Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/ccrk8hhIwYSTt-v2exbZTQN8dpM.roa
File: ccrk8hhIwYSTt-v2exbZTQN8dpM.roa (raw, json)
Hash identifier: YDhwp7W1wxvelmdNXEbqFy7xyG+m2p/S6oHkdVp+KOY=
Subject key identifier: 71:CA:E4:F2:18:48:C1:84:93:B7:EB:F6:7B:16:D9:4D:03:7C:76:93
Certificate issuer: /CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Certificate serial: 0188B24199F9A77B24920FD60C04AFF52902
Authority key identifier: 3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/ccrk8hhIwYSTt-v2exbZTQN8dpM.roa
Signing time: Tue 13 Jun 2023 00:57:03 +0000
ROA not before: Tue 13 Jun 2023 00:57:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61138
IP address blocks: 89.36.199.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b2:41:99:f9:a7:7b:24:92:0f:d6:0c:04:af:f5:29:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Validity
Not Before: Jun 13 00:57:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71cae4f21848c18493b7ebf67b16d94d037c7693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:11:93:d0:2e:0a:70:20:a4:33:0c:f9:d1:f9:
ca:04:4b:c0:00:c0:ef:39:72:f4:2f:e1:b4:78:0c:
16:f0:0f:8e:74:34:bf:48:bb:09:44:96:69:17:95:
8f:8e:b7:d9:89:50:53:b2:21:dc:16:41:df:e1:dc:
2a:f8:3c:21:0c:c9:c0:96:d1:b1:f3:49:3a:82:43:
3c:b9:cd:c0:ac:ff:e8:b2:43:1e:fa:ce:c4:11:99:
85:77:41:27:c7:ef:26:2f:94:74:f4:5d:c7:93:dd:
c5:e0:36:2a:95:97:64:a2:48:e3:ce:6f:f8:e9:37:
81:03:a6:7b:ba:aa:83:c4:43:b4:a5:77:7b:23:b8:
42:1c:f3:3f:80:89:10:c2:15:b6:7e:d3:6b:a0:bf:
f3:3f:96:f7:0d:32:2e:06:84:85:91:dd:be:25:0b:
3a:65:cd:60:b8:d3:ad:20:a2:ca:7a:0a:9e:5d:05:
e5:a8:b2:38:4e:66:f0:bc:e8:94:52:dd:ef:f3:f7:
19:7d:07:2e:39:85:d6:f5:fd:45:f4:5c:de:cc:a9:
c1:31:58:e8:37:34:11:bb:d1:ac:ee:47:05:ad:70:
9b:0c:22:1f:e8:40:56:3b:fd:63:50:26:01:ac:8a:
b1:03:f1:77:9f:e1:95:38:14:a0:cd:26:c3:79:80:
77:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:CA:E4:F2:18:48:C1:84:93:B7:EB:F6:7B:16:D9:4D:03:7C:76:93
X509v3 Authority Key Identifier:
keyid:3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/ccrk8hhIwYSTt-v2exbZTQN8dpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.36.199.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:c7:1c:17:1b:17:dc:79:88:24:ad:9c:db:98:88:b0:ae:14:
92:4a:bd:43:b5:00:87:ce:5d:9c:c2:2e:c6:b7:ee:a9:23:5d:
e6:1f:13:a7:ae:a8:93:b3:e4:9d:b4:fe:67:59:b9:d1:8c:62:
0a:e8:cd:aa:cd:cc:ad:e4:a7:45:b4:9f:a5:78:a8:59:3c:c8:
1b:95:fb:0b:3d:f3:4b:8f:4b:90:6c:e0:e5:1d:8f:f2:30:cf:
69:8c:09:e3:c6:b4:b9:93:15:dc:60:f7:35:54:71:ac:82:9e:
de:42:53:0d:4e:aa:12:ff:3b:70:fb:3d:ae:40:12:44:fa:d5:
b2:d9:44:e2:73:28:09:b9:86:be:75:3e:5d:d6:43:d0:86:55:
7b:a6:9c:b7:aa:ff:1d:52:77:b3:5a:e4:fe:35:73:78:23:32:
01:3f:2e:4b:4f:bd:16:b0:00:f5:c6:d1:16:b4:93:76:ac:ef:
99:f3:ad:3e:0a:69:1f:e1:26:f2:e2:19:ca:bd:e0:73:bd:00:
f0:cc:bb:20:4b:f9:47:5e:74:6a:b1:a1:e1:39:55:71:1a:13:
18:11:72:e7:c3:45:45:4d:e7:4b:57:e0:2f:98:27:08:58:cc:
ab:67:29:90:0d:bb:af:f6:a6:7c:c6:80:4f:54:9e:0e:0b:38:
57:68:a3:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:08 2025 by rpki-client