Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/pFvkRu_JKGZLy6NcoIKXWKZTEnU.roa
File: pFvkRu_JKGZLy6NcoIKXWKZTEnU.roa (raw, json)
Hash identifier: mNj8Y54BtSJY8AebZz3PDWql40sT8dgSAWakxPDPnGA=
Subject key identifier: A4:5B:E4:46:EF:C9:28:66:4B:CB:A3:5C:A0:82:97:58:A6:53:12:75
Certificate issuer: /CN=c94cb4226e6d24c1e0e9685788a5f9d594312cc0
Certificate serial: 01508F3E
Authority key identifier: C9:4C:B4:22:6E:6D:24:C1:E0:E9:68:57:88:A5:F9:D5:94:31:2C:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yUy0Im5tJMHg6WhXiKX51ZQxLMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/pFvkRu_JKGZLy6NcoIKXWKZTEnU.roa
Signing time: Sat 01 Jan 2022 13:01:44 +0000
ROA not before: Sat 01 Jan 2022 13:01:44 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 34665
IP address blocks: 194.176.118.0/24 maxlen: 24
91.195.124.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 22056766 (0x1508f3e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c94cb4226e6d24c1e0e9685788a5f9d594312cc0
Validity
Not Before: Jan 1 13:01:44 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=a45be446efc928664bcba35ca0829758a6531275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ab:17:5d:56:82:7e:d4:de:d9:7b:db:fd:ed:
0f:ba:6c:0c:7e:c8:54:a9:ce:0d:73:e2:aa:6f:8d:
59:7c:6c:68:4c:1e:d2:e4:fe:d8:f8:e5:4a:7c:e2:
b1:c4:b2:c7:aa:d3:84:02:3e:52:2f:dc:8a:61:d8:
3f:00:0b:9f:20:f5:74:e7:e8:ec:29:71:45:1e:a9:
88:4f:09:d3:4f:37:6a:a3:ed:76:d1:68:c7:43:a9:
81:97:e0:aa:aa:7c:5e:99:13:f2:35:bb:0b:6b:6f:
28:1e:91:cd:fb:47:47:91:fe:50:d1:37:68:aa:75:
04:11:e8:ac:c2:d1:a6:ae:d6:9a:46:56:8a:7b:cc:
41:04:e8:33:0e:df:3e:f3:99:00:ec:f6:51:2d:9d:
88:71:5d:25:40:fb:f9:4b:f3:55:ba:a3:3f:b5:3e:
c9:2c:2f:87:55:7f:93:6f:f3:52:8b:85:df:f4:6f:
50:a2:fc:a6:97:79:6d:3c:92:17:48:d4:bf:7f:81:
cb:c6:e6:c2:99:44:9d:2f:89:54:86:e1:ac:ec:93:
20:f6:1a:10:cc:93:0b:9d:4c:25:c9:08:f6:11:e5:
f4:57:10:74:26:93:4d:7c:8a:c7:2e:b7:0a:84:4a:
94:d5:27:bc:39:42:0e:9b:c2:a5:e2:af:03:d3:0d:
23:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5B:E4:46:EF:C9:28:66:4B:CB:A3:5C:A0:82:97:58:A6:53:12:75
X509v3 Authority Key Identifier:
keyid:C9:4C:B4:22:6E:6D:24:C1:E0:E9:68:57:88:A5:F9:D5:94:31:2C:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yUy0Im5tJMHg6WhXiKX51ZQxLMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/pFvkRu_JKGZLy6NcoIKXWKZTEnU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/fc19ea-cf80-4ce0-8e1b-0a955fa7d7b0/1/yUy0Im5tJMHg6WhXiKX51ZQxLMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.195.124.0/24
194.176.118.0/24
Signature Algorithm: sha256WithRSAEncryption
be:70:51:f6:16:67:55:c6:fb:3f:d0:b1:e3:fe:e3:c1:8b:bd:
41:52:4b:4f:a9:ac:92:0c:cc:51:6f:44:a7:b4:91:94:49:b6:
4f:f9:95:2c:c5:b6:82:cb:8d:dc:0b:e2:07:39:a6:6f:0e:d2:
85:1a:35:a1:89:65:1d:ca:c6:99:b1:ff:6f:84:13:cd:cb:37:
06:df:17:98:9d:df:26:92:ce:b4:58:14:6b:11:ae:77:1f:a8:
26:56:49:bd:6c:89:7f:8c:3c:10:aa:15:d9:70:17:6e:7c:8b:
e6:b5:8d:53:97:36:83:97:ef:f0:5b:13:96:d4:b0:3d:54:67:
a0:01:69:06:dd:b8:d9:b2:0a:06:60:3c:dd:6e:f7:e3:e2:b8:
e4:c4:b6:a0:61:f2:3b:f2:3e:f9:3a:39:ba:e0:7e:5d:78:a8:
63:4f:14:eb:aa:42:fc:ad:17:71:77:9d:ad:a4:84:6b:c1:e4:
1f:4f:74:cb:e3:c6:6b:e9:e2:ac:d0:91:45:db:e2:e8:98:d9:
29:7e:02:12:df:79:d7:f4:c3:9e:87:4a:c2:70:05:a3:c0:10:
70:d1:4c:73:a5:b1:f0:dd:bf:f2:a2:38:76:95:ee:ff:0b:83:
6b:37:71:5d:2d:1f:7a:2f:de:f6:aa:bd:2d:be:6b:8c:39:31:
aa:7d:66:56
-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgIEAVCPPjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhj
OTRjYjQyMjZlNmQyNGMxZTBlOTY4NTc4OGE1ZjlkNTk0MzEyY2MwMB4XDTIyMDEw
MTEzMDE0NFoXDTIzMDcwMTAwMDAwMFowMzExMC8GA1UEAxMoYTQ1YmU0NDZlZmM5
Mjg2NjRiY2JhMzVjYTA4Mjk3NThhNjUzMTI3NTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMyrF11Wgn7U3tl72/3tD7psDH7IVKnODXPiqm+NWXxsaEwe
0uT+2PjlSnziscSyx6rThAI+Ui/cimHYPwALnyD1dOfo7ClxRR6piE8J0083aqPt
dtFox0OpgZfgqqp8XpkT8jW7C2tvKB6RzftHR5H+UNE3aKp1BBHorMLRpq7WmkZW
invMQQToMw7fPvOZAOz2US2diHFdJUD7+UvzVbqjP7U+ySwvh1V/k2/zUouF3/Rv
UKL8ppd5bTySF0jUv3+By8bmwplEnS+JVIbhrOyTIPYaEMyTC51MJckI9hHl9FcQ
dCaTTXyKxy63CoRKlNUnvDlCDpvCpeKvA9MNI5MCAwEAAaOCAg8wggILMB0GA1Ud
DgQWBBSkW+RG78koZkvLo1yggpdYplMSdTAfBgNVHSMEGDAWgBTJTLQibm0kweDp
aFeIpfnVlDEswDAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L3lVeTBJbTV0Sk1IZzZXaFhpS1g1MVpReExNQS5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvOWUvZmMxOWVhLWNmODAtNGNlMC04ZTFiLTBhOTU1ZmE3ZDdiMC8x
L3BGdmtSdV9KS0daTHk2TmNvSUtYV0taVEVuVS5yb2EwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvOWUv
ZmMxOWVhLWNmODAtNGNlMC04ZTFiLTBhOTU1ZmE3ZDdiMC8xL3lVeTBJbTV0Sk1I
ZzZXaFhpS1g1MVpReExNQS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAl
BggrBgEFBQcBBwEB/wQWMBQwEgQCAAEwDAMEAFvDfAMEAMKwdjANBgkqhkiG9w0B
AQsFAAOCAQEAvnBR9hZnVcb7P9Cx4/7jwYu9QVJLT6mskgzMUW9Ep7SRlEm2T/mV
LMW2gsuN3AviBzmmbw7ShRo1oYllHcrGmbH/b4QTzcs3Bt8XmJ3fJpLOtFgUaxGu
dx+oJlZJvWyJf4w8EKoV2XAXbnyL5rWNU5c2g5fv8FsTltSwPVRnoAFpBt242bIK
BmA83W734+K45MS2oGHyO/I++To5uuB+XXioY08U66pC/K0XcXedraSEa8HkH090
y+PGa+nirNCRRdvi6JjZKX4CEt951/TDnodKwnAFo8AQcNFMc6Wx8N2/8qI4dpXu
/wuDazdxXS0fei/e9qq9Lb5rjDkxqn1mVg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:45:18 2025 by rpki-client