Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/P9llCh8xQQOicOO52WLocuGy0qc.roa
File: P9llCh8xQQOicOO52WLocuGy0qc.roa (raw, json)
Hash identifier: BJEexM7c83ayn0hEFmwl/zCVtTy13ZJE7DbhwPoki+4=
Subject key identifier: 3F:D9:65:0A:1F:31:41:03:A2:70:E3:B9:D9:62:E8:72:E1:B2:D2:A7
Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Certificate serial: 019427B5F18143E5D5F3A2C597162F370793
Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/P9llCh8xQQOicOO52WLocuGy0qc.roa
Signing time: Thu 02 Jan 2025 15:50:22 +0000
ROA not before: Thu 02 Jan 2025 15:50:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3320
IP address blocks: 91.200.253.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:f1:81:43:e5:d5:f3:a2:c5:97:16:2f:37:07:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3
Validity
Not Before: Jan 2 15:50:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3fd9650a1f314103a270e3b9d962e872e1b2d2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:93:8f:38:ec:54:f5:73:e4:8e:08:1e:d2:14:
41:30:a5:ef:ac:e1:28:9c:a3:05:32:80:af:c3:bb:
24:99:08:20:9f:53:af:8d:fd:34:b5:19:83:9d:fb:
a2:b7:3b:fa:f2:a4:41:7c:5b:99:d2:ae:b3:80:a7:
35:90:47:3c:7e:c6:10:f9:9d:24:a8:06:3a:f9:47:
47:f8:13:29:3f:26:8b:fa:44:cd:91:8a:eb:16:27:
f3:f1:99:24:ed:08:ea:1f:c6:e1:2b:70:4d:43:e9:
67:cf:40:07:91:d2:4f:cd:67:a7:83:01:55:09:ff:
4a:4e:61:a2:53:1f:21:44:78:5c:5a:e0:99:48:a5:
9a:43:03:50:09:4c:97:8f:6b:6e:3c:3c:3e:7a:10:
30:d6:c9:cc:5a:58:9e:17:fc:28:2e:25:4c:ea:d0:
33:1b:c7:b3:c4:a1:09:22:0e:4d:81:0f:5c:23:cb:
71:9d:db:e0:f8:79:dd:36:43:64:8f:4a:d0:e1:fc:
ce:16:37:6d:0e:97:ea:4e:cb:29:7a:37:49:94:1c:
7a:d8:a7:3c:d8:16:cb:ea:7a:ff:b5:34:40:3f:b5:
58:23:8d:8f:4f:94:69:fa:74:bb:78:92:75:0e:8f:
f8:0d:33:f8:4e:39:2d:df:65:83:25:a7:eb:a5:68:
c3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D9:65:0A:1F:31:41:03:A2:70:E3:B9:D9:62:E8:72:E1:B2:D2:A7
X509v3 Authority Key Identifier:
keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/P9llCh8xQQOicOO52WLocuGy0qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.253.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:21:6d:6c:07:6b:53:be:f7:08:0f:ec:e4:07:a5:d5:cb:77:
42:9f:e7:b5:51:be:c5:b7:80:79:54:46:16:89:b9:d2:9b:44:
e8:ba:9a:83:45:9b:06:3e:f5:f2:06:a3:76:7a:b9:a2:18:5b:
9b:9f:9e:01:16:f2:8b:c0:13:d0:6a:00:b3:e5:b7:23:6d:21:
db:97:cd:0a:cd:45:3b:4c:bf:11:38:f5:4b:60:e2:64:96:36:
b9:37:12:e7:a2:9d:dc:a5:4d:10:92:95:3d:ec:e0:23:48:ed:
a5:cd:ed:54:48:e1:bf:85:4f:11:89:d4:fb:c0:79:84:7a:bf:
a5:ab:11:ca:19:86:e6:6f:7f:b5:31:38:80:db:5d:ff:19:c7:
08:86:9b:5c:d0:c2:ea:c7:ea:66:e3:20:f0:7c:0e:77:ee:af:
34:d2:ce:32:cb:f5:13:f5:cf:fd:fa:44:4f:c9:9c:48:06:2d:
e6:d2:48:b9:ef:e6:99:17:73:e8:cf:ed:0f:96:e7:0c:d1:e8:
25:17:05:0d:35:6b:9d:de:d2:b8:52:fd:8b:0b:de:33:f5:e8:
8c:60:3f:b4:7b:0f:b9:a9:71:e4:10:1c:f2:d2:46:4e:c1:fb:
59:a7:57:22:ee:83:ad:41:92:9d:a2:a3:33:63:5e:2f:20:b7:
28:25:00:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 20:33:09 2025 by rpki-client