Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1a94bf-5d2f-46b7-8abd-ae472cfe940c/1/PZjRwj2Wbv_Ol4QJSyg9RTC-Spk.roa
File: PZjRwj2Wbv_Ol4QJSyg9RTC-Spk.roa (raw, json)
Hash identifier: w4eVAE9xT/a7BzG24K3q3Ctuo1/M2OhHjw0i2Plj+HQ=
Subject key identifier: 3D:98:D1:C2:3D:96:6E:FF:CE:97:84:09:4B:28:3D:45:30:BE:4A:99
Certificate issuer: /CN=f9751064b92bb17bac2c430084ee6b174cb01e6f
Certificate serial: 03D5E935
Authority key identifier: F9:75:10:64:B9:2B:B1:7B:AC:2C:43:00:84:EE:6B:17:4C:B0:1E:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-XUQZLkrsXusLEMAhO5rF0ywHm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1a94bf-5d2f-46b7-8abd-ae472cfe940c/1/PZjRwj2Wbv_Ol4QJSyg9RTC-Spk.roa
Signing time: Sat 01 Jan 2022 06:05:25 +0000
ROA not before: Sat 01 Jan 2022 06:05:25 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212559
IP address blocks: 91.243.118.0/24 maxlen: 24
2a10:78c0::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 64350517 (0x3d5e935)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9751064b92bb17bac2c430084ee6b174cb01e6f
Validity
Not Before: Jan 1 06:05:25 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=3d98d1c23d966effce9784094b283d4530be4a99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:bd:60:34:44:28:c4:e5:38:29:ed:9e:88:bb:
94:07:a4:7a:ea:5e:34:59:3c:4d:18:ea:ed:f8:d4:
28:27:17:66:7c:c4:c4:15:8c:ae:34:51:47:a1:42:
fd:71:c1:ec:08:46:c0:6b:53:50:4b:99:76:4e:e7:
41:6f:f2:21:60:39:4e:c9:b5:42:48:52:17:68:65:
65:58:20:df:57:26:77:a6:dc:99:7d:8f:ae:76:cf:
e5:5e:b1:02:31:5f:b3:95:ce:b8:73:81:dd:7f:e1:
17:8e:90:d9:d8:21:35:5e:8d:52:be:54:8e:3b:fb:
2d:be:dd:31:2d:eb:92:71:e9:86:1e:6c:a2:2c:14:
8e:8e:f4:2b:ec:4c:59:74:94:aa:89:65:e1:83:03:
0c:20:25:36:dc:9d:79:a3:fa:b1:ba:06:c8:93:83:
da:9b:3a:ff:53:c7:58:e1:d8:8d:c5:43:95:a6:2e:
ce:87:50:81:b2:7d:a0:bd:2e:dc:b0:1b:2d:f3:91:
8f:e8:55:18:fa:c5:4d:e2:02:ea:72:5d:8c:a8:c3:
10:17:62:02:e9:f1:db:0e:99:e6:5f:25:12:73:a8:
b7:8c:2d:cc:40:25:c4:7f:30:99:64:b4:85:fe:5e:
68:64:35:f7:9e:40:97:86:f0:31:12:03:bf:d7:36:
43:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:98:D1:C2:3D:96:6E:FF:CE:97:84:09:4B:28:3D:45:30:BE:4A:99
X509v3 Authority Key Identifier:
keyid:F9:75:10:64:B9:2B:B1:7B:AC:2C:43:00:84:EE:6B:17:4C:B0:1E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-XUQZLkrsXusLEMAhO5rF0ywHm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a94bf-5d2f-46b7-8abd-ae472cfe940c/1/PZjRwj2Wbv_Ol4QJSyg9RTC-Spk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1a94bf-5d2f-46b7-8abd-ae472cfe940c/1/1-XUQZLkrsXusLEMAhO5rF0ywHm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.243.118.0/24
IPv6:
2a10:78c0::/29
Signature Algorithm: sha256WithRSAEncryption
62:1b:1f:29:bd:13:f3:26:7d:e5:0b:aa:54:db:df:5d:8b:e2:
bb:ae:88:21:57:d0:be:01:a7:c4:37:33:8f:1c:22:93:ac:bb:
2c:db:66:69:b7:38:f9:9e:a3:da:0f:20:1e:cd:6b:fa:df:82:
fe:4d:25:3c:99:75:2e:02:8c:22:90:79:09:7b:8c:16:a8:53:
64:89:50:1f:2f:e2:dc:35:d9:fb:ab:27:df:81:f7:ab:46:9d:
e7:15:6d:23:3a:ca:cb:5b:27:9d:99:86:7c:7b:c0:9f:cb:75:
c5:c7:f4:2f:65:e2:8d:c5:c7:f6:77:7c:60:10:04:e7:f9:a7:
95:51:38:ad:06:f7:88:59:fb:dc:82:aa:7b:6d:97:70:76:b5:
7a:1c:3f:c7:42:2a:e3:00:d1:31:85:80:d2:df:4b:f8:f8:4a:
af:e3:b8:f7:cb:31:89:80:9e:01:38:2a:12:b4:5e:7c:d6:20:
b9:6b:12:04:09:c6:3f:7c:39:5f:4b:03:60:38:e0:7f:7b:d2:
c5:0b:64:92:69:aa:e3:87:0f:14:30:91:45:2e:c1:86:22:5c:
b5:88:4d:15:55:b2:dd:97:b9:12:71:34:19:7d:d6:44:8d:81:
48:7c:f8:5d:48:83:88:11:09:08:ba:ae:24:b3:c1:15:81:26:
e3:80:dd:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:10 2025 by rpki-client