Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/Py5iljGyYbm_h2dmSyhQJpYiXY8.roa
File: Py5iljGyYbm_h2dmSyhQJpYiXY8.roa (raw, json)
Hash identifier: hx9al72EaMTmJwbhsSBXSqJt9sY2KbLgSDXOBFTTlj4=
Subject key identifier: 3F:2E:62:96:31:B2:61:B9:BF:87:67:66:4B:28:50:26:96:22:5D:8F
Certificate issuer: /CN=46d713ada8dabcf77681c0ca42d9969e447c8ea7
Certificate serial: 01955BBA70F144D9DDB9F2B7CE541A3F9B42
Authority key identifier: 46:D7:13:AD:A8:DA:BC:F7:76:81:C0:CA:42:D9:96:9E:44:7C:8E:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RtcTrajavPd2gcDKQtmWnkR8jqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/Py5iljGyYbm_h2dmSyhQJpYiXY8.roa
Signing time: Mon 03 Mar 2025 11:18:20 +0000
ROA not before: Mon 03 Mar 2025 11:18:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 91.209.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:5b:ba:70:f1:44:d9:dd:b9:f2:b7:ce:54:1a:3f:9b:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46d713ada8dabcf77681c0ca42d9969e447c8ea7
Validity
Not Before: Mar 3 11:18:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3f2e629631b261b9bf8767664b28502696225d8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:b1:30:e1:4d:33:76:74:21:2d:99:0d:37:18:
48:8b:23:16:81:7e:11:48:9f:8b:48:b9:24:4c:bc:
53:2d:fb:bf:a4:3e:8c:c6:ec:cc:c1:fd:ea:91:15:
36:d8:9e:a2:06:e0:61:b2:0e:61:9c:9a:f4:25:02:
bb:71:f5:67:5b:aa:6d:ca:0a:c1:9d:e1:19:9f:be:
22:c5:ec:ff:47:71:a5:1d:a7:28:8e:c4:29:ea:b9:
9c:12:a0:01:b9:50:49:9e:79:2a:e0:84:6b:47:5a:
f8:22:8f:ca:d6:9b:dd:be:15:37:fa:91:c7:9f:fe:
41:59:c3:ac:50:29:a9:0e:ea:66:16:3e:92:bd:1b:
e0:d3:31:60:fb:c4:14:9b:36:fc:04:92:7a:c3:c4:
b3:7f:44:75:24:d8:1d:99:bb:98:77:3a:06:48:08:
e2:3b:46:7b:43:5e:21:d0:07:05:9a:ca:ce:19:2b:
4c:10:65:2e:57:13:68:34:52:84:44:e1:da:43:6e:
61:a9:a0:73:23:0b:34:1b:f4:40:e8:1e:bb:0c:9c:
70:75:f8:d7:75:7b:b4:e2:9a:58:08:44:11:a0:37:
d1:72:24:f1:e6:41:9d:5b:0d:23:2d:e4:fd:2e:57:
b8:38:91:f5:eb:dd:42:35:fc:99:74:a2:4c:a0:84:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2E:62:96:31:B2:61:B9:BF:87:67:66:4B:28:50:26:96:22:5D:8F
X509v3 Authority Key Identifier:
keyid:46:D7:13:AD:A8:DA:BC:F7:76:81:C0:CA:42:D9:96:9E:44:7C:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RtcTrajavPd2gcDKQtmWnkR8jqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/Py5iljGyYbm_h2dmSyhQJpYiXY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/RtcTrajavPd2gcDKQtmWnkR8jqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.40.0/24
Signature Algorithm: sha256WithRSAEncryption
25:3d:2f:66:e2:2d:d6:15:4f:2d:5a:f6:16:fa:1a:76:fb:e1:
79:1c:81:64:83:4c:9f:0f:1d:24:07:86:06:02:03:ff:98:bd:
9d:76:a4:8c:06:7a:2a:95:41:ec:ff:6f:da:1d:ee:42:54:54:
b8:e0:b6:8d:c9:09:52:1e:8d:39:f0:a1:d0:54:31:d5:c4:6a:
34:96:bd:89:7e:2a:92:bd:eb:25:f6:e4:ed:ab:cb:02:f1:ec:
0e:37:a1:b4:e6:32:1b:98:8f:58:a5:a5:75:7f:76:62:33:11:
79:50:c5:8d:15:89:60:12:32:50:2d:6b:9b:f5:b9:38:bf:80:
9d:12:f7:52:24:7e:14:51:55:e7:12:af:a4:c5:11:d3:a3:bd:
a7:b8:ff:73:bc:0d:83:24:a2:dc:19:3d:b8:37:51:6e:4f:94:
23:23:ce:da:ef:84:1b:e4:04:cf:e0:05:92:8d:f7:8e:ba:67:
1c:a9:7a:b3:8e:31:7b:d0:c9:2c:15:1d:0c:4b:6b:aa:a6:64:
9b:06:e4:e5:bc:60:e5:7e:66:f5:5c:45:94:16:18:9b:3f:ca:
4c:d3:8d:5e:7a:a4:f7:ed:68:2a:a2:ac:ce:59:13:22:67:d6:
c9:79:82:07:34:df:30:96:2c:fa:f5:3b:06:6a:b1:12:4b:0d:
39:e7:63:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:07:31 2025 by rpki-client