Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/b7aa06-924d-4f3e-94d7-6753f123d3c3/1/4PQG9N-sLTLspcuiEPuske5GJkY.roa
File: 4PQG9N-sLTLspcuiEPuske5GJkY.roa (raw, json)
Hash identifier: Ksv2ncr1xOD2vs1GuE7xgxVNqo0eCqxCjLkeWkwQm54=
Subject key identifier: E0:F4:06:F4:DF:AC:2D:32:EC:A5:CB:A2:10:FB:AC:91:EE:46:26:46
Certificate issuer: /CN=52fda220239aebdd4ab44c7c4fc25eca81d015fb
Certificate serial: A1E1F4
Authority key identifier: 52:FD:A2:20:23:9A:EB:DD:4A:B4:4C:7C:4F:C2:5E:CA:81:D0:15:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uv2iICOa691KtEx8T8JeyoHQFfs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/b7aa06-924d-4f3e-94d7-6753f123d3c3/1/4PQG9N-sLTLspcuiEPuske5GJkY.roa
Signing time: Sat 01 Jan 2022 01:52:49 +0000
ROA not before: Sat 01 Jan 2022 01:52:49 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 48031
IP address blocks: 91.247.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 10609140 (0xa1e1f4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52fda220239aebdd4ab44c7c4fc25eca81d015fb
Validity
Not Before: Jan 1 01:52:49 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=e0f406f4dfac2d32eca5cba210fbac91ee462646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:74:e7:9c:56:fc:b2:48:65:2b:a3:10:d5:62:
f6:38:0e:d7:8d:ef:6e:87:d2:3b:aa:56:88:44:e0:
50:7f:d3:95:f2:cf:9b:60:14:47:45:51:13:f3:27:
2f:c5:cb:a7:99:f2:d4:8b:68:13:6c:0d:1c:85:b1:
0c:57:c8:54:8f:7b:e7:72:96:1a:3c:26:a8:23:35:
62:b1:66:bf:ea:db:04:fd:59:c3:51:a1:db:14:56:
8c:db:b5:3a:86:c1:a2:07:40:6f:38:4b:63:97:a1:
a6:a4:7e:e5:9b:36:99:11:f4:fc:1f:7d:89:8b:cb:
56:95:af:dc:a9:ce:68:4f:67:ca:f5:88:79:92:1a:
b8:13:74:54:e6:27:ed:b6:e1:1d:36:56:3e:67:ff:
73:ba:a3:17:6e:96:c1:a3:18:9a:05:9b:b8:65:d0:
01:17:ff:ed:6c:7d:9d:07:b0:95:9d:5d:42:73:37:
c3:2e:e8:e6:bb:26:a0:ad:f5:12:5c:9a:22:d9:5f:
81:14:d7:46:79:91:67:6a:59:8c:48:d6:1c:7f:b0:
5a:c1:3e:f6:c0:c2:01:bd:f3:b3:16:47:98:63:bf:
1f:33:6d:b2:4d:74:1f:b9:99:6b:df:d5:57:f7:48:
f0:26:48:c1:77:0a:18:6d:98:4f:83:74:f8:4b:a0:
b5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F4:06:F4:DF:AC:2D:32:EC:A5:CB:A2:10:FB:AC:91:EE:46:26:46
X509v3 Authority Key Identifier:
keyid:52:FD:A2:20:23:9A:EB:DD:4A:B4:4C:7C:4F:C2:5E:CA:81:D0:15:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uv2iICOa691KtEx8T8JeyoHQFfs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b7aa06-924d-4f3e-94d7-6753f123d3c3/1/4PQG9N-sLTLspcuiEPuske5GJkY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/b7aa06-924d-4f3e-94d7-6753f123d3c3/1/Uv2iICOa691KtEx8T8JeyoHQFfs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.166.0/24
Signature Algorithm: sha256WithRSAEncryption
53:32:f5:7a:31:41:2f:53:80:18:fa:94:1d:45:b3:43:54:b0:
16:4d:47:04:82:44:62:09:30:aa:a2:f9:7f:1e:11:08:71:cd:
13:33:2d:de:3f:44:1d:a9:7c:f1:ad:a4:59:25:58:2e:97:95:
1e:bb:0a:b1:c7:d3:9f:6b:6f:72:8a:96:d1:aa:03:7b:88:1e:
44:77:b5:5c:c2:cd:0e:5b:fb:b2:fe:43:0d:3b:05:49:0b:14:
a5:0b:f3:3e:e3:65:10:28:9a:f9:c9:a3:93:cf:f9:f3:d8:f5:
b6:66:f6:e6:42:82:38:06:ad:84:17:ea:e7:3c:c2:5b:4e:a7:
b1:ec:50:1f:ec:20:38:e8:28:be:bb:2a:bd:ef:dd:dc:71:8c:
e0:6a:8e:00:a6:af:92:17:6d:7e:79:08:29:ba:97:27:6b:11:
95:d3:ee:d5:49:97:58:ad:e7:5a:56:5e:cc:ed:d0:4f:ac:1c:
8a:15:9a:48:8d:26:e9:c9:95:2d:6d:4a:7b:4d:3b:61:30:6f:
ea:1d:eb:67:11:16:ff:f3:ab:5a:4e:53:d1:4c:4e:24:40:c2:
7c:d8:aa:f9:49:07:e5:1a:20:62:19:71:cc:8e:b3:30:50:6e:
0e:e7:45:8d:87:c1:79:22:82:b5:e8:c3:7e:b5:50:6e:00:66:
e2:6c:72:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:10:14 2025 by rpki-client