Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/kmE3CZeSCuCP7oB8KKcpmsCcKos.roa
File: kmE3CZeSCuCP7oB8KKcpmsCcKos.roa (raw, json)
Hash identifier: L2kxytHQbpOluTl2KbLFWku/Qi0qdWogCtowX8BZXQQ=
Subject key identifier: 92:61:37:09:97:92:0A:E0:8F:EE:80:7C:28:A7:29:9A:C0:9C:2A:8B
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 018C969D44BF56BB1D94668701D60EDAF3A9
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/kmE3CZeSCuCP7oB8KKcpmsCcKos.roa
Signing time: Sat 23 Dec 2023 12:18:58 +0000
ROA not before: Sat 23 Dec 2023 12:18:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 91.108.216.0/22 maxlen: 22
91.108.224.0/24 maxlen: 24
91.108.224.0/19 maxlen: 24
91.108.220.0/22 maxlen: 22
91.108.238.0/24 maxlen: 24
91.108.236.0/24 maxlen: 24
91.108.255.0/24 maxlen: 24
91.108.192.0/24 maxlen: 24
91.108.196.0/22 maxlen: 22
91.108.195.0/24 maxlen: 24
91.108.193.0/24 maxlen: 24
91.108.194.0/24 maxlen: 24
91.108.204.0/22 maxlen: 22
91.108.200.0/22 maxlen: 22
91.108.208.0/24 maxlen: 24
91.108.208.0/22 maxlen: 22
91.108.212.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:96:9d:44:bf:56:bb:1d:94:66:87:01:d6:0e:da:f3:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Dec 23 12:18:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9261370997920ae08fee807c28a7299ac09c2a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:00:a2:60:40:84:94:b7:1b:42:8a:dd:63:cd:
85:3d:a2:ee:80:de:fd:f4:73:7c:a9:57:fb:fc:48:
9c:90:c6:57:ce:26:9e:da:5b:a6:41:63:75:ae:4b:
ca:9d:89:e8:70:34:45:22:22:d8:8e:6d:5d:b4:69:
41:11:5f:26:e9:b1:c8:3f:61:42:54:72:80:b0:84:
74:a9:88:62:64:a0:1c:f5:d9:bc:80:05:70:ae:51:
d8:2d:c4:50:81:6c:b5:7e:07:94:ca:ba:f1:95:8f:
11:bf:1c:3e:6d:bd:a5:93:c5:db:f5:77:43:29:a3:
bb:40:87:81:aa:87:02:86:17:c1:f7:ea:6b:30:0e:
50:0b:b6:42:da:39:50:16:cd:2d:b5:d3:7c:38:bc:
9f:67:d5:bb:42:62:e1:b9:ab:65:cf:4a:07:e4:99:
de:7b:29:dd:50:65:97:90:de:f3:4a:b8:3f:e8:5b:
1e:77:ee:82:30:43:e9:01:d6:04:9e:5a:7a:c6:fa:
d8:49:09:c9:4a:af:f0:4d:7e:89:94:c9:93:cd:9c:
45:83:19:31:39:b0:d1:9c:c6:8f:e7:a6:8d:f4:85:
73:da:b0:2c:6a:6e:df:c8:c6:9c:6e:46:da:2a:fa:
80:26:33:48:95:78:4e:4e:b0:39:9c:24:7a:0f:2e:
11:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:61:37:09:97:92:0A:E0:8F:EE:80:7C:28:A7:29:9A:C0:9C:2A:8B
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/kmE3CZeSCuCP7oB8KKcpmsCcKos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.192.0/18
Signature Algorithm: sha256WithRSAEncryption
0f:6a:b1:73:c4:f3:9b:7b:ba:bd:db:40:5b:31:88:c9:ff:4a:
de:19:2e:40:e4:32:30:a5:f0:47:9f:ab:de:c0:5b:bb:9b:4f:
aa:56:42:f4:2f:c3:e6:ca:83:8d:26:f5:e8:05:23:4b:13:4a:
dc:cb:fb:7f:ed:86:ca:a0:c1:82:08:ff:3f:1a:b1:4a:6a:23:
ca:83:2b:b6:dd:e4:7b:e7:63:27:f6:08:08:39:ad:e7:f2:56:
03:c6:f0:b4:f5:1c:e5:a4:f6:97:f0:c8:7d:53:6a:c0:27:d9:
d6:aa:83:6b:4f:d1:b4:2e:50:41:b8:12:c5:84:24:28:7d:d9:
52:8b:96:3c:11:f9:2e:6b:a9:4c:d5:a9:a5:80:90:04:2d:60:
46:c1:ed:d3:4d:dc:fa:1f:49:0f:cb:3b:0b:59:04:1a:10:49:
e1:0b:c0:bf:5f:bd:78:bb:a7:0a:0f:f2:6b:e3:9f:df:18:89:
7a:c5:bf:53:5b:0d:36:e6:87:7a:74:dd:b5:bc:a6:45:cc:5d:
85:49:6b:47:34:10:6d:fc:15:4b:19:8f:f1:7b:b3:70:bc:00:
8e:25:67:6f:e6:64:cf:68:49:5e:83:c2:e3:58:1a:e4:90:23:
37:4a:5c:12:50:b2:73:3e:ee:a2:49:ac:cb:76:96:88:01:83:
e6:e8:fc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:35 2025 by rpki-client