Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/PfPxvTTxIHXFLfNEVWC2UQ1dBXA.roa
File: PfPxvTTxIHXFLfNEVWC2UQ1dBXA.roa (raw, json)
Hash identifier: HxajXoLcQFMUcr8Vx+8153ZbVhHzDne1NQ1SxpjpQ+U=
Subject key identifier: 3D:F3:F1:BD:34:F1:20:75:C5:2D:F3:44:55:60:B6:51:0D:5D:05:70
Certificate issuer: /CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Certificate serial: 01942067C1C6B6A0F4074DBF5C81C73CF2A5
Authority key identifier: 8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/PfPxvTTxIHXFLfNEVWC2UQ1dBXA.roa
Signing time: Wed 01 Jan 2025 05:47:38 +0000
ROA not before: Wed 01 Jan 2025 05:47:38 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 139471
IP address blocks: 91.238.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c1:c6:b6:a0:f4:07:4d:bf:5c:81:c7:3c:f2:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b37183341a2ab6df3c59ec827ed71200b5a6244
Validity
Not Before: Jan 1 05:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3df3f1bd34f12075c52df3445560b6510d5d0570
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:90:2b:02:68:27:a4:07:8e:6f:ac:58:e8:ea:
4f:35:f3:ee:0e:36:88:37:dc:41:db:2e:31:ad:3e:
a5:f2:61:70:40:b0:71:66:8d:90:b2:ec:fd:13:f3:
cc:2f:af:c8:a0:86:7d:55:7f:82:a6:24:91:2c:c0:
af:03:9a:90:97:00:2d:06:4f:87:37:15:57:2c:b0:
c7:4a:4c:8b:79:da:ba:10:5e:21:c0:b6:81:b1:a5:
ac:43:da:9b:08:32:ad:27:c8:a9:30:ea:17:3f:e6:
c0:3e:7e:9a:ba:a2:ca:b6:d4:6f:9c:a5:f1:05:f3:
21:55:84:76:fe:31:78:ba:59:15:80:ce:fb:38:e3:
f9:4e:cc:0a:34:4f:d7:c2:e8:85:3a:ab:4d:5f:a6:
7e:4a:63:44:e1:e8:f0:c2:86:2a:dc:f5:8e:c0:51:
76:c4:c1:d2:4a:12:48:d1:a8:2b:16:f4:17:43:09:
0c:f2:4e:5e:f0:95:90:ff:c8:60:0d:1d:95:aa:a4:
9e:f3:53:1f:eb:6f:8c:d6:67:4e:07:ea:4d:60:f3:
a7:ad:78:f5:f9:88:47:f3:02:e4:34:f8:92:67:24:
13:e0:52:05:39:10:ce:4e:6c:68:d8:5e:02:be:f3:
fa:24:8f:cf:7c:de:aa:dc:9c:4a:29:11:5a:f6:6a:
9c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F3:F1:BD:34:F1:20:75:C5:2D:F3:44:55:60:B6:51:0D:5D:05:70
X509v3 Authority Key Identifier:
keyid:8B:37:18:33:41:A2:AB:6D:F3:C5:9E:C8:27:ED:71:20:0B:5A:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/PfPxvTTxIHXFLfNEVWC2UQ1dBXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/1c78e3-67d6-4e90-aeb5-0852cb353293/1/izcYM0Giq23zxZ7IJ-1xIAtaYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.114.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:a5:ff:ca:02:1f:5f:a1:75:3f:74:08:4b:74:99:cf:03:c4:
78:bf:ac:9b:04:c2:82:41:6b:45:01:55:31:2d:53:40:28:d4:
20:c8:78:2b:8f:30:c4:23:e9:d2:1e:80:d6:91:c3:a8:2c:bf:
86:48:67:c6:1f:5b:1b:ab:fe:08:27:09:59:e0:51:65:bc:b7:
40:21:d5:e2:99:1f:06:70:e8:8d:a5:f0:6c:1d:c7:af:b4:38:
5f:bf:ae:43:49:0a:c9:ee:80:46:cc:79:c9:06:4a:2e:3e:2d:
ba:ad:f3:7c:82:70:b2:59:e5:98:b0:c7:39:0f:7e:1d:e2:53:
83:04:66:0b:50:2b:a0:8b:1b:a8:8b:01:12:57:9b:8b:ee:10:
67:7a:a9:5a:7b:4e:45:ee:5d:ba:8b:64:48:c3:16:63:57:38:
8c:c8:fb:87:e2:44:80:35:3c:df:aa:a2:a5:b9:e9:88:c4:19:
e4:0a:0d:71:c2:32:04:04:67:7c:2e:45:f8:18:19:39:75:ba:
81:cd:e4:f9:f9:01:25:d3:d0:8c:06:2e:36:05:b2:60:11:76:
fd:80:55:c6:7a:cf:f0:bd:8a:c0:bf:5f:88:76:de:a4:e3:a6:
7f:d3:4e:d5:5b:df:f7:ca:74:51:c5:4c:c7:65:8c:e1:f6:6a:
96:37:93:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:10 2025 by rpki-client