Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/P79z5YTtoWEv9LCPfIAUkH_6t6o.roa
File: P79z5YTtoWEv9LCPfIAUkH_6t6o.roa (raw, json)
Hash identifier: bkjECat6qqt16K0V047quWng6+v1DMCdWPWmzkArqVU=
Subject key identifier: 3F:BF:73:E5:84:ED:A1:61:2F:F4:B0:8F:7C:80:14:90:7F:FA:B7:AA
Certificate issuer: /CN=2ba38933358cf66cff3b6ce3f7bc2517fdd47421
Certificate serial: 019426D9E4FF9B096B7619BFC5A81E43C54B
Authority key identifier: 2B:A3:89:33:35:8C:F6:6C:FF:3B:6C:E3:F7:BC:25:17:FD:D4:74:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/P79z5YTtoWEv9LCPfIAUkH_6t6o.roa
Signing time: Thu 02 Jan 2025 11:50:01 +0000
ROA not before: Thu 02 Jan 2025 11:50:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57224
IP address blocks: 91.198.60.0/24 maxlen: 24
185.40.116.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:e4:ff:9b:09:6b:76:19:bf:c5:a8:1e:43:c5:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba38933358cf66cff3b6ce3f7bc2517fdd47421
Validity
Not Before: Jan 2 11:50:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fbf73e584eda1612ff4b08f7c8014907ffab7aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:eb:e7:9d:7f:28:68:57:d8:03:d8:70:21:1b:
c4:45:95:0d:92:65:97:3d:a4:c7:96:03:9a:0e:8f:
ff:6e:2b:cc:34:ab:f3:93:a5:ff:cc:63:5b:b3:d4:
78:4c:86:31:e1:89:7a:96:78:65:c0:76:24:70:fb:
45:cf:ee:7f:e6:f6:e3:fb:cd:07:85:4f:75:77:dd:
1f:db:25:03:b3:a0:5a:35:18:3d:52:e5:dd:9a:f6:
52:e9:45:3b:ce:06:fd:42:99:2d:d8:c3:df:37:29:
7c:b9:b8:1b:bf:c7:64:c1:79:27:86:eb:02:43:d0:
4b:9b:d5:87:64:7f:e6:0d:5f:38:c7:08:56:b9:b5:
eb:83:08:36:96:2d:29:f9:a8:f9:97:99:55:85:24:
f2:28:4f:17:1b:a4:24:d7:03:db:85:6a:fd:03:8f:
7e:89:bd:c9:52:e9:f9:a2:fb:1a:00:d7:cf:17:c4:
a6:6f:c2:20:4b:f1:c5:d2:b2:81:c0:ae:6b:6e:22:
b8:72:4f:57:42:5b:e6:ad:f0:0a:90:4b:66:7c:db:
e5:68:5a:1a:9f:6a:d3:b3:8c:29:dc:6f:ae:ee:c5:
61:7d:87:6b:0b:a6:0f:90:24:0b:64:cd:2b:4d:f6:
2d:b5:3b:3b:c3:b5:1a:05:85:d5:b3:8d:02:f0:d3:
50:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BF:73:E5:84:ED:A1:61:2F:F4:B0:8F:7C:80:14:90:7F:FA:B7:AA
X509v3 Authority Key Identifier:
keyid:2B:A3:89:33:35:8C:F6:6C:FF:3B:6C:E3:F7:BC:25:17:FD:D4:74:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6OJMzWM9mz_O2zj97wlF_3UdCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/P79z5YTtoWEv9LCPfIAUkH_6t6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/9856ee-699f-4fed-bb98-e06fd0cd3b77/1/K6OJMzWM9mz_O2zj97wlF_3UdCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.60.0/24
185.40.116.0/22
Signature Algorithm: sha256WithRSAEncryption
88:19:cd:e3:aa:a1:c4:e6:e1:85:90:2f:de:f7:65:aa:6c:62:
76:f8:94:3b:af:11:ab:08:00:3e:ea:d0:2d:15:fa:7c:d7:0c:
2d:cc:3c:00:f0:c0:71:18:b3:e9:b9:41:7d:1d:1f:62:7a:b9:
1f:36:7c:27:4b:bd:cd:ba:82:16:b8:a1:92:7b:8e:63:f9:69:
19:43:9f:8c:21:56:d6:e0:9c:b6:ce:cb:fb:da:b2:79:43:12:
d8:13:03:20:9c:a3:e5:b9:01:15:ad:8c:43:8c:ca:94:fa:6b:
82:00:dc:d8:e3:f3:8c:27:e9:1f:dd:00:77:68:d3:85:7d:77:
7b:0b:a6:f3:83:27:33:d1:8e:69:c5:6c:9f:fc:0a:44:75:3a:
97:a2:c1:ef:4a:3c:ed:fe:13:91:d9:c4:16:6c:27:9b:fe:96:
c6:87:15:9a:27:65:aa:9f:0e:8f:62:a3:20:9f:81:59:40:c6:
90:f3:1b:29:c7:f2:3c:af:88:e9:93:62:c8:a7:07:9e:b2:3f:
da:e1:44:8f:42:63:0b:cc:18:21:4e:44:3f:2f:9e:17:36:53:
0b:57:c2:25:ae:3f:70:a7:4e:2d:12:1c:3c:a7:6c:24:d6:46:
37:92:b5:3b:29:8c:ba:e5:b1:ce:62:4c:57:66:c9:75:33:a1:
1f:6c:5f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:50:03 2025 by rpki-client