Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/PRlKytZkTjriAH-NG_OlMTzVDwo.roa
File: PRlKytZkTjriAH-NG_OlMTzVDwo.roa (raw, json)
Hash identifier: eRnlm9BbP46I8vEYaJ0zyeFHD4utDXe9+V3mmd5r3zM=
Subject key identifier: 3D:19:4A:CA:D6:64:4E:3A:E2:00:7F:8D:1B:F3:A5:31:3C:D5:0F:0A
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 019422FB733A1D601915776FE721A3CD211C
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/PRlKytZkTjriAH-NG_OlMTzVDwo.roa
Signing time: Wed 01 Jan 2025 17:48:11 +0000
ROA not before: Wed 01 Jan 2025 17:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34665
IP address blocks: 91.188.245.0/24 maxlen: 24
176.119.143.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:73:3a:1d:60:19:15:77:6f:e7:21:a3:cd:21:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 17:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d194acad6644e3ae2007f8d1bf3a5313cd50f0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:64:22:f4:cf:19:7d:79:37:7f:f0:2e:55:9d:
e7:8c:b9:66:2b:f9:26:6f:96:18:df:9e:a0:e5:04:
4c:2f:d6:8b:b8:15:1c:41:7a:ba:f4:d6:59:97:43:
71:9f:09:9a:c8:1c:9a:3d:33:6f:81:62:4e:7b:1a:
d2:d5:16:73:f3:45:d3:dd:1c:a1:2c:25:45:64:f6:
4f:23:ef:55:c4:e5:5f:15:21:2a:a5:a7:be:ce:c6:
64:e1:a4:0b:6a:1f:9a:b7:fd:57:a7:21:f6:13:7e:
c8:dc:29:f0:3e:05:20:28:c5:00:df:ba:5e:47:f7:
c8:7d:89:e9:2e:d5:07:34:e3:6d:6c:fb:5e:ab:ab:
1c:6d:ed:ba:c6:dc:e1:bf:83:67:6e:89:78:9b:85:
e3:5b:2b:ae:71:53:e7:2f:01:5d:fd:76:2a:5c:b1:
ad:14:0b:df:b2:32:85:e4:97:cf:75:70:eb:10:e9:
d7:e4:ac:4a:ff:e7:09:68:f8:6a:31:57:43:c7:ad:
c0:ba:ee:33:d0:f8:ed:bd:54:5e:95:d3:a2:81:49:
ca:38:5d:fe:b6:f2:bb:7f:c5:8f:b0:4a:82:d5:9c:
d5:c1:84:e4:62:60:77:18:bb:22:09:50:3a:25:52:
9c:7e:c0:aa:52:ab:a1:bc:a2:5b:55:9d:6a:aa:c1:
05:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:19:4A:CA:D6:64:4E:3A:E2:00:7F:8D:1B:F3:A5:31:3C:D5:0F:0A
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/PRlKytZkTjriAH-NG_OlMTzVDwo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.245.0/24
176.119.143.0/24
Signature Algorithm: sha256WithRSAEncryption
07:44:c5:e7:6d:73:e8:50:0f:f2:91:82:4e:a0:62:5d:35:a8:
8d:1a:57:d2:6e:ae:a8:aa:8f:2f:d7:88:c3:be:52:38:08:bb:
2e:81:f8:35:48:5e:ab:46:ae:58:09:cd:fc:a6:4e:21:1c:67:
e4:68:25:4a:d4:05:c6:35:94:fa:79:b1:6e:16:88:3c:9a:e7:
79:ca:0d:f3:ce:ef:0d:aa:1d:a4:4c:11:26:21:83:46:18:0a:
69:a2:93:75:6f:52:be:d1:4e:33:b3:7b:17:81:b5:a3:55:1b:
86:0a:86:60:59:31:92:99:b2:f2:8e:77:ac:91:5c:cb:4a:c5:
b7:ad:19:f2:96:6b:06:81:bc:9c:cf:30:b8:35:0c:67:94:eb:
e6:01:c0:48:f4:d9:bb:ad:cc:86:f2:23:0a:12:4d:24:13:85:
35:f4:ba:51:fd:db:eb:44:5f:b7:05:c3:2c:8d:c9:f9:9f:8d:
0e:54:cb:e7:3b:14:8e:5d:e2:a4:f3:81:25:fd:ee:f4:54:a0:
5a:9f:06:0b:3f:d7:94:b5:82:48:d6:38:b8:fc:3f:6a:62:ee:
8a:81:25:e6:a4:5a:0e:50:b3:bf:08:81:19:4b:0e:5f:35:1a:
e8:6c:e4:6e:6e:a7:9b:6d:b9:da:1a:3e:bb:40:b6:67:a1:10:
7e:81:40:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:46:50 2025 by rpki-client