Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Pp7lyfLi6Lq2OtSc1xsQ23XWPpY.roa
File: Pp7lyfLi6Lq2OtSc1xsQ23XWPpY.roa (raw, json)
Hash identifier: 4Af36PXDN9h4nVNJg+AUmHgAlVjrGGi1+YXnj9QtxAk=
Subject key identifier: 3E:9E:E5:C9:F2:E2:E8:BA:B6:3A:D4:9C:D7:1B:10:DB:75:D6:3E:96
Certificate issuer: /CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Certificate serial: 019422FB776C09AC97E0E089531B2A5527C3
Authority key identifier: CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Pp7lyfLi6Lq2OtSc1xsQ23XWPpY.roa
Signing time: Wed 01 Jan 2025 17:48:12 +0000
ROA not before: Wed 01 Jan 2025 17:48:12 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58061
IP address blocks: 91.243.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:77:6c:09:ac:97:e0:e0:89:53:1b:2a:55:27:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccd76159bfd9e337523ee930f3df111d6bae7306
Validity
Not Before: Jan 1 17:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e9ee5c9f2e2e8bab63ad49cd71b10db75d63e96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:56:7c:40:3b:4a:34:28:92:8b:ad:78:b1:8f:
eb:ab:1b:7b:13:b8:48:b9:d8:3e:3e:fe:10:cc:6c:
de:dd:f0:40:07:1f:62:cc:b0:a3:4e:a9:31:49:83:
c7:66:3a:c4:73:4d:4b:44:56:c5:ff:a3:5b:2f:dd:
2e:64:1d:23:c0:7d:be:d5:ca:0c:0e:46:23:c2:36:
21:02:54:92:de:28:42:b9:12:2e:23:47:bf:61:01:
b5:a2:c4:f6:94:f2:da:11:00:6b:09:6a:61:41:7b:
12:79:91:b0:d7:72:ee:2d:85:30:b1:b9:61:74:e5:
d2:f6:20:47:1a:91:9f:1d:25:ca:c9:7b:3a:50:4d:
97:99:cb:37:ed:63:43:fd:25:d3:73:62:c3:f2:9a:
14:b6:32:c0:b0:a1:a0:25:44:93:66:f0:c9:c4:9b:
fb:59:51:58:49:52:16:15:d1:6e:48:05:98:09:a9:
be:15:3c:32:56:33:a5:50:25:04:68:60:7e:bc:e4:
30:2a:9a:1c:02:ae:9c:53:fa:7d:93:20:9c:f2:e2:
d6:d9:f1:f8:55:9b:45:30:96:c9:fb:b0:df:b1:72:
68:fe:43:c5:08:9e:58:f3:95:cf:64:76:62:50:ae:
5a:2c:0c:c7:80:71:16:fd:f8:f4:8a:11:af:2a:38:
1c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:9E:E5:C9:F2:E2:E8:BA:B6:3A:D4:9C:D7:1B:10:DB:75:D6:3E:96
X509v3 Authority Key Identifier:
keyid:CC:D7:61:59:BF:D9:E3:37:52:3E:E9:30:F3:DF:11:1D:6B:AE:73:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zNdhWb_Z4zdSPukw898RHWuucwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/Pp7lyfLi6Lq2OtSc1xsQ23XWPpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f6ada1-7e8a-4b3e-b7e8-f8589f682691/1/zNdhWb_Z4zdSPukw898RHWuucwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.189.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:99:0a:d4:32:f3:e6:4f:0a:82:a5:0c:f9:3a:54:15:11:02:
92:67:2e:b0:40:84:9f:20:f9:d0:25:20:8f:6e:fe:03:28:56:
7b:62:31:80:a5:81:80:05:ff:1a:0d:1b:95:75:68:43:19:48:
0c:24:59:8c:0f:d9:96:b4:5d:11:51:da:b0:6b:b1:fc:50:4d:
0b:19:5f:18:ea:98:d7:39:63:30:3c:80:07:b2:a8:0a:f7:2a:
13:4a:a4:b0:1e:db:8f:5e:4d:f5:5d:b4:1f:7e:d8:61:68:02:
ac:6e:7d:c7:8c:92:ab:d7:bb:fe:a7:ec:43:e0:92:bc:fc:36:
2e:fb:59:54:88:11:32:bc:6a:30:e2:fe:51:d3:cb:d7:44:32:
cb:88:0a:ba:08:b0:39:89:9e:9a:fe:5d:97:71:21:48:23:bb:
27:29:8d:bd:00:8f:1d:90:cc:43:fd:82:b1:c4:91:b5:f1:8f:
27:d0:f1:29:ed:42:b4:e3:c8:23:f1:bd:01:b8:83:24:a1:bf:
c7:83:5e:e1:03:48:d6:11:97:f5:55:3e:69:57:f4:3c:de:a3:
4c:ae:9f:7d:ca:8a:7b:50:10:de:c9:24:c3:3d:b9:ab:1a:64:
34:2a:eb:cd:a3:1f:8e:c8:91:0a:e9:f9:c5:6c:55:3e:06:b6:
b7:a0:71:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:35:56 2025 by rpki-client