Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/pcaO9IUtzZyK8Co5EmCpCcfvONI.roa
File: pcaO9IUtzZyK8Co5EmCpCcfvONI.roa (raw, json)
Hash identifier: IIenPfWR2zkC41HP7odhhfKlMtF18hRjl9raKSYcubs=
Subject key identifier: A5:C6:8E:F4:85:2D:CD:9C:8A:F0:2A:39:12:60:A9:09:C7:EF:38:D2
Certificate issuer: /CN=e8534643ec4826b439417fdb3cb2c493e61f949e
Certificate serial: 019420D5A0F366C44A3F116F872940956A61
Authority key identifier: E8:53:46:43:EC:48:26:B4:39:41:7F:DB:3C:B2:C4:93:E6:1F:94:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/pcaO9IUtzZyK8Co5EmCpCcfvONI.roa
Signing time: Wed 01 Jan 2025 07:47:38 +0000
ROA not before: Wed 01 Jan 2025 07:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44622
IP address blocks: 91.225.252.0/24 maxlen: 24
91.225.253.0/24 maxlen: 24
91.225.254.0/24 maxlen: 24
91.225.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:a0:f3:66:c4:4a:3f:11:6f:87:29:40:95:6a:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e8534643ec4826b439417fdb3cb2c493e61f949e
Validity
Not Before: Jan 1 07:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a5c68ef4852dcd9c8af02a391260a909c7ef38d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ad:40:7e:c2:09:94:2e:54:76:4c:b0:df:68:
39:eb:7e:48:b9:4f:ff:cb:3e:d1:b1:a4:a5:60:fd:
60:5d:6b:e8:6b:f8:cb:7b:5f:bd:40:9b:cc:03:e1:
5a:f4:d4:5e:3b:d6:5f:f7:78:d9:3f:38:60:78:fa:
33:40:30:a3:0e:51:9f:7d:76:f2:3f:4a:73:fd:98:
ca:f9:15:ff:f3:1a:48:2c:03:47:80:8a:37:90:fb:
de:d8:00:5a:e8:89:fe:e6:b4:0b:bf:47:a8:0f:56:
52:a0:d9:9a:63:d8:58:a0:ef:31:c0:02:ee:ba:12:
a5:5c:77:69:92:3d:8f:26:2a:5c:8c:45:99:0e:39:
78:7c:3b:ec:fa:06:27:33:f0:28:d7:5f:13:cf:3e:
83:39:10:2f:dc:a5:4b:73:8e:92:e6:68:15:c8:4e:
ee:eb:bd:f6:02:4b:64:43:1c:fd:93:47:ae:18:20:
b7:88:65:31:56:24:44:47:bc:57:0d:14:7f:8f:7a:
6e:4d:4c:89:c2:02:3f:7d:fb:08:11:45:de:69:87:
a9:4e:58:31:11:d9:68:e8:0c:b6:85:8f:11:b6:88:
c8:15:32:f3:58:97:af:b7:95:de:07:26:ea:0f:5a:
ab:04:1a:a2:c2:63:cc:a1:a4:b9:3b:f6:ec:2c:99:
e5:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C6:8E:F4:85:2D:CD:9C:8A:F0:2A:39:12:60:A9:09:C7:EF:38:D2
X509v3 Authority Key Identifier:
keyid:E8:53:46:43:EC:48:26:B4:39:41:7F:DB:3C:B2:C4:93:E6:1F:94:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/pcaO9IUtzZyK8Co5EmCpCcfvONI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/83cae6-5bcb-48c4-8ebd-29de48ee00b9/1/6FNGQ-xIJrQ5QX_bPLLEk-YflJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.252.0/22
Signature Algorithm: sha256WithRSAEncryption
30:a5:c6:19:d9:ae:6d:a9:7a:7b:28:3a:c4:86:86:b8:17:93:
d7:1a:5d:b1:cf:29:5a:7b:10:ff:8f:75:39:9d:b1:21:d2:d9:
30:92:59:d3:6f:7c:7e:ae:9d:16:35:45:50:be:09:96:2a:c1:
89:b2:96:a2:c0:38:c4:67:7f:4d:3f:66:8a:c1:c3:09:43:2d:
ef:33:d6:63:95:8f:b2:69:b4:50:31:60:17:f2:69:ad:bb:df:
67:62:9e:91:72:c3:34:c4:9d:2b:3d:29:b5:8e:aa:0c:0a:36:
ea:5d:94:59:0f:eb:6d:77:b6:9a:f8:5b:b6:66:40:e5:a3:69:
6f:71:f4:4b:34:47:e4:15:46:1d:eb:10:e4:24:be:d7:94:48:
33:6a:dc:5f:94:a2:b9:0c:2d:c3:0f:9d:f8:a5:71:2f:02:ad:
b2:20:42:dc:d6:74:35:62:bc:49:19:59:c9:0e:d9:37:b8:b3:
53:65:96:c0:1c:fd:d5:de:9c:6f:6e:ac:f6:4a:10:9e:f1:a0:
35:ff:7c:62:6a:94:77:52:15:39:7e:fd:2d:a8:b3:56:04:b0:
6d:3d:78:25:61:8a:a9:72:76:1d:8d:c3:e2:40:94:31:4c:3d:
0c:c7:52:0e:4f:b2:6b:02:88:c2:d0:b4:95:f0:64:be:45:d4:
32:c9:6a:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 23:36:48 2025 by rpki-client