Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/P1xrsDj3N0ynN3JpUaE-Wz1pr18.roa
File: P1xrsDj3N0ynN3JpUaE-Wz1pr18.roa (raw, json)
Hash identifier: 2a4rEq7sBMFkU8u7ERMYmBP6mk4U8OKJ4g4s+l9cEDo=
Subject key identifier: 3F:5C:6B:B0:38:F7:37:4C:A7:37:72:69:51:A1:3E:5B:3D:69:AF:5F
Certificate issuer: /CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Certificate serial: 019422FB76ED33FE9E3146CB348CEA39E112
Authority key identifier: 85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/P1xrsDj3N0ynN3JpUaE-Wz1pr18.roa
Signing time: Wed 01 Jan 2025 17:48:12 +0000
ROA not before: Wed 01 Jan 2025 17:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48031
IP address blocks: 91.213.8.0/24 maxlen: 24
194.15.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:76:ed:33:fe:9e:31:46:cb:34:8c:ea:39:e1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85dc9c55e1597e88564daf567e5a4665978c7b85
Validity
Not Before: Jan 1 17:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f5c6bb038f7374ca737726951a13e5b3d69af5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:6d:43:fc:9c:72:56:84:ac:d7:67:da:3d:20:
12:02:75:ed:66:33:75:ee:be:dc:3d:5c:0d:f4:34:
38:e5:0f:49:44:2e:ac:2d:cc:ce:cd:38:0b:4d:37:
42:aa:ea:63:6c:fb:ad:08:20:38:93:ca:4a:b8:c4:
ab:27:d4:74:84:c7:b5:13:a7:42:c0:9b:51:1c:d1:
f9:0d:2e:01:ab:55:9d:75:4f:2e:94:5a:a5:10:94:
84:66:90:b4:c6:eb:4e:77:f5:6d:09:73:5e:12:9f:
1a:b5:72:73:8e:5f:80:aa:fc:4d:58:08:f9:8d:eb:
98:7e:65:e8:c3:4b:f1:b4:3e:1a:3f:8a:3f:c0:ba:
f9:92:3e:0a:7b:72:fc:ec:8a:0c:40:83:b8:17:24:
09:1e:64:dd:cb:e5:7e:34:ce:d2:17:52:39:61:9a:
14:01:9d:e3:b6:f3:c5:3b:1c:a4:fa:19:d7:f8:1e:
1a:ac:6c:30:4d:56:38:b9:be:f4:2d:78:72:c3:88:
de:5f:d7:75:33:a6:d4:fb:2b:49:27:3c:16:38:61:
a0:9c:71:ce:98:dc:ff:ec:14:a8:9c:0a:70:ff:a9:
b0:74:75:d7:dd:ac:a6:79:dd:62:66:bc:52:7b:86:
ab:d0:3d:ab:c6:16:35:3b:4c:7d:28:c8:15:04:6a:
19:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:5C:6B:B0:38:F7:37:4C:A7:37:72:69:51:A1:3E:5B:3D:69:AF:5F
X509v3 Authority Key Identifier:
keyid:85:DC:9C:55:E1:59:7E:88:56:4D:AF:56:7E:5A:46:65:97:8C:7B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdycVeFZfohWTa9WflpGZZeMe4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/P1xrsDj3N0ynN3JpUaE-Wz1pr18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f07fbc-4c32-4d87-a429-86ea19d29163/1/hdycVeFZfohWTa9WflpGZZeMe4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.213.8.0/24
194.15.114.0/24
Signature Algorithm: sha256WithRSAEncryption
21:55:4a:10:1c:10:cb:7a:36:fc:15:d0:d2:7e:29:a6:b9:9b:
98:47:28:62:5a:b5:db:71:74:2c:63:76:9a:74:75:da:62:45:
22:ef:ca:52:11:90:58:b0:e5:35:ab:a4:65:a7:49:06:f5:d1:
8d:01:cf:e8:1b:8e:47:f6:1c:54:67:4d:62:12:8b:13:a8:01:
24:72:7c:be:01:44:8b:87:dc:20:a0:8b:fb:e4:54:ba:15:63:
70:c2:95:f7:2e:df:3a:b1:92:7a:ab:a8:04:e4:7a:5a:43:67:
2d:f9:7b:ba:67:b4:64:bc:5a:37:db:04:5c:b3:e0:20:19:c3:
c1:78:b0:91:54:42:18:42:d0:d2:e3:55:65:18:be:cf:b4:ef:
3b:82:ca:bd:1b:a8:19:52:dc:d3:d8:27:ca:fd:79:d8:10:6e:
1e:97:9c:8a:c2:65:26:99:41:c4:86:8a:f9:1b:31:d2:35:1c:
24:19:07:ca:57:40:0b:04:80:8e:e4:48:30:7c:48:bc:a1:79:
9d:a1:5c:b5:90:60:b5:c6:e0:37:43:66:fb:17:eb:7a:62:50:
0d:ff:e1:cd:58:fc:d0:ff:fc:05:f3:7a:e2:6b:75:4d:08:b5:
b6:89:bf:7f:fd:9d:4f:5c:5d:88:f7:a9:2d:29:f4:66:e9:c2:
e8:cc:ba:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 10:14:18 2025 by rpki-client