Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/PEwxPdB6P9-fHsAmwvyuo7ZfwVI.roa
File: PEwxPdB6P9-fHsAmwvyuo7ZfwVI.roa (raw, json)
Hash identifier: k3hUOjQgVbOKq48GDfFwGvSo/0p3jpkb/GJPXoQYhJg=
Subject key identifier: 3C:4C:31:3D:D0:7A:3F:DF:9F:1E:C0:26:C2:FC:AE:A3:B6:5F:C1:52
Certificate issuer: /CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Certificate serial: 0385CA5D
Authority key identifier: 0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/PEwxPdB6P9-fHsAmwvyuo7ZfwVI.roa
Signing time: Sat 01 Jan 2022 07:01:51 +0000
ROA not before: Sat 01 Jan 2022 07:01:51 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 60893
IP address blocks: 91.132.240.0/22 maxlen: 24
91.132.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59099741 (0x385ca5d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0adcf62c6b5411139a5d1309dd9ed926f4314320
Validity
Not Before: Jan 1 07:01:51 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3c4c313dd07a3fdf9f1ec026c2fcaea3b65fc152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f5:22:2d:c7:5e:c1:12:42:57:61:cf:b2:80:
f9:dd:df:9c:dc:eb:3a:29:90:8c:ba:8e:da:7b:66:
4a:14:3c:75:7c:fd:0b:8c:a0:34:06:ea:c3:5d:f8:
63:5c:83:b4:9d:ac:dc:2a:5c:e7:b0:fa:0c:2f:17:
a9:4c:99:38:0a:af:37:62:6a:09:cd:2a:85:fe:e4:
d8:ac:c8:6f:30:d8:74:9a:0c:39:a2:d6:28:ef:2c:
80:2c:19:51:53:cb:36:d6:18:f9:8b:cc:7c:68:97:
49:b4:20:3c:a2:99:8a:38:35:bc:19:3d:13:65:b3:
9d:30:34:6d:93:32:75:26:27:27:74:b9:5c:31:3c:
6a:6e:a1:f3:df:22:97:76:35:29:ff:49:b5:d5:13:
9e:c7:93:d8:89:1f:77:0c:cb:41:38:43:f3:ab:2f:
39:8b:e5:22:f0:95:d5:31:cd:49:ba:52:c3:96:4f:
f6:39:52:7a:f8:bf:b7:af:17:f6:8d:58:fd:da:61:
eb:58:ee:22:1a:ad:59:e7:34:70:75:1c:cd:98:55:
a7:a5:fb:15:47:b0:ec:e1:5e:90:4d:e7:a6:b0:1f:
a4:5e:b3:0d:99:68:e9:40:e8:3b:67:95:32:9a:f4:
c0:df:f2:08:30:f3:28:49:e8:b7:8b:85:73:f7:26:
d5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4C:31:3D:D0:7A:3F:DF:9F:1E:C0:26:C2:FC:AE:A3:B6:5F:C1:52
X509v3 Authority Key Identifier:
keyid:0A:DC:F6:2C:6B:54:11:13:9A:5D:13:09:DD:9E:D9:26:F4:31:43:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/PEwxPdB6P9-fHsAmwvyuo7ZfwVI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/cc843e-60c7-47ac-823b-f8d6bd30cc19/1/Ctz2LGtUEROaXRMJ3Z7ZJvQxQyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.132.240.0/22
Signature Algorithm: sha256WithRSAEncryption
29:01:03:8f:1f:8c:ed:db:cb:66:3b:a8:5c:2b:f0:e5:b5:78:
c1:75:67:67:36:45:e1:14:7c:cf:24:29:0c:2b:28:d6:42:56:
e8:06:b9:50:bc:b4:a8:7a:aa:ed:ba:4a:44:a3:65:ea:8e:e3:
8c:28:1b:8c:42:d3:61:3c:82:bb:f7:7f:9c:05:39:76:69:78:
c7:ad:d5:15:6b:fc:33:8e:61:e1:1f:34:3e:ec:c6:b0:8a:52:
14:57:be:54:66:3b:c0:5d:73:3f:1b:ce:20:08:eb:81:4a:41:
91:b7:f7:c9:e1:27:bc:78:0f:91:25:42:9e:49:82:a3:19:2c:
a0:a2:b1:b9:8c:bb:d1:27:78:a5:32:e8:b5:ef:1f:39:3a:48:
6c:ed:1e:6b:0a:48:5d:92:66:82:39:ea:2d:bb:9b:40:2c:8c:
48:2b:fd:96:e5:99:77:c9:c6:af:9f:ee:1d:e9:3b:34:b7:c6:
ef:a1:cd:b2:38:85:1a:65:3e:31:46:5e:7f:a2:89:d3:a2:13:
84:08:43:37:4e:ba:0b:51:74:4c:32:13:3b:70:fa:2c:ed:2d:
92:4a:ef:20:d2:3c:95:10:97:83:d9:7d:b3:e6:41:1d:9f:f2:
01:90:cb:2e:e1:7b:06:c5:56:40:df:b1:4f:86:4c:43:70:26:
dd:43:0d:dc
-----BEGIN CERTIFICATE-----
MIIE7zCCA9egAwIBAgIEA4XKXTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygw
YWRjZjYyYzZiNTQxMTEzOWE1ZDEzMDlkZDllZDkyNmY0MzE0MzIwMB4XDTIyMDEw
MTA3MDE1MVoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoM2M0YzMxM2RkMDdh
M2ZkZjlmMWVjMDI2YzJmY2FlYTNiNjVmYzE1MjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBANL1Ii3HXsESQldhz7KA+d3fnNzrOimQjLqO2ntmShQ8dXz9
C4ygNAbqw134Y1yDtJ2s3Cpc57D6DC8XqUyZOAqvN2JqCc0qhf7k2KzIbzDYdJoM
OaLWKO8sgCwZUVPLNtYY+YvMfGiXSbQgPKKZijg1vBk9E2WznTA0bZMydSYnJ3S5
XDE8am6h898il3Y1Kf9JtdUTnseT2IkfdwzLQThD86svOYvlIvCV1THNSbpSw5ZP
9jlSevi/t68X9o1Y/dph61juIhqtWec0cHUczZhVp6X7FUew7OFekE3nprAfpF6z
DZlo6UDoO2eVMpr0wN/yCDDzKEnot4uFc/cm1eMCAwEAAaOCAgkwggIFMB0GA1Ud
DgQWBBQ8TDE90Ho/358ewCbC/K6jtl/BUjAfBgNVHSMEGDAWgBQK3PYsa1QRE5pd
Ewndntkm9DFDIDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L0N0ejJMR3RVRVJPYVhSTUozWjdaSnZReFF5QS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDQvY2M4NDNlLTYwYzctNDdhYy04MjNiLWY4ZDZiZDMwY2MxOS8x
L1BFd3hQZEI2UDktZkhzQW13dnl1bzdaZndWSS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQv
Y2M4NDNlLTYwYzctNDdhYy04MjNiLWY4ZDZiZDMwY2MxOS8xL0N0ejJMR3RVRVJP
YVhSTUozWjdaSnZReFF5QS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAluE8DANBgkqhkiG9w0BAQsFAAOC
AQEAKQEDjx+M7dvLZjuoXCvw5bV4wXVnZzZF4RR8zyQpDCso1kJW6Aa5ULy0qHqq
7bpKRKNl6o7jjCgbjELTYTyCu/d/nAU5dml4x63VFWv8M45h4R80PuzGsIpSFFe+
VGY7wF1zPxvOIAjrgUpBkbf3yeEnvHgPkSVCnkmCoxksoKKxuYy70Sd4pTLote8f
OTpIbO0eawpIXZJmgjnqLbubQCyMSCv9luWZd8nGr5/uHek7NLfG76HNsjiFGmU+
MUZef6KJ06IThAhDN066C1F0TDITO3D6LO0tkkrvINI8lRCXg9l9s+ZBHZ/yAZDL
LuF7BsVWQN+xT4ZMQ3Am3UMN3A==
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:15:30 2025 by rpki-client