Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/1-gVskDA7puQaQQ6gJlwY85shpqc.roa
File: 1-gVskDA7puQaQQ6gJlwY85shpqc.roa (raw, json)
Hash identifier: 1mDSrgIPdjUuITelqMPbKUXD5eXoDSmYHcrxBEJHYng=
Subject key identifier: FA:05:6C:90:30:3B:A6:E4:1A:41:0E:A0:26:5C:18:F3:9B:21:A6:A7
Certificate issuer: /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Certificate serial: 0190790A063B4808D8FC06273C83E850879D
Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/1-gVskDA7puQaQQ6gJlwY85shpqc.roa
Signing time: Wed 03 Jul 2024 14:40:18 +0000
ROA not before: Wed 03 Jul 2024 14:40:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215686
IP address blocks: 91.229.236.0/24 maxlen: 24
194.39.242.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:79:0a:06:3b:48:08:d8:fc:06:27:3c:83:e8:50:87:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Validity
Not Before: Jul 3 14:40:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa056c90303ba6e41a410ea0265c18f39b21a6a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:bc:36:77:84:ab:cb:5d:01:3c:56:f2:15:70:
f3:3b:10:f9:e7:4e:fa:c7:16:ca:6e:a6:ac:b2:35:
7d:a2:a1:cd:62:c8:3a:99:ab:6b:73:29:f2:27:8c:
48:ee:b4:4a:ad:86:8d:1d:91:77:3f:fa:d0:00:ff:
5c:bd:25:f4:58:ec:e5:19:98:1c:70:76:65:51:92:
8d:98:66:d9:92:89:4d:41:58:77:f3:2c:de:92:24:
00:0b:89:cf:ca:c2:79:0f:d8:c5:14:46:a0:35:7d:
24:b8:39:f9:08:27:25:65:d4:e1:4a:0d:8b:67:52:
63:c2:06:b5:5f:4a:e4:51:57:20:66:31:86:94:24:
77:01:e1:c1:cc:61:5d:6c:e9:4b:0e:88:f7:f3:db:
66:8a:79:a5:1c:88:0e:d0:68:b5:8e:7c:0e:b8:7f:
04:d4:aa:cc:af:2d:5a:02:19:e8:a3:3c:bb:42:79:
75:e2:86:94:6e:16:83:d8:f1:a4:73:e8:7f:31:cb:
fe:bc:27:9c:88:53:a9:cb:5f:c8:d0:48:52:cb:57:
b3:d8:ab:3d:25:ab:eb:97:cc:53:30:b0:79:1c:45:
c4:2b:72:e3:dd:67:a0:e8:89:7b:a7:89:9e:50:e9:
ca:b7:e7:8a:5f:e3:d3:a0:80:6d:d9:e5:1b:3a:41:
77:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:05:6C:90:30:3B:A6:E4:1A:41:0E:A0:26:5C:18:F3:9B:21:A6:A7
X509v3 Authority Key Identifier:
keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/1-gVskDA7puQaQQ6gJlwY85shpqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.236.0/24
194.39.242.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:f0:5e:12:07:99:0d:3b:05:1f:95:af:e9:bc:9a:a8:91:e4:
94:02:8f:f3:da:84:db:87:e7:95:88:09:58:17:16:b1:6f:30:
47:e5:bd:ca:5c:de:a2:75:f9:1f:06:b6:3c:27:be:00:4b:7f:
fd:3a:b7:8e:52:f3:ce:33:cf:65:e1:28:05:d3:76:21:ac:05:
30:57:db:53:e9:2f:20:e0:87:da:c5:2c:3f:c4:d2:9e:ac:9c:
29:c0:e7:32:c9:b4:10:4d:d0:b9:ed:69:2c:dd:7e:33:13:ab:
92:be:5a:cc:00:14:6b:8b:ad:b2:50:4e:d6:50:51:90:73:1e:
ae:a1:05:5a:d5:9c:e0:0e:d5:b1:86:a4:b2:4c:00:44:d0:1a:
94:72:3b:03:b8:55:ec:8c:72:9d:92:53:3d:3d:fe:2d:84:69:
0d:35:e0:9a:09:84:7b:9b:8a:60:05:b4:03:03:79:82:57:e2:
d8:0f:68:aa:99:7a:17:4e:3f:60:f3:bf:81:da:00:d3:d3:9a:
8e:13:97:f5:d6:e5:26:4d:8c:0b:41:35:b5:6f:6b:f8:89:6f:
33:59:d4:99:7f:a2:ce:6a:ad:63:d6:59:8f:cd:56:a9:cc:90:
c6:1d:50:fb:85:70:5f:16:d7:ce:65:2f:ed:61:5e:95:1d:63:
1c:b4:3a:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:48:39 2025 by rpki-client