Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4b9a83-cea4-4399-859d-7d9a5bf6e1b1/1/pFRSrTEv56-im6XbAsmzuxKFy8o.roa
File: pFRSrTEv56-im6XbAsmzuxKFy8o.roa (raw, json)
Hash identifier: ayrg4ugG+Fw2cZDvzLwR+kMwn/G81Pmzhp2mPd4cVck=
Subject key identifier: A4:54:52:AD:31:2F:E7:AF:A2:9B:A5:DB:02:C9:B3:BB:12:85:CB:CA
Certificate issuer: /CN=a1be72d95f9374a94165b8ab6f7e499f2bd17a38
Certificate serial: 170DDFB0
Authority key identifier: A1:BE:72:D9:5F:93:74:A9:41:65:B8:AB:6F:7E:49:9F:2B:D1:7A:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ob5y2V-TdKlBZbirb35JnyvRejg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4b9a83-cea4-4399-859d-7d9a5bf6e1b1/1/pFRSrTEv56-im6XbAsmzuxKFy8o.roa
Signing time: Sat 01 Jan 2022 00:54:25 +0000
ROA not before: Sat 01 Jan 2022 00:54:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 19905
IP address blocks: 91.188.192.0/22 maxlen: 24
217.68.208.0/20 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 386785200 (0x170ddfb0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1be72d95f9374a94165b8ab6f7e499f2bd17a38
Validity
Not Before: Jan 1 00:54:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a45452ad312fe7afa29ba5db02c9b3bb1285cbca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:d9:f4:23:47:f4:88:c4:ab:e1:a8:cd:71:
d6:e9:e8:5e:51:c9:4e:af:dd:32:82:25:78:1f:85:
c2:ac:0d:31:69:f8:0a:89:d2:c2:02:3c:6f:36:45:
2f:2d:6b:a8:60:d6:c4:16:b6:e4:c3:3e:2c:bc:ff:
c9:2c:91:86:06:47:00:bf:b3:28:fe:9a:93:87:40:
29:95:34:ce:d9:bd:27:d1:cd:28:83:16:b9:2c:16:
e6:b6:62:57:82:8a:6a:92:ff:ac:fd:a8:4d:37:de:
91:04:33:8b:a8:1f:8b:c1:51:a7:a9:0a:37:7f:ea:
c8:d0:2f:9a:c7:3c:3c:f8:e9:e2:82:ec:13:3f:74:
31:a0:eb:4e:69:07:00:16:84:43:4b:99:b0:e7:91:
3d:ab:ac:de:83:e4:64:1b:68:04:e8:6e:bc:21:0a:
c1:c9:4d:e6:ff:8e:7d:33:9d:09:d1:d2:06:95:e0:
c0:30:4d:ef:fa:1f:e8:77:ea:21:79:ee:ff:6e:65:
4a:62:cc:c1:ba:3c:80:df:ef:9b:6b:fa:5d:a7:06:
6c:94:ee:4d:33:58:48:b9:33:07:f3:6b:b7:45:f4:
81:6d:26:19:40:5f:4b:55:5f:69:5a:87:b4:fb:c9:
9f:38:56:db:fb:f7:00:f5:e9:12:1f:bf:20:fb:03:
7c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:54:52:AD:31:2F:E7:AF:A2:9B:A5:DB:02:C9:B3:BB:12:85:CB:CA
X509v3 Authority Key Identifier:
keyid:A1:BE:72:D9:5F:93:74:A9:41:65:B8:AB:6F:7E:49:9F:2B:D1:7A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ob5y2V-TdKlBZbirb35JnyvRejg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4b9a83-cea4-4399-859d-7d9a5bf6e1b1/1/pFRSrTEv56-im6XbAsmzuxKFy8o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4b9a83-cea4-4399-859d-7d9a5bf6e1b1/1/ob5y2V-TdKlBZbirb35JnyvRejg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.188.192.0/22
217.68.208.0/20
Signature Algorithm: sha256WithRSAEncryption
6d:d8:24:d1:a5:e4:94:7c:29:e2:ac:f4:b9:cc:d7:48:24:9d:
5f:79:16:16:0b:c0:9d:37:e3:db:24:8b:82:89:cf:8f:3c:e8:
7f:61:05:48:a2:50:2b:28:97:5a:fa:02:2b:11:de:a7:89:70:
d7:94:af:03:a1:14:9e:05:02:4a:73:d5:21:d7:ae:4a:c7:8b:
8e:ae:c9:cd:f6:ad:d5:6b:ff:ed:62:0d:d3:17:38:7d:be:39:
66:e7:11:a0:15:28:49:8f:ee:17:86:a0:27:5f:35:b7:63:b2:
14:2e:d8:c2:4f:1a:54:7d:5e:36:10:31:76:60:52:b9:44:09:
c9:5e:51:ad:23:4e:ac:00:01:cc:25:3c:93:01:5a:03:80:f2:
fc:cf:ca:1f:db:56:90:5e:96:cc:c5:96:9f:ac:af:c3:52:3f:
34:ed:4d:9b:18:0f:a0:97:0e:50:00:23:34:65:3a:25:2c:c9:
13:3a:af:bc:eb:10:9c:a7:63:9f:51:b0:a7:50:5b:7a:60:4b:
89:7d:d6:fa:d5:7a:40:d9:a5:5f:a1:1f:76:e7:31:36:35:d1:
ca:77:72:8b:f8:04:7e:c1:ed:c8:46:93:38:6b:35:31:a4:8d:
a0:a2:1d:36:3b:e1:95:f3:3b:ae:1b:2c:60:d2:a1:12:19:07:
05:3a:78:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:09 2025 by rpki-client