Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/pHamM_FeTuziFQi2w75B0pezcGY.roa
File: pHamM_FeTuziFQi2w75B0pezcGY.roa (raw, json)
Hash identifier: YLgRRlx24P8L2COTLzTtp0xHAktWAujjPd4Z7/lgx3w=
Subject key identifier: A4:76:A6:33:F1:5E:4E:EC:E2:15:08:B6:C3:BE:41:D2:97:B3:70:66
Certificate issuer: /CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Certificate serial: 0194282590728DEEDF5DE8C977955BBC031D
Authority key identifier: 80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/pHamM_FeTuziFQi2w75B0pezcGY.roa
Signing time: Thu 02 Jan 2025 17:52:17 +0000
ROA not before: Thu 02 Jan 2025 17:52:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51859
IP address blocks: 91.185.199.0/24 maxlen: 24
91.185.218.0/23 maxlen: 24
91.185.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:90:72:8d:ee:df:5d:e8:c9:77:95:5b:bc:03:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80f9a24bd26cc8217518a11f598e6372025e8ae9
Validity
Not Before: Jan 2 17:52:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a476a633f15e4eece21508b6c3be41d297b37066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:4a:ae:b6:d7:7c:63:c9:9a:58:82:ca:ca:
3d:4d:d9:1f:d7:32:99:3d:42:ee:cb:20:43:67:13:
d2:9c:4f:ee:a1:a9:8f:0c:4e:42:a6:fc:bb:de:2b:
cd:1b:5a:c1:66:aa:a5:34:16:55:bd:47:b7:6f:36:
55:2c:62:9b:17:87:2e:89:68:cd:4b:14:2d:92:61:
fb:55:fb:30:72:26:f9:39:96:76:a2:d2:75:55:ca:
3e:8c:a1:98:88:ae:62:58:22:d8:42:91:71:27:bf:
eb:a7:ad:df:69:9b:6c:0d:e3:35:94:33:b6:0b:e0:
fc:19:98:84:22:c5:91:6a:0e:9a:30:3b:01:3b:0d:
fc:2a:02:db:95:0a:92:95:42:09:e5:d1:17:c0:fa:
0b:93:49:b0:c1:05:18:b1:22:9e:6d:4c:a0:2f:68:
c7:6d:a6:8d:75:b8:98:14:4f:e2:f8:50:fd:71:a8:
f5:b7:2f:8e:05:db:0c:13:c3:91:43:d3:35:60:e3:
bc:68:39:81:88:02:20:17:ee:aa:e5:17:57:33:65:
25:3e:f6:91:7f:a2:ed:52:1c:7e:d1:28:a4:fb:63:
07:3d:e6:3d:1d:ba:c8:db:18:22:74:d7:0b:a9:ee:
1c:b3:48:20:59:6a:07:df:6e:d7:2f:7a:46:d5:d8:
da:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:76:A6:33:F1:5E:4E:EC:E2:15:08:B6:C3:BE:41:D2:97:B3:70:66
X509v3 Authority Key Identifier:
keyid:80:F9:A2:4B:D2:6C:C8:21:75:18:A1:1F:59:8E:63:72:02:5E:8A:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPmiS9JsyCF1GKEfWY5jcgJeiuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/pHamM_FeTuziFQi2w75B0pezcGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/fb212a-7a76-42e2-8989-965529f20d11/1/gPmiS9JsyCF1GKEfWY5jcgJeiuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.185.199.0/24
91.185.218.0/23
91.185.223.0/24
Signature Algorithm: sha256WithRSAEncryption
05:30:29:2a:92:da:eb:00:7e:f3:55:fd:cd:4d:9c:1e:c2:27:
c7:41:16:35:23:06:80:8e:97:a6:cf:f1:6c:f8:39:7d:2a:25:
c1:b4:24:75:0e:92:38:3d:6d:1b:0c:f5:80:de:6b:a2:43:b6:
3d:c4:8c:26:90:97:c8:36:d8:ec:2d:27:e7:be:41:80:b1:a9:
89:8c:e3:5a:8c:a7:44:0c:ad:4e:b5:d1:32:f3:04:29:71:a3:
09:d2:c8:9d:e5:db:fb:5f:94:d7:05:b2:7a:f0:a5:8a:9e:31:
35:3a:a2:89:55:09:da:21:0c:14:5f:87:1e:1f:9c:d9:64:0f:
fa:1a:30:f1:a8:75:77:36:a2:da:fd:98:d1:54:e1:2b:06:33:
ce:06:2b:65:37:22:15:9b:6c:d2:ff:2f:72:7a:28:51:8d:78:
d3:01:cb:27:60:b0:e8:81:7b:a5:7b:cd:c0:ba:99:d8:b8:d3:
3e:61:3d:59:79:ac:93:76:02:62:37:cd:5d:ce:c5:e8:7b:ce:
a5:15:76:07:d5:d1:93:e9:22:2f:ed:89:d7:17:d7:b7:bc:ba:
3d:1b:0e:78:b6:f3:58:23:40:97:18:62:a7:13:3b:99:d0:09:
bb:e0:ac:22:6c:39:08:a4:31:8d:50:7c:b3:76:f2:13:a4:fa:
45:94:1e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:23:50 2025 by rpki-client