f:f1:c9:63:06:72:
1a:79:12:f2:59:98:37:7b:74:31:d8:26:81:be:6f:03:f6:11:
7f:e4:57:c2:48:61:0e:15:ad:74:a2:a8:ea:ae:96:11:4a:bb:
44:0e:63:ba:d8:23:39:bc:bd:2c:c5:ab:55:48:63:75:54:c4:
e6:9a:34:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:21 2024 by rpki-client on console-fra.rpki-client.org