Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/gi2zaUr2ngLXfM8NV7jNPdt_PFI.roa
File: gi2zaUr2ngLXfM8NV7jNPdt_PFI.roa (raw, json)
Hash identifier: pPPLz9b8ntu+6vKYV+GHcDLfS03p/6Pt+aGjIk5ADdw=
Subject key identifier: 82:2D:B3:69:4A:F6:9E:02:D7:7C:CF:0D:57:B8:CD:3D:DB:7F:3C:52
Certificate issuer: /CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Certificate serial: 01941FFA12466794C529CA5FE4EBDF3A0E6D
Authority key identifier: 84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/gi2zaUr2ngLXfM8NV7jNPdt_PFI.roa
Signing time: Wed 01 Jan 2025 03:47:49 +0000
ROA not before: Wed 01 Jan 2025 03:47:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203190
IP address blocks: 91.216.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:12:46:67:94:c5:29:ca:5f:e4:eb:df:3a:0e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844a1791cb07f1d86123c63dc3adcfd754db101b
Validity
Not Before: Jan 1 03:47:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=822db3694af69e02d77ccf0d57b8cd3ddb7f3c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:01:52:46:17:07:d3:bc:43:83:61:0e:09:9c:
ac:59:39:ed:0a:68:5c:3a:ce:a6:fa:c0:6a:92:c0:
f2:ce:33:2b:f1:f8:de:d2:65:40:7b:7a:39:d3:90:
4e:67:ee:ae:00:bb:fe:f3:8f:d6:85:75:1d:a2:fd:
f9:c3:3c:4d:e5:7d:66:35:79:36:89:1a:36:80:7a:
9f:d2:fe:56:56:02:21:c4:8b:f9:3d:68:d0:fa:e9:
21:71:3c:e1:80:fc:34:c8:1c:65:4d:f1:af:d2:5f:
4c:ab:a6:3a:0f:eb:51:69:cf:62:96:e2:db:db:d1:
54:91:d7:c3:b5:ad:8c:a7:94:8d:80:a1:cd:97:df:
53:5e:24:b4:44:89:ec:22:c4:ea:5a:3f:bf:19:34:
cc:e3:6e:d5:71:26:3d:07:a2:72:6a:aa:7a:bf:4f:
ee:8e:86:e7:7c:2c:e0:86:0a:95:c8:51:99:55:6c:
2e:e5:9b:95:36:4a:6e:9c:e5:23:88:c0:c8:51:14:
8e:5c:19:64:a2:f7:3d:c7:33:18:9a:cd:12:b6:0e:
c1:37:83:8a:6f:39:2b:54:26:ea:b7:8e:6d:15:9e:
63:2f:75:ff:e4:f2:46:53:fa:7e:45:d9:35:2a:32:
71:2b:86:be:88:59:8f:68:f6:93:85:4b:f1:78:9d:
52:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:2D:B3:69:4A:F6:9E:02:D7:7C:CF:0D:57:B8:CD:3D:DB:7F:3C:52
X509v3 Authority Key Identifier:
keyid:84:4A:17:91:CB:07:F1:D8:61:23:C6:3D:C3:AD:CF:D7:54:DB:10:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hEoXkcsH8dhhI8Y9w63P11TbEBs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/gi2zaUr2ngLXfM8NV7jNPdt_PFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/f1370a-57ca-46a0-8af4-78ba6dc50086/1/hEoXkcsH8dhhI8Y9w63P11TbEBs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.3.0/24
Signature Algorithm: sha256WithRSAEncryption
37:70:0c:09:8e:6a:bd:92:45:0f:50:f7:ff:ad:17:d5:2a:1f:
8a:f5:97:82:de:77:92:1b:41:63:fc:11:bf:a6:da:35:ce:9e:
81:19:c0:82:ad:a5:b3:43:ca:5c:84:8a:e6:da:89:2c:21:86:
c2:09:1e:d6:b8:9d:23:3e:6a:81:88:dd:b5:18:27:af:f1:e3:
0c:a7:51:46:e8:c5:81:77:0f:fe:6d:58:0c:4a:0c:4c:67:29:
35:f3:d0:79:2c:fb:65:e4:5e:16:ce:c0:a2:51:77:aa:86:e4:
4c:34:06:9b:19:e6:6d:af:5e:7a:5b:c4:79:8a:7e:db:7b:51:
83:0c:75:24:b2:c7:66:08:6f:38:f9:40:42:dc:22:b3:b0:e1:
0c:01:d6:13:3d:6d:2d:32:ea:27:4e:de:4c:09:75:b2:70:03:
ca:f2:40:5a:f3:c9:a9:df:c7:46:ed:d3:a4:e8:75:71:41:3e:
d6:37:a4:91:42:8c:71:d8:77:a5:1d:54:de:9b:fc:54:1f:d0:
9a:30:4a:20:8e:3c:b0:7c:df:27:a8:ce:a9:fa:fa:14:24:36:
03:88:09:f8:cf:e8:7d:42:67:8f:71:f0:c5:77:6c:94:cd:00:
70:ef:96:2d:8a:90:a2:9b:0a:2b:1c:75:b3:ab:a6:2a:47:05:
96:3b:4d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:50:35 2025 by rpki-client