Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/itRcMsYOm3BQ0_6Uzj8a9cUopts.roa
File: itRcMsYOm3BQ0_6Uzj8a9cUopts.roa (raw, json)
Hash identifier: TgFqoC5qDUqMIgxKD+vuhzA6Ie0+4kHBb7D1l5Kg1E0=
Subject key identifier: 8A:D4:5C:32:C6:0E:9B:70:50:D3:FE:94:CE:3F:1A:F5:C5:28:A6:DB
Certificate issuer: /CN=69b60a6d77c4cac8f102d810be330b3d391efe93
Certificate serial: 018CC79402DC62C0FA745A5AC2376409B427
Authority key identifier: 69:B6:0A:6D:77:C4:CA:C8:F1:02:D8:10:BE:33:0B:3D:39:1E:FE:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/abYKbXfEysjxAtgQvjMLPTke_pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/itRcMsYOm3BQ0_6Uzj8a9cUopts.roa
Signing time: Tue 02 Jan 2024 00:30:15 +0000
ROA not before: Tue 02 Jan 2024 00:30:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 211439
IP address blocks: 91.202.209.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:02:dc:62:c0:fa:74:5a:5a:c2:37:64:09:b4:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69b60a6d77c4cac8f102d810be330b3d391efe93
Validity
Not Before: Jan 2 00:30:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8ad45c32c60e9b7050d3fe94ce3f1af5c528a6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:38:97:d6:2c:96:95:c5:f9:21:7d:a9:69:e7:
26:6a:16:2e:7f:76:a3:80:2e:9b:ab:3f:ce:d6:06:
39:08:0f:44:20:85:40:ba:71:9e:84:01:b3:5a:1b:
19:ac:f4:20:7f:f8:40:91:3a:5e:7b:9b:15:53:91:
eb:78:82:a5:93:3d:1d:be:fe:71:94:5a:23:c7:a4:
dd:7f:36:90:c7:52:e2:74:68:12:8a:a2:8e:a8:f3:
71:b5:d9:78:8a:cb:37:61:66:c9:b7:6d:f7:3e:7f:
58:82:29:6a:56:e7:9e:52:09:2f:ea:7f:67:70:49:
03:c7:4a:84:10:a3:3b:c3:31:d5:28:03:46:32:af:
94:db:ad:54:ad:cd:21:56:67:34:51:60:df:85:e1:
68:73:a2:f7:a7:63:74:62:0b:31:09:59:7b:f7:73:
2e:d4:80:e1:06:be:dd:e2:91:b4:ab:0c:78:0f:bd:
99:fd:62:df:98:61:9b:53:0e:b0:4a:a7:a8:3c:0f:
53:07:9e:f7:d9:d8:d9:10:50:5d:46:ca:48:47:68:
7c:d5:7d:da:63:c7:98:2e:ac:a0:54:5b:21:18:49:
00:90:1f:2c:67:ef:c9:f0:c8:cd:49:48:bf:d8:73:
50:a7:90:e2:e6:82:91:7a:2d:b2:a4:b8:1d:ae:7d:
f9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:D4:5C:32:C6:0E:9B:70:50:D3:FE:94:CE:3F:1A:F5:C5:28:A6:DB
X509v3 Authority Key Identifier:
keyid:69:B6:0A:6D:77:C4:CA:C8:F1:02:D8:10:BE:33:0B:3D:39:1E:FE:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/abYKbXfEysjxAtgQvjMLPTke_pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/itRcMsYOm3BQ0_6Uzj8a9cUopts.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5ff4ff-5bfe-4123-a152-4ad9914bba68/1/abYKbXfEysjxAtgQvjMLPTke_pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.202.209.0/24
Signature Algorithm: sha256WithRSAEncryption
42:1a:7a:f9:37:31:a2:1f:21:4d:c5:c7:b7:bb:6d:e2:b9:f3:
a6:e1:9f:1c:1d:23:6a:aa:96:a6:29:47:a2:71:a6:13:dc:87:
aa:bf:48:49:ca:8b:c1:cd:9d:58:83:01:be:1f:cc:24:a2:1f:
0e:6b:d9:5a:9d:61:9e:e9:db:23:46:15:c2:0c:a0:f2:c7:4b:
c8:b2:f0:c7:d0:50:14:6e:0f:dd:7b:a6:f8:af:da:7d:a4:e6:
95:1d:86:8d:84:af:a7:70:4f:58:18:47:11:34:76:fb:ce:f1:
ab:28:98:61:78:a3:e4:7e:21:3b:5c:da:bd:df:b6:89:cd:70:
9a:a6:00:1d:f1:f5:17:ee:86:2b:cc:80:d8:6a:03:24:b4:a0:
17:e9:9b:7a:bb:f8:76:b7:49:ba:98:5e:f8:80:04:58:1e:dc:
92:33:32:48:4c:2e:61:32:51:93:a2:7e:a2:e6:40:be:c4:84:
9e:ad:e1:ba:03:0b:54:75:42:93:51:eb:09:29:a1:ad:1a:bd:
72:09:5d:71:9d:43:8c:dd:21:72:86:11:f4:5f:54:d6:e8:fd:
94:c1:be:b1:73:02:ef:3c:46:f0:8d:09:a9:72:ae:48:e1:03:
bf:46:2d:63:7e:2c:d0:30:da:98:a2:47:90:4e:a7:30:9a:8b:
64:2e:96:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:59 2025 by rpki-client