Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/5CyBpeLyifB2AFAXOFh8yVUvCwE.roa
File: 5CyBpeLyifB2AFAXOFh8yVUvCwE.roa (raw, json)
Hash identifier: JsDCYkyYiFX4qZJz2FVAXDqsZF5P1tX4kX3+rULf7lU=
Subject key identifier: E4:2C:81:A5:E2:F2:89:F0:76:00:50:17:38:58:7C:C9:55:2F:0B:01
Certificate issuer: /CN=3c9f400f884f7030318eb6be74c528485abe4460
Certificate serial: 019422FC17E5B8BFB8285792FB2AAB361EEC
Authority key identifier: 3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/5CyBpeLyifB2AFAXOFh8yVUvCwE.roa
Signing time: Wed 01 Jan 2025 17:48:54 +0000
ROA not before: Wed 01 Jan 2025 17:48:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48869
IP address blocks: 91.199.59.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:17:e5:b8:bf:b8:28:57:92:fb:2a:ab:36:1e:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c9f400f884f7030318eb6be74c528485abe4460
Validity
Not Before: Jan 1 17:48:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e42c81a5e2f289f07600501738587cc9552f0b01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:08:b7:d2:76:d1:b0:af:b2:e3:99:f1:3d:22:
dd:b8:fa:ce:6a:17:ea:b6:b1:96:bd:0c:7d:48:5d:
c1:3b:3b:eb:03:dc:dc:b4:74:02:94:b1:b9:3b:d2:
37:99:9d:86:31:23:bc:c5:5a:c9:0d:64:e8:3a:37:
4b:ea:54:ab:21:b2:70:99:53:c0:7e:0c:bd:c9:4b:
29:9c:0d:f9:42:db:11:2b:b4:77:4c:ee:fe:4b:83:
14:e8:c0:5f:29:e5:42:3a:1e:14:d3:2e:ec:5f:0b:
b7:85:6e:94:2d:da:03:59:a9:9c:c8:7d:4d:19:ae:
5f:58:32:be:3f:89:28:42:32:ba:90:e5:e3:ec:cd:
f8:c2:af:fc:82:de:05:4c:3c:19:1e:75:43:88:e8:
d6:87:12:65:81:ec:07:53:13:65:e1:e1:32:70:71:
9d:e4:d7:07:b7:21:ab:55:5d:49:55:5d:c8:5e:b9:
a2:df:f7:20:5f:78:a3:9a:e4:15:3c:3e:f2:41:0b:
d4:a1:f5:e8:11:d2:f4:83:bc:5d:aa:16:44:d9:36:
b1:9d:da:31:7c:20:38:41:37:54:f2:98:da:dd:5f:
16:6b:27:2d:6f:de:0b:1c:d6:56:d8:aa:4a:3e:13:
42:a8:fa:87:5b:99:9f:7b:99:51:44:36:8e:8f:47:
46:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:2C:81:A5:E2:F2:89:F0:76:00:50:17:38:58:7C:C9:55:2F:0B:01
X509v3 Authority Key Identifier:
keyid:3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/5CyBpeLyifB2AFAXOFh8yVUvCwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.59.0/24
Signature Algorithm: sha256WithRSAEncryption
27:55:f7:27:e0:99:dc:64:c9:37:7e:53:a3:a1:a1:07:17:34:
6f:b5:60:f2:77:4e:a5:8c:68:39:a5:99:77:6f:6d:76:9a:c3:
79:ef:2c:cb:29:7e:db:90:05:28:a2:1a:e6:ac:87:00:98:bc:
57:3c:7d:ab:bc:b4:63:ff:42:65:1e:2e:e8:e0:75:5f:26:4b:
6f:5f:05:f2:56:56:d0:96:8f:86:88:cc:2c:c1:81:bf:9a:56:
28:8f:24:1a:69:f7:64:79:47:96:00:0f:9b:e6:74:4e:55:44:
03:06:e8:89:ce:d3:f4:53:be:6c:de:f3:a0:d4:0d:26:27:35:
6a:57:a9:b7:c2:3b:a2:88:cf:4f:c7:30:67:07:38:ea:92:33:
0f:c6:e9:57:29:78:3a:28:6d:a2:0b:0b:71:1f:b3:1c:bd:d1:
cf:81:e4:bf:bc:75:97:a6:7e:fa:34:51:0e:b6:39:42:c1:7f:
78:92:35:27:13:be:2d:7d:b0:47:1e:f2:52:69:46:cd:2c:04:
e6:d2:1a:e9:97:15:3f:9f:02:57:98:ad:29:f8:4b:62:a5:e2:
65:bf:40:5c:d6:ff:1c:41:4a:17:62:fd:cf:b7:b2:0d:40:78:
f3:68:b9:8a:e5:2e:f6:8e:e3:08:5f:99:2c:46:d8:f9:c0:26:
48:10:56:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:28:56 2025 by rpki-client on console.sobornost.net