Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/19f984-842a-4098-a8bd-696e09b43d60/1/pHcTpwYyILNgTrpNFqwJT5K57HE.roa
File: pHcTpwYyILNgTrpNFqwJT5K57HE.roa (raw, json)
Hash identifier: YvypBJgWSzNDn4+okBP7XqvTc3bAtoeWb/jMZl/foxw=
Subject key identifier: A4:77:13:A7:06:32:20:B3:60:4E:BA:4D:16:AC:09:4F:92:B9:EC:71
Certificate issuer: /CN=5e84ee673dc6209ebda7e8e63292a727fc27e8a6
Certificate serial: 018CC6B8357FF8033DDAB527BAC004E33F12
Authority key identifier: 5E:84:EE:67:3D:C6:20:9E:BD:A7:E8:E6:32:92:A7:27:FC:27:E8:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XoTuZz3GIJ69p-jmMpKnJ_wn6KY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/19f984-842a-4098-a8bd-696e09b43d60/1/pHcTpwYyILNgTrpNFqwJT5K57HE.roa
Signing time: Mon 01 Jan 2024 20:30:10 +0000
ROA not before: Mon 01 Jan 2024 20:30:10 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 59533
IP address blocks: 91.218.103.0/24 maxlen: 24
91.218.102.0/24 maxlen: 24
91.218.101.0/24 maxlen: 24
91.218.100.0/24 maxlen: 24
193.150.52.0/23 maxlen: 23
91.219.203.0/24 maxlen: 24
91.219.202.0/24 maxlen: 24
91.219.201.0/24 maxlen: 24
91.219.200.0/24 maxlen: 24
91.235.181.0/24 maxlen: 24
91.235.180.0/24 maxlen: 24
91.240.112.0/24 maxlen: 24
91.240.113.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:35:7f:f8:03:3d:da:b5:27:ba:c0:04:e3:3f:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e84ee673dc6209ebda7e8e63292a727fc27e8a6
Validity
Not Before: Jan 1 20:30:10 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a47713a7063220b3604eba4d16ac094f92b9ec71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:76:77:a0:a6:e2:4f:09:d1:15:4d:84:aa:90:
41:e6:ca:f4:c9:b1:98:00:b8:ec:fc:81:ad:c6:e8:
ad:3c:f8:39:9a:7a:45:a8:94:32:46:9e:e2:bd:e5:
38:68:e6:d6:3c:5c:cd:48:a3:95:0a:1f:18:76:45:
8e:ab:74:b9:14:aa:4f:46:d7:28:07:dd:a2:66:98:
53:37:5a:46:bc:de:f2:83:5c:56:57:28:07:17:cf:
85:65:68:76:47:a2:1d:8a:48:91:49:7e:c4:e4:a9:
a4:d2:40:88:62:a5:34:9d:07:0b:f4:68:5f:01:0d:
ab:50:e1:bd:16:d5:c8:25:2c:6a:93:36:a1:bb:2b:
63:62:9b:93:a5:b8:7d:d4:4e:4d:82:ec:15:80:14:
3c:56:4a:83:60:a1:c7:6b:d1:51:3c:ab:51:eb:d4:
50:6d:ef:b9:f2:ef:8c:7f:c0:27:a2:ac:df:7e:4d:
8b:41:16:e6:73:d2:13:87:0f:01:eb:12:7c:53:3f:
66:e4:b7:20:53:d2:a2:5c:b6:23:ab:01:9d:e6:ae:
4e:7e:0b:ea:26:bd:9f:0c:5e:73:e7:64:9a:a6:28:
8e:37:10:25:76:35:20:b4:4d:9d:7a:c1:3a:4d:4f:
f8:85:a5:d9:a9:ef:e8:6b:33:8b:4b:27:7d:5a:e1:
21:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:77:13:A7:06:32:20:B3:60:4E:BA:4D:16:AC:09:4F:92:B9:EC:71
X509v3 Authority Key Identifier:
keyid:5E:84:EE:67:3D:C6:20:9E:BD:A7:E8:E6:32:92:A7:27:FC:27:E8:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XoTuZz3GIJ69p-jmMpKnJ_wn6KY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19f984-842a-4098-a8bd-696e09b43d60/1/pHcTpwYyILNgTrpNFqwJT5K57HE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/19f984-842a-4098-a8bd-696e09b43d60/1/XoTuZz3GIJ69p-jmMpKnJ_wn6KY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.100.0/22
91.219.200.0/22
91.235.180.0/23
91.240.112.0/23
193.150.52.0/23
Signature Algorithm: sha256WithRSAEncryption
9b:e4:b9:43:4f:8d:13:82:a3:43:30:e6:8b:f1:f0:4d:cf:08:
72:d5:31:f1:be:fb:70:a3:34:6c:67:8a:73:92:ca:65:49:e8:
dc:5f:10:d7:8b:24:d0:4a:a7:cc:58:c7:cb:82:38:bf:69:c5:
87:41:16:2b:d2:56:1b:d2:6f:55:c5:6d:b8:3d:d4:2d:4f:05:
4a:29:eb:3c:dd:de:35:16:d0:0c:d0:cf:0a:ea:db:3a:72:82:
0b:9f:18:53:a6:c1:c8:6c:2a:7c:46:c8:18:51:b4:31:01:91:
3c:62:10:bb:d6:e3:bb:99:b6:1f:f6:5c:aa:9a:81:75:54:c4:
d6:af:f4:61:48:aa:b7:52:a2:2d:0c:32:50:24:ea:d5:b1:35:
10:14:57:d6:ce:ab:3a:be:21:b7:f1:8b:9e:3e:0d:72:65:cc:
3c:3d:fd:dc:33:00:64:72:28:ac:8d:fd:b1:30:57:8e:33:61:
64:7b:5a:33:27:89:e8:e3:4c:21:d3:07:8f:55:7a:bd:46:b0:
ef:ed:a9:13:5c:17:05:c4:02:35:7c:02:7e:48:fa:2a:a0:0a:
26:0d:60:2b:31:20:aa:40:0e:7f:9d:4b:31:6d:99:81:db:87:
ea:99:a5:5b:d1:d5:04:95:1d:42:23:00:08:76:14:22:47:6c:
16:cb:09:95
-----BEGIN CERTIFICATE-----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Generated at Fri Jun 7 08:51:47 2024 by rpki-client on console-ams.rpki-client.org