Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/yQbKC99XDhYm8cHYtCzNNvOq7pA.roa
File: yQbKC99XDhYm8cHYtCzNNvOq7pA.roa (raw, json)
Hash identifier: RfdjXnuMOAkekc3w4VyM+j8sngFlhqDHkrg6JoAkaVA=
Subject key identifier: C9:06:CA:0B:DF:57:0E:16:26:F1:C1:D8:B4:2C:CD:36:F3:AA:EE:90
Certificate issuer: /CN=3d4c79394062376bca63a63a0bf973992a9f80a2
Certificate serial: 01941F8CA8E45B79222645DF705744EE5A66
Authority key identifier: 3D:4C:79:39:40:62:37:6B:CA:63:A6:3A:0B:F9:73:99:2A:9F:80:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/yQbKC99XDhYm8cHYtCzNNvOq7pA.roa
Signing time: Wed 01 Jan 2025 01:48:19 +0000
ROA not before: Wed 01 Jan 2025 01:48:19 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 198782
IP address blocks: 91.239.61.0/24 maxlen: 24
91.239.61.0/25 maxlen: 25
91.239.61.128/25 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a8:e4:5b:79:22:26:45:df:70:57:44:ee:5a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d4c79394062376bca63a63a0bf973992a9f80a2
Validity
Not Before: Jan 1 01:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c906ca0bdf570e1626f1c1d8b42ccd36f3aaee90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:81:aa:b3:03:f7:d8:89:76:b7:cd:2f:05:85:
eb:ab:c8:d5:ba:d1:89:4e:a2:1f:84:74:71:6b:cb:
04:7b:b6:88:fc:54:5b:7b:91:36:87:1e:10:a0:82:
4b:eb:5f:9c:6f:a0:b0:48:c5:c4:d3:3b:63:ab:55:
ae:76:cd:55:f1:b1:1b:b1:eb:7f:91:ba:06:dc:ad:
87:75:41:ac:35:1b:e0:ea:8a:48:cc:3e:20:b0:06:
f3:20:4e:ad:48:aa:35:fe:69:05:10:1e:e0:b6:15:
64:82:50:0d:a7:4d:3d:76:9b:cc:3d:fe:0d:50:4e:
2f:79:49:0e:90:0e:1a:6a:ce:07:87:70:a2:31:9e:
ad:40:9e:99:da:b1:f7:ca:ec:2b:8c:c7:ec:fc:7f:
49:8a:3c:b6:29:4f:eb:28:f3:cd:56:f4:7b:4f:24:
9c:31:7e:0b:c5:53:48:47:48:17:c8:a5:a2:85:02:
dc:5f:7a:d2:7c:e8:5b:00:2f:61:38:d7:3e:4f:a0:
16:00:48:8c:8a:69:19:b1:b6:9b:51:54:80:b1:66:
b9:74:4e:9c:8a:28:c8:ca:db:84:cd:b6:32:2d:9b:
53:01:87:72:21:0f:70:e1:f4:a5:7e:5d:5e:72:6f:
07:dd:ed:84:5b:c8:1c:8f:42:64:11:b2:0f:24:21:
d9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:06:CA:0B:DF:57:0E:16:26:F1:C1:D8:B4:2C:CD:36:F3:AA:EE:90
X509v3 Authority Key Identifier:
keyid:3D:4C:79:39:40:62:37:6B:CA:63:A6:3A:0B:F9:73:99:2A:9F:80:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/yQbKC99XDhYm8cHYtCzNNvOq7pA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/0a8651-62ec-49f4-bde0-155c75a45c27/1/PUx5OUBiN2vKY6Y6C_lzmSqfgKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.61.0/24
Signature Algorithm: sha256WithRSAEncryption
42:95:c5:94:e4:26:51:4d:33:a3:c3:7c:ef:7e:00:8e:a4:9e:
c0:44:89:c1:5c:62:2d:13:f3:26:a1:b6:3a:92:3d:09:f7:93:
e5:fa:93:e7:40:40:be:85:26:e2:3b:36:48:e5:60:69:58:0b:
8e:bf:2b:1d:0f:d2:24:70:6a:80:ae:33:d1:91:21:6f:03:e3:
59:a2:08:4b:34:fc:d6:9b:a5:8b:63:0b:52:2f:0e:e6:70:b3:
53:0c:ab:32:0b:60:e2:80:4a:40:07:6a:24:dd:38:db:9d:8f:
45:75:59:d9:40:71:e1:b8:c5:fa:dd:b6:d9:4b:f1:22:49:d0:
8f:cb:22:c1:f1:8f:31:3e:05:ea:a2:ee:4a:6f:bc:95:12:4e:
ed:e0:05:11:bf:16:f7:22:1e:66:b0:79:02:e2:ae:5f:91:a8:
ee:a5:77:24:54:2a:d4:2a:c2:c1:3f:de:67:de:ba:78:4d:75:
aa:cb:fe:bc:65:fc:c0:d8:c5:07:5d:5b:b0:a5:34:98:de:ad:
92:e3:3b:de:61:ec:80:52:22:46:e0:53:06:4a:fd:d2:af:59:
04:01:16:0a:62:61:cc:50:d3:2c:98:d0:ee:32:87:c2:e9:d2:
8d:79:ad:bc:c5:1e:44:ad:ae:6e:b1:b6:be:b2:93:d1:49:e9:
d6:8f:82:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 12:35:55 2025 by rpki-client