Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/PPydfwM1qrJ_5LEP2Lu7pEc74lg.roa
File: PPydfwM1qrJ_5LEP2Lu7pEc74lg.roa (raw, json)
Hash identifier: pMnth1QdrHrp1n0i0bRqhdBwVaon4su5sBWJ9WYdSts=
Subject key identifier: 3C:FC:9D:7F:03:35:AA:B2:7F:E4:B1:0F:D8:BB:BB:A4:47:3B:E2:58
Certificate issuer: /CN=e6502200a6e63f76397adb94dfd834c116809b9f
Certificate serial: 019425FC5D06471945476A107F55DA8EABB3
Authority key identifier: E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/PPydfwM1qrJ_5LEP2Lu7pEc74lg.roa
Signing time: Thu 02 Jan 2025 07:48:03 +0000
ROA not before: Thu 02 Jan 2025 07:48:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 39276
IP address blocks: 195.238.90.0/24 maxlen: 24
195.238.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:5d:06:47:19:45:47:6a:10:7f:55:da:8e:ab:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e6502200a6e63f76397adb94dfd834c116809b9f
Validity
Not Before: Jan 2 07:48:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cfc9d7f0335aab27fe4b10fd8bbbba4473be258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:5c:9c:44:8c:fb:ba:fe:49:cc:43:ce:0a:
4c:61:1a:23:91:ee:15:58:6e:00:ee:d3:b4:eb:51:
ba:d2:02:61:e6:f5:c0:4c:27:ef:04:b5:07:38:9a:
bf:9c:af:db:98:01:63:64:51:b8:d8:9d:6e:b1:c7:
d0:b1:28:e6:76:1a:af:ab:d0:2a:47:84:84:bb:6a:
57:7b:73:49:d6:42:ea:c4:bf:66:9f:d6:ab:8d:da:
27:19:dd:7f:b4:0d:07:45:e4:47:09:5b:71:17:11:
95:b5:39:23:15:a0:fd:7e:da:1d:41:6b:9e:62:8e:
30:af:00:c2:f9:5d:da:79:d3:da:a6:32:67:2b:a9:
f0:76:f3:ad:63:66:47:1e:69:15:09:44:55:6b:15:
19:12:da:8c:e0:ac:3e:51:80:83:0b:e9:4c:02:ce:
83:44:95:75:16:ec:79:51:9d:56:a3:99:50:c7:91:
0b:49:2c:27:43:6a:e9:9a:9a:6e:2e:79:20:2b:89:
92:f9:34:3b:06:78:11:b6:c2:a6:28:92:c3:5e:e0:
2f:92:ec:88:39:b0:e5:17:10:9d:75:3d:8c:e7:34:
c9:ee:e9:23:86:42:46:e7:42:e1:ec:90:09:95:bb:
1a:da:62:e0:76:53:6c:b0:09:6e:2d:ea:6a:0a:56:
05:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:FC:9D:7F:03:35:AA:B2:7F:E4:B1:0F:D8:BB:BB:A4:47:3B:E2:58
X509v3 Authority Key Identifier:
keyid:E6:50:22:00:A6:E6:3F:76:39:7A:DB:94:DF:D8:34:C1:16:80:9B:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5lAiAKbmP3Y5etuU39g0wRaAm58.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/PPydfwM1qrJ_5LEP2Lu7pEc74lg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/9ff602-b0bd-4c3f-af94-2fc34ad9dd47/1/5lAiAKbmP3Y5etuU39g0wRaAm58.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.90.0/23
Signature Algorithm: sha256WithRSAEncryption
64:ef:a1:be:79:84:b6:45:18:47:ed:64:4c:5b:c6:2a:eb:d2:
38:04:96:f8:8c:e5:e3:7d:85:97:cd:f6:33:2e:d0:17:bf:cb:
82:bb:34:fc:ac:d7:54:3e:c7:c6:3b:78:49:c5:ce:0f:2c:61:
f2:41:cd:b7:85:99:d8:62:b2:b6:8a:10:9c:ae:a1:c2:a2:7c:
37:4c:5f:0b:f0:b6:87:c7:77:22:fd:8c:14:89:9d:74:d7:22:
0b:35:fa:1d:69:6f:35:5d:5b:d5:c3:f4:2b:86:f4:36:6a:e0:
60:43:29:91:cd:e5:ac:cf:0d:9d:f2:54:b0:79:f4:36:f6:5a:
f0:76:3d:6b:2b:4f:42:72:fd:6a:4e:3e:f7:72:0e:ca:f3:79:
e1:12:2e:01:23:27:f6:f1:78:af:6f:de:b5:08:27:f6:9c:8b:
9d:1a:e9:09:ee:9d:d4:69:c2:1e:db:93:73:d5:ed:24:55:ac:
66:d5:c0:70:a8:5e:3f:09:bf:5b:e3:8c:62:32:7e:90:d0:be:
11:4d:01:b7:c8:7d:24:27:46:2b:12:46:20:b2:63:e9:8a:5e:
76:fd:76:b2:89:f1:d9:0c:46:ce:e8:a3:61:32:9b:d7:95:0c:
b7:7f:a8:f9:59:fc:7e:e4:70:fc:86:48:3e:47:6d:fd:1d:08:
11:40:f2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:50:25 2025 by rpki-client