Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/PSBx1Ap1dSVwu4S3zItuhXFXT84.roa
File: PSBx1Ap1dSVwu4S3zItuhXFXT84.roa (raw, json)
Hash identifier: BJW2moxRlz3fWDKj7aaF6fzBur3RzPQUthWd7EvMjfQ=
Subject key identifier: 3D:20:71:D4:0A:75:75:25:70:BB:84:B7:CC:8B:6E:85:71:57:4F:CE
Certificate issuer: /CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Certificate serial: 0194228DE24F53294F79B017F4CBE094B87D
Authority key identifier: 21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/PSBx1Ap1dSVwu4S3zItuhXFXT84.roa
Signing time: Wed 01 Jan 2025 15:48:31 +0000
ROA not before: Wed 01 Jan 2025 15:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212815
IP address blocks: 91.212.26.0/24 maxlen: 24
185.177.44.0/24 maxlen: 24
2a0a:2f80::/32 maxlen: 32
2a0a:2f81::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:e2:4f:53:29:4f:79:b0:17:f4:cb:e0:94:b8:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21cb2ac377fc603f95faecc54ac7d590f2cc319d
Validity
Not Before: Jan 1 15:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d2071d40a75752570bb84b7cc8b6e8571574fce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b7:23:64:9e:29:97:22:ef:0c:17:62:08:6e:
b6:44:07:73:7b:75:e9:fd:2f:0f:fb:73:34:f6:92:
3c:c8:d5:fb:f8:65:91:62:c5:ff:5b:6d:40:d7:d9:
b1:86:04:01:5a:2d:88:ca:96:af:f4:d8:1b:33:3c:
0f:f6:8b:d1:8e:ab:95:96:c7:fe:8b:fb:fb:4c:45:
ca:bc:a1:ff:a7:4d:3e:a3:a2:17:de:0d:93:7a:0b:
6f:84:24:15:e7:b8:e9:04:cf:07:a8:bb:c1:36:cb:
08:f7:13:cc:10:54:12:31:51:5b:bd:6f:a7:94:17:
1d:4a:43:75:5f:aa:61:c9:b9:61:4b:bb:c5:1a:9a:
a2:ec:ea:5c:ad:a9:1b:c5:1f:e9:26:9f:a8:8b:a0:
2e:8d:74:b1:49:b6:92:f9:fc:9c:46:d4:ad:b9:bb:
1f:2e:cd:12:04:52:f1:37:31:a2:2c:aa:f2:7e:a8:
2d:38:47:40:92:8c:1c:98:df:1d:27:ba:c6:b1:22:
42:fc:42:12:5e:95:6d:b3:82:26:e2:9b:8a:f7:fc:
22:b4:8a:d9:a3:bb:d3:f2:63:73:a6:4d:37:96:ab:
4a:f9:d1:0d:c5:a1:3c:0b:bf:ea:f0:d4:1c:1b:87:
6c:62:5f:74:9e:4c:49:08:9f:59:2d:aa:05:92:d0:
24:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:20:71:D4:0A:75:75:25:70:BB:84:B7:CC:8B:6E:85:71:57:4F:CE
X509v3 Authority Key Identifier:
keyid:21:CB:2A:C3:77:FC:60:3F:95:FA:EC:C5:4A:C7:D5:90:F2:CC:31:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/PSBx1Ap1dSVwu4S3zItuhXFXT84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/67c21d-0e92-4242-994e-fb40d6da2468/1/Icsqw3f8YD-V-uzFSsfVkPLMMZ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.26.0/24
185.177.44.0/24
IPv6:
2a0a:2f80::/31
Signature Algorithm: sha256WithRSAEncryption
2c:d6:eb:7b:6f:75:75:7e:5b:7e:d9:36:66:65:d9:23:dc:50:
45:0a:80:da:ef:2d:d2:db:16:3f:f2:2f:b2:7e:64:df:14:57:
66:1d:54:16:1c:29:2e:dd:f0:5d:1e:d9:0b:ad:71:e0:c6:56:
ed:a1:87:62:08:a9:78:34:e3:80:d5:ac:74:36:8f:7c:f8:47:
3f:9c:ac:cd:a0:0d:54:4f:fe:26:13:08:f8:84:84:b3:b0:48:
b7:35:c0:23:42:64:de:7c:8f:2c:02:ac:af:d2:56:ba:fa:4c:
70:ea:c7:7d:a2:82:ef:eb:8c:23:fc:0b:38:fc:14:f2:85:54:
5c:b3:3c:8a:07:43:6a:d7:47:80:3c:18:67:d3:ff:6f:06:bc:
57:57:85:ac:26:7b:c9:e7:27:e6:69:ec:11:68:ec:b1:76:3e:
eb:7d:27:03:b1:3c:3d:70:d9:c5:c8:be:c5:e4:01:77:23:b3:
8d:e5:39:39:ec:15:96:a0:bf:4f:c2:b6:3a:66:cc:3a:da:75:
3a:4f:eb:98:75:14:04:1b:24:4e:cc:a4:65:95:32:2d:f0:fe:
ac:72:62:c6:1b:8d:80:c7:a9:e4:e9:6c:e9:ee:a3:90:2f:bd:
5d:bb:c7:64:42:93:d1:29:fc:ca:d6:b5:41:5a:2f:6a:74:a1:
e8:87:f7:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:25:05 2025 by rpki-client