Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/nEXKvuH6wmS4L2fN26pIcjvR2HE.roa
File: nEXKvuH6wmS4L2fN26pIcjvR2HE.roa (raw, json)
Hash identifier: jGYmYh++GXz6k/wtlO+yNhTrhBxqRT4ZmZqIuweG91o=
Subject key identifier: 9C:45:CA:BE:E1:FA:C2:64:B8:2F:67:CD:DB:AA:48:72:3B:D1:D8:71
Certificate issuer: /CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
Certificate serial: 018CC9BC0AC82E18A3C1207DC1A45F4E841E
Authority key identifier: 22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/nEXKvuH6wmS4L2fN26pIcjvR2HE.roa
Signing time: Tue 02 Jan 2024 10:33:13 +0000
ROA not before: Tue 02 Jan 2024 10:33:13 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 47613
IP address blocks: 91.206.88.0/23 maxlen: 23
2a07:82c0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c9:bc:0a:c8:2e:18:a3:c1:20:7d:c1:a4:5f:4e:84:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=226a87216d7e3c59315f778b2c8f4a9ef478b93e
Validity
Not Before: Jan 2 10:33:13 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=9c45cabee1fac264b82f67cddbaa48723bd1d871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fe:41:48:03:0d:42:8f:ad:fd:04:0c:65:b7:
d8:03:a9:ca:64:48:01:48:c7:14:d4:cb:50:0a:f7:
63:f1:ed:46:31:d6:db:80:3c:8a:71:08:d6:28:6c:
7f:6e:cb:05:42:cf:2b:44:e0:20:94:f5:8f:28:9c:
42:f3:e3:ea:78:ad:bb:c6:18:31:82:2e:21:b8:60:
8c:d4:f3:db:19:8f:1e:83:71:06:35:58:76:b1:fb:
ac:3f:b5:db:fd:4f:15:23:ec:fe:6f:24:f3:45:6f:
31:55:d2:ef:5c:84:3e:a2:23:c0:a1:1c:f3:27:70:
2c:64:4c:42:b8:dd:a8:13:d3:a4:74:6b:29:0b:ca:
be:09:ec:68:1e:ec:e4:15:b1:20:f8:43:16:67:5f:
2a:27:be:96:fa:14:74:1e:79:dd:cd:43:2c:7b:ba:
8b:5e:5a:bb:47:38:50:54:4c:d2:e3:ee:e8:99:dc:
88:82:e4:d8:cf:5f:56:17:54:22:b8:b4:13:df:f1:
00:a3:41:55:4c:30:87:bc:87:01:da:91:11:ae:c7:
11:37:dd:fa:82:50:39:fd:7f:99:58:8c:e7:e4:be:
46:92:f5:62:78:e9:00:1e:4d:dd:42:8c:d3:9f:db:
f0:df:fe:4e:aa:bf:cb:b6:b8:6f:4e:d1:55:56:0c:
d4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:45:CA:BE:E1:FA:C2:64:B8:2F:67:CD:DB:AA:48:72:3B:D1:D8:71
X509v3 Authority Key Identifier:
keyid:22:6A:87:21:6D:7E:3C:59:31:5F:77:8B:2C:8F:4A:9E:F4:78:B9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImqHIW1-PFkxX3eLLI9KnvR4uT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/nEXKvuH6wmS4L2fN26pIcjvR2HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/021022-0b27-4b4e-ab32-c990003b24ca/1/ImqHIW1-PFkxX3eLLI9KnvR4uT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.206.88.0/23
IPv6:
2a07:82c0::/48
Signature Algorithm: sha256WithRSAEncryption
99:b5:4c:5b:a7:dc:7c:3f:6a:c6:7a:f4:2e:17:de:b2:1b:8f:
3c:4c:5e:d7:9b:d5:b8:c9:96:97:2d:d5:f4:39:ba:38:ed:46:
30:f6:33:b9:24:0b:f3:8f:46:35:3d:9f:2a:a6:ff:50:f1:26:
dd:8b:a0:bc:4e:74:03:31:37:00:50:7d:13:bb:64:91:5b:e0:
83:5b:b6:7e:fe:75:59:88:a1:54:57:a8:e4:a8:f3:ee:b6:a5:
05:22:8f:2a:fa:1e:6e:da:e5:5d:84:69:e9:0e:04:1e:e2:f7:
7d:42:17:7b:a5:9d:86:10:d2:b2:04:f3:f7:a4:63:c4:21:07:
e0:15:37:00:2b:4f:e3:0d:1f:e0:c7:e8:f7:c3:8e:04:45:15:
0e:27:d0:0a:92:d2:77:7b:27:41:42:ff:08:49:08:27:13:ee:
b2:bd:10:04:23:80:b9:b9:65:66:85:81:95:0e:40:e3:49:5c:
7d:1a:14:87:94:30:5b:ff:9f:4b:d0:5c:e8:32:c7:4b:41:ff:
b2:63:53:0e:fa:50:f5:1c:63:0f:7c:3e:38:ba:50:f2:3f:0e:
f5:86:fd:54:a2:ed:39:70:ea:2e:ed:bf:83:09:53:52:c1:51:
c9:5f:ae:b8:f6:86:fa:3c:c0:a9:12:23:4c:8d:0c:fd:dd:39:
44:00:57:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 25 21:25:55 2024 by rpki-client on console.sobornost.net