Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/k6npbZHVYnrwOXzrqg38GTs1sMs.roa
File: k6npbZHVYnrwOXzrqg38GTs1sMs.roa (raw, json)
Hash identifier: RfrxRAC31l+prVSaQsNhun1PPY1w1I+jL5kPb05/lUc=
Subject key identifier: 93:A9:E9:6D:91:D5:62:7A:F0:39:7C:EB:AA:0D:FC:19:3B:35:B0:CB
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 018949F8D4FEE75692EF90CD09D3E24AC747
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/k6npbZHVYnrwOXzrqg38GTs1sMs.roa
Signing time: Wed 12 Jul 2023 11:59:51 +0000
ROA not before: Wed 12 Jul 2023 11:59:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 91.108.216.0/22 maxlen: 22
91.108.224.0/24 maxlen: 24
91.108.224.0/19 maxlen: 19
91.108.220.0/22 maxlen: 22
91.108.238.0/24 maxlen: 24
91.108.236.0/24 maxlen: 24
91.108.255.0/24 maxlen: 24
91.108.192.0/24 maxlen: 24
91.108.196.0/22 maxlen: 22
91.108.195.0/24 maxlen: 24
91.108.193.0/24 maxlen: 24
91.108.194.0/24 maxlen: 24
91.108.204.0/22 maxlen: 22
91.108.200.0/22 maxlen: 22
91.108.208.0/24 maxlen: 24
91.108.208.0/22 maxlen: 22
91.108.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:f8:d4:fe:e7:56:92:ef:90:cd:09:d3:e2:4a:c7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Jul 12 11:59:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=93a9e96d91d5627af0397cebaa0dfc193b35b0cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:b5:75:35:f0:e6:20:c5:70:f6:75:78:c3:
bf:94:77:45:68:67:07:4c:f7:03:4b:ce:1b:f1:8c:
78:42:ec:f9:06:67:e6:2c:7f:7b:56:58:8c:fe:30:
72:c7:46:e4:6f:af:e2:6b:00:91:3d:45:db:a9:e1:
3f:2c:80:af:d1:2d:39:98:bb:03:27:d5:ff:b3:d1:
81:a7:ac:8d:d8:a9:a3:5a:fa:ab:d7:a9:30:70:3e:
91:dc:d8:30:3b:ca:dc:13:a3:62:49:87:3d:3a:cd:
be:7c:3a:2c:c4:f5:b6:9e:2f:ab:bd:5d:ca:ab:f8:
6c:02:9b:bd:b2:e6:3d:28:d2:5e:76:74:18:0f:16:
f3:62:1d:29:d3:7e:15:63:56:18:37:78:1a:c1:2e:
da:f5:7a:a1:ab:48:f2:b4:0e:fe:ba:b8:b1:85:80:
df:7a:27:77:1a:23:fe:be:d2:9f:6f:a5:77:1c:1a:
dc:66:c1:9f:cf:e7:b7:58:2b:b4:a1:e9:98:87:db:
64:4a:b5:9e:f8:39:95:42:c5:d1:f3:b5:5f:98:bb:
02:76:aa:3e:bb:47:d5:2b:85:4a:48:97:f4:e0:46:
83:78:ec:55:20:66:c6:40:c4:b4:8e:b5:4e:b2:8a:
6b:0f:ba:69:28:ce:51:76:44:0b:5f:aa:79:44:a2:
27:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:A9:E9:6D:91:D5:62:7A:F0:39:7C:EB:AA:0D:FC:19:3B:35:B0:CB
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/k6npbZHVYnrwOXzrqg38GTs1sMs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.192.0/18
Signature Algorithm: sha256WithRSAEncryption
76:1b:d7:5d:4a:2c:54:0b:21:83:92:8d:64:e7:7b:57:12:c5:
3d:00:bf:b0:0f:93:83:52:cf:ce:1c:f0:5c:3a:26:92:b9:f1:
8e:7e:fd:21:4b:c2:44:73:09:2d:ab:6b:ae:f8:9a:a2:e0:de:
ec:f9:98:35:f5:54:9c:cd:3e:fa:b6:fe:e4:28:46:08:8a:99:
53:01:17:4d:8d:c4:db:e3:aa:64:b9:4b:37:f5:6b:65:1e:11:
26:b7:d0:4e:56:52:15:18:37:e6:38:13:86:7e:6e:ce:30:0d:
15:ea:8b:1c:00:20:17:d0:9e:47:66:af:83:13:2c:97:c8:23:
1d:85:a9:fa:af:4b:14:2a:e9:e5:32:8a:41:80:56:9e:07:d0:
54:da:0d:fc:f7:19:dc:bb:a9:fd:6c:0b:0e:8f:eb:87:26:4e:
49:81:7b:ca:8c:6a:12:2a:4f:35:ee:0f:75:be:b3:04:da:e4:
2e:3f:4d:ee:31:64:ce:fd:32:4f:28:8d:42:2d:94:b2:18:3c:
1e:da:a3:dd:48:4c:5f:29:c7:bf:33:74:71:85:be:2d:b2:11:
0a:37:f6:b0:1d:cb:70:15:3a:cb:58:c9:1e:74:0f:d2:05:09:
9c:e7:23:7b:88:07:aa:6f:41:41:8f:47:98:a6:11:3a:46:9b:
bd:0b:2b:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:17:07 2025 by rpki-client