Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/TAzxrnCwFT4AGI_7J3CPQ5o_mRI.roa
File: TAzxrnCwFT4AGI_7J3CPQ5o_mRI.roa (raw, json)
Hash identifier: S8GvINZi0Fu71Sl12VXMPpxkwSRuC0ZSxYheb+o6J1s=
Subject key identifier: 4C:0C:F1:AE:70:B0:15:3E:00:18:8F:FB:27:70:8F:43:9A:3F:99:12
Certificate issuer: /CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Certificate serial: 018E5B2E4E094CF60B520D8C544EAB05D632
Authority key identifier: 97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/TAzxrnCwFT4AGI_7J3CPQ5o_mRI.roa
Signing time: Wed 20 Mar 2024 09:25:45 +0000
ROA not before: Wed 20 Mar 2024 09:25:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215686
IP address blocks: 91.229.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:5b:2e:4e:09:4c:f6:0b:52:0d:8c:54:4e:ab:05:d6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=974e35ec2180daebd1bf3dd44403a9e0bfcb56ca
Validity
Not Before: Mar 20 09:25:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=4c0cf1ae70b0153e00188ffb27708f439a3f9912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d8:ab:8c:90:2d:15:9b:34:d6:d0:15:10:84:
e3:5e:98:25:b6:e1:56:92:7d:4a:58:b7:11:57:9d:
6e:89:fd:f0:cd:62:c0:d2:f8:b8:81:ee:90:2e:1a:
90:f2:f2:d8:95:a6:fc:d6:82:99:09:54:5c:56:ba:
3c:f5:3a:63:5f:8a:38:c4:f4:6e:a5:ee:f4:78:06:
7f:dd:8c:5b:b0:d5:77:12:e0:6f:5d:d8:6e:cb:b2:
3b:e3:17:0b:89:2c:59:ce:55:d6:3c:ae:cf:76:e5:
9a:c1:dc:2b:0a:76:d7:70:11:15:25:b6:0e:95:ad:
32:67:cb:c5:68:ba:80:0a:81:9c:fc:3c:9b:e5:29:
c8:fd:76:1b:93:26:ab:17:c5:d5:da:85:a7:69:95:
29:af:3b:f5:64:8a:15:98:da:3e:08:3d:73:04:dc:
23:19:be:4f:d1:59:e6:d3:be:81:f7:bd:cc:39:36:
1c:1a:88:95:65:cc:4a:3b:ef:9b:40:22:7a:4d:36:
36:29:a8:90:28:13:f4:14:5d:a5:e1:4f:4a:07:74:
ce:1f:62:10:f8:8d:f4:ff:d4:65:05:6f:18:b6:a9:
af:ff:35:fb:d3:7b:96:7c:55:76:66:9c:e4:b4:c2:
f3:a9:3c:e3:89:36:db:66:a3:15:ad:da:02:16:d4:
fb:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:0C:F1:AE:70:B0:15:3E:00:18:8F:FB:27:70:8F:43:9A:3F:99:12
X509v3 Authority Key Identifier:
keyid:97:4E:35:EC:21:80:DA:EB:D1:BF:3D:D4:44:03:A9:E0:BF:CB:56:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l0417CGA2uvRvz3URAOp4L_LVso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/TAzxrnCwFT4AGI_7J3CPQ5o_mRI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/df4a0a-c33d-4e0e-b15e-cdf4c6b424e1/1/l0417CGA2uvRvz3URAOp4L_LVso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.236.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:ee:2f:67:64:84:aa:b7:fd:47:21:e0:12:9d:1a:4f:7b:1d:
5f:67:47:65:56:09:ad:72:e1:f7:4a:8d:5e:31:f4:37:86:9e:
ca:5d:41:80:88:ef:4f:37:d1:48:4c:2d:73:3b:8a:29:7f:a3:
f5:7a:d6:ce:89:5d:c2:5d:5a:cb:2f:d0:cb:33:b3:05:c0:76:
14:66:f3:f1:45:9a:18:07:10:cf:41:38:65:0b:6a:19:c0:6f:
f8:01:42:be:19:43:06:99:a9:25:18:ac:91:84:d5:ed:b4:75:
d1:21:60:2b:12:e8:2b:1f:f7:25:bf:f6:d6:4e:3c:bc:2e:6f:
9d:dc:78:0a:52:69:9a:b7:36:cf:47:87:21:cb:f1:15:92:98:
e6:7b:53:28:31:35:e3:49:48:d0:5d:60:32:a6:56:50:3c:87:
cf:67:cd:37:64:c6:7b:2d:17:11:e5:b3:2a:9f:08:0d:c9:cc:
27:46:7b:bf:d7:fe:0c:39:ff:c4:19:0a:d7:2c:42:52:86:3f:
af:27:77:ca:39:49:16:54:58:f4:db:89:e9:de:2d:72:f7:cb:
ce:0c:1c:40:e4:e6:d1:e2:f1:9d:e1:f9:92:c8:53:31:1f:13:
a3:72:8c:b3:fd:86:c6:d3:20:46:90:f8:c8:b8:29:3a:d4:c9:
fa:b9:3b:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:47:55 2025 by rpki-client