Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/PLFnFsip4j-sETB8PPQgrmVAohU.roa
File: PLFnFsip4j-sETB8PPQgrmVAohU.roa (raw, json)
Hash identifier: h6NOUcP49OYU6YMMiK3QVB4r4u8oK/zQN8Ei+4fsxfc=
Subject key identifier: 3C:B1:67:16:C8:A9:E2:3F:AC:11:30:7C:3C:F4:20:AE:65:40:A2:15
Certificate issuer: /CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Certificate serial: 019421442FB3BFC685E4A09C6E994D638EB2
Authority key identifier: 1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/PLFnFsip4j-sETB8PPQgrmVAohU.roa
Signing time: Wed 01 Jan 2025 09:48:24 +0000
ROA not before: Wed 01 Jan 2025 09:48:24 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212563
IP address blocks: 91.132.73.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:2f:b3:bf:c6:85:e4:a0:9c:6e:99:4d:63:8e:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c7b06bf41300dc4d30f3d0e180c9b95d2bcddff
Validity
Not Before: Jan 1 09:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3cb16716c8a9e23fac11307c3cf420ae6540a215
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ab:51:d7:0e:27:b5:62:d0:e2:10:de:f7:31:
13:47:5d:11:6a:a3:69:d6:32:ac:ca:9f:be:92:6c:
94:e4:f9:a1:24:fb:cb:88:e7:10:db:f0:98:1f:1c:
60:52:ee:1d:c6:08:13:10:f7:04:46:91:4d:cc:94:
3f:33:a7:97:f1:4b:3f:bf:9a:6d:2a:0b:cb:58:82:
17:74:69:48:ea:a4:60:91:4d:2c:2d:66:21:04:22:
1f:db:e7:d5:e6:74:22:3f:a6:fb:2c:e4:9c:6a:59:
73:d1:75:0b:e3:88:ee:2d:0f:cb:90:9e:cd:aa:44:
26:f1:46:a7:9e:51:e8:aa:75:6c:ef:9a:ad:68:28:
35:e0:7f:93:85:59:fe:8e:00:f2:b1:72:5c:80:97:
09:f8:b6:73:8c:29:43:90:bd:d4:4b:8f:70:7f:23:
91:fa:cf:18:70:8a:2e:5b:f8:9e:f7:2c:2b:f8:c2:
15:40:d4:d5:e1:0a:80:ad:27:b6:38:1f:88:0d:a3:
94:ac:65:b0:62:d7:18:21:d6:f6:4e:74:72:1f:8f:
bc:3a:99:66:78:46:0f:26:d4:b3:91:71:b7:2d:13:
2a:fb:69:e4:1e:32:2b:c9:1b:53:84:82:c9:29:5b:
4d:c2:d9:af:da:4c:92:29:42:4f:51:92:5f:71:80:
3b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:B1:67:16:C8:A9:E2:3F:AC:11:30:7C:3C:F4:20:AE:65:40:A2:15
X509v3 Authority Key Identifier:
keyid:1C:7B:06:BF:41:30:0D:C4:D3:0F:3D:0E:18:0C:9B:95:D2:BC:DD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HHsGv0EwDcTTDz0OGAybldK83f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/PLFnFsip4j-sETB8PPQgrmVAohU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/702b28-e158-40c0-8330-24fddc6d147b/1/HHsGv0EwDcTTDz0OGAybldK83f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.73.0/24
Signature Algorithm: sha256WithRSAEncryption
08:2f:66:38:f1:54:1a:15:dc:b8:26:4c:ad:b8:35:59:f9:9d:
6b:7f:5e:91:44:08:9b:79:44:0a:07:b1:d5:e4:88:88:7a:36:
a0:7c:7d:58:3d:24:a3:3b:b5:d9:46:51:3f:1e:7b:fa:e7:f3:
05:25:48:7b:25:ea:76:43:5c:c6:33:59:24:45:f9:57:f0:57:
f4:4f:98:8b:29:f1:60:67:7c:f4:80:5f:29:fd:b3:dc:5d:4e:
66:b2:76:06:05:e6:ed:cf:4f:1a:51:88:c0:b3:f7:1c:36:3b:
43:dd:2f:7a:59:79:31:57:6c:11:7f:a8:72:28:4b:cd:43:32:
82:0c:d7:d4:52:e3:59:43:d0:e5:8f:b1:f2:fb:49:74:65:ce:
a7:6d:a4:e7:15:32:17:6f:7b:3d:3b:96:3f:e5:66:c8:7b:d4:
6e:2c:c2:c5:32:27:8e:63:ed:46:31:e9:dd:3b:ef:45:6b:01:
a7:48:d1:db:06:0c:e7:e0:82:c0:bc:96:0a:7d:46:49:04:c9:
d7:69:18:52:12:56:e5:06:27:46:40:55:e2:56:8c:70:00:96:
80:e4:31:b7:7a:31:d1:c6:68:d5:23:36:63:aa:4b:e3:61:8a:
aa:ef:16:d9:b6:12:1e:96:f7:e8:de:8a:c6:bb:5e:34:54:f4:
ad:f7:79:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:03:13 2025 by rpki-client