Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/3pcqLBZAYQF8dMX6VtbLa-NcSX8.roa
File: 3pcqLBZAYQF8dMX6VtbLa-NcSX8.roa (raw, json)
Hash identifier: lWC/hYtlM8PahIaTZ2AGTRUAxdpJnz0AdJr8Yzhwnmc=
Subject key identifier: DE:97:2A:2C:16:40:61:01:7C:74:C5:FA:56:D6:CB:6B:E3:5C:49:7F
Certificate issuer: /CN=69b60a6d77c4cac8f102d810be330b3d391efe93
Certificate serial: 01856FD51B5A4B8428CDA7585EC323273969
Authority key identifier: 69:B6:0A:6D:77:C4:CA:C8:F1:02:D8:10:BE:33:0B:3D:39:1E:FE:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abYKbXfEysjxAtgQvjMLPTke_pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/3pcqLBZAYQF8dMX6VtbLa-NcSX8.roa
Signing time: Mon 02 Jan 2023 00:15:15 +0000
ROA not before: Mon 02 Jan 2023 00:15:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 91.202.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:1b:5a:4b:84:28:cd:a7:58:5e:c3:23:27:39:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b60a6d77c4cac8f102d810be330b3d391efe93
Validity
Not Before: Jan 2 00:15:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de972a2c164061017c74c5fa56d6cb6be35c497f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8d:35:a2:0f:76:aa:7c:e6:c2:e1:94:7d:72:
82:e8:45:87:03:0e:36:a3:d8:3d:7d:5b:8e:14:88:
f7:6a:aa:64:62:f2:b6:8d:d3:71:a7:16:35:f7:52:
3c:33:bc:95:78:8b:11:2e:87:3d:34:ec:32:95:bb:
51:0e:f5:00:ee:74:81:51:35:be:49:c6:6d:71:a6:
52:a4:94:ae:e8:e5:60:7e:5f:59:0e:65:ff:88:4a:
69:ca:3d:58:10:88:39:d5:7c:c3:5d:c5:f6:9c:b6:
4d:6d:80:d7:c4:e9:dc:1e:45:d6:81:17:4a:09:f3:
29:77:18:b0:b5:6a:59:1c:2e:f1:8d:3d:c0:c2:cb:
c1:b5:6f:25:40:a4:44:36:37:32:f5:98:05:76:5b:
29:66:70:d8:df:6b:b9:14:2d:82:c7:5c:14:6c:1c:
76:75:0e:69:73:7e:b2:f3:14:ad:8c:9f:d8:df:10:
d3:bc:6c:a9:60:3f:fc:7e:f0:62:3a:ed:3c:65:c0:
1a:db:c8:48:45:bb:d4:c7:25:be:2a:2f:fd:ee:3b:
e1:f8:b2:87:cc:57:2b:35:d1:3d:5b:8e:06:88:c3:
19:bc:03:ae:20:78:1b:f4:93:b5:60:22:80:04:d4:
f3:dd:4b:4a:0c:ea:8b:68:b0:63:99:c0:cc:e8:e8:
0d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:97:2A:2C:16:40:61:01:7C:74:C5:FA:56:D6:CB:6B:E3:5C:49:7F
X509v3 Authority Key Identifier:
keyid:69:B6:0A:6D:77:C4:CA:C8:F1:02:D8:10:BE:33:0B:3D:39:1E:FE:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abYKbXfEysjxAtgQvjMLPTke_pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/3pcqLBZAYQF8dMX6VtbLa-NcSX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/abYKbXfEysjxAtgQvjMLPTke_pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.209.0/24
Signature Algorithm: sha256WithRSAEncryption
92:fe:5c:74:24:4a:a8:24:3d:df:17:63:46:89:c9:15:76:95:
65:1e:65:d7:83:44:00:51:4c:b4:bb:fd:27:3f:31:fa:e4:aa:
c1:c9:9b:c2:c1:cd:a2:0f:31:71:78:cd:30:fa:dc:50:d5:6f:
92:9b:2c:06:c4:30:59:8e:ea:c0:2e:3b:8f:b2:cc:5f:76:60:
cf:ac:f7:0f:95:75:1d:7d:36:0a:57:4f:7a:66:15:1f:c9:2c:
91:de:28:4a:7f:76:f6:71:a7:e9:5f:d8:03:1e:09:cd:27:45:
37:0e:2f:0d:80:20:3c:bc:05:fa:fe:e7:9b:b5:7b:e7:5b:b5:
b6:eb:b8:3e:91:c4:fd:01:ee:9e:46:b0:4b:0a:bd:bf:2f:e7:
a7:6b:a0:ea:66:6b:2a:51:b6:df:e1:ab:be:39:33:71:7e:15:
90:b1:50:4b:43:4f:40:88:d1:90:b1:1c:4f:d7:5a:e3:a4:5d:
60:67:8a:75:b4:d0:a6:18:b7:34:d3:4a:59:78:f4:f4:22:7e:
7c:2a:51:d9:06:14:87:03:4a:67:b5:09:39:5b:2f:16:69:f9:
2d:a3:4d:c4:91:e0:e6:50:e4:e8:ab:90:bd:c6:e0:ec:5d:10:
02:6f:86:55:ae:2e:d1:20:b8:35:04:04:86:2c:8a:52:3f:36:
8d:43:6b:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:48:45 2025 by rpki-client