Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/fB9-x9nzQMLGXiKWPiofGOiCCDo.roa
File: fB9-x9nzQMLGXiKWPiofGOiCCDo.roa (raw, json)
Hash identifier: /Yz5duUUoV4QyYXJiuuC625duaCe5B8wdcwUeuj9HvE=
Subject key identifier: 7C:1F:7E:C7:D9:F3:40:C2:C6:5E:22:96:3E:2A:1F:18:E8:82:08:3A
Certificate issuer: /CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Certificate serial: 0194282355367ED819B5F2E3F97B3B70C150
Authority key identifier: 48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/fB9-x9nzQMLGXiKWPiofGOiCCDo.roa
Signing time: Thu 02 Jan 2025 17:49:51 +0000
ROA not before: Thu 02 Jan 2025 17:49:51 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 20546
IP address blocks: 91.223.186.0/24 maxlen: 24
185.253.204.0/22 maxlen: 24
193.16.220.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:55:36:7e:d8:19:b5:f2:e3:f9:7b:3b:70:c1:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=485e3ee1c3258175f4ff6d9b559da54c83ec0b4f
Validity
Not Before: Jan 2 17:49:51 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c1f7ec7d9f340c2c65e22963e2a1f18e882083a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a8:e5:9c:24:fd:0d:71:8b:40:75:80:33:4f:
fd:e5:cd:5e:bc:fa:ce:65:4c:5d:30:9a:9c:6e:dc:
6f:db:07:e8:ff:33:6e:71:91:b1:ee:18:9a:2c:83:
d7:69:98:21:27:48:95:4b:f5:d5:6e:d0:81:2c:7a:
77:7b:4f:ea:cc:b7:76:1b:58:95:d8:87:65:96:8b:
0a:84:bc:31:f7:5f:ba:41:2d:50:23:11:b0:89:4d:
27:81:c9:51:7f:54:1c:91:e1:3a:22:46:6e:7a:5e:
9c:be:47:75:b5:76:b8:16:dc:fa:19:f3:61:66:d1:
1f:f7:d7:ca:71:9f:5b:94:08:57:e2:5e:e5:40:ef:
77:ed:2c:10:8d:35:6a:02:b9:ca:90:36:67:e3:3d:
b3:b4:7d:71:87:8f:07:44:07:33:4a:45:f5:57:2b:
83:c2:a4:33:6e:a6:c0:67:1f:91:53:45:f6:cf:31:
e3:70:3c:52:9c:18:c7:53:e4:99:7f:2c:09:e4:1c:
ac:f4:d0:a2:c6:80:44:e7:c1:37:97:70:c6:77:49:
6f:6d:e1:a5:1b:24:29:a7:0a:47:14:f2:81:cc:a4:
70:84:e8:03:4a:13:39:e1:16:e3:fe:49:68:fd:2e:
f0:ae:df:6c:ad:6e:da:32:6f:22:f4:30:db:e2:e7:
3d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:1F:7E:C7:D9:F3:40:C2:C6:5E:22:96:3E:2A:1F:18:E8:82:08:3A
X509v3 Authority Key Identifier:
keyid:48:5E:3E:E1:C3:25:81:75:F4:FF:6D:9B:55:9D:A5:4C:83:EC:0B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SF4-4cMlgXX0_22bVZ2lTIPsC08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/fB9-x9nzQMLGXiKWPiofGOiCCDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/96d022-ee02-447c-a349-9c933ccd16c7/1/SF4-4cMlgXX0_22bVZ2lTIPsC08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.186.0/24
185.253.204.0/22
193.16.220.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:78:b0:56:c4:50:c1:0b:0d:23:6b:75:e8:f9:c4:e3:6e:b6:
05:7e:0d:a0:71:40:4e:c0:11:ef:8b:88:76:73:e9:7b:03:57:
2e:a9:69:79:15:90:8b:02:df:32:83:4e:90:71:88:ca:c1:2a:
8f:4e:fe:6c:a4:13:df:9a:b8:44:f2:9e:d6:5a:5c:6d:92:27:
ca:c5:4d:55:06:25:fd:35:9f:36:0f:06:34:9f:43:ed:1b:1f:
5f:97:8f:07:9c:82:67:04:4b:cc:f9:7e:33:74:f3:3c:0f:34:
55:17:ff:f7:56:ae:ab:c0:68:2b:07:c2:3c:8d:1b:7b:57:38:
d8:98:a6:1b:31:67:51:3e:f3:55:dc:26:b6:9d:e5:63:e7:5c:
b4:37:ec:cd:1f:51:f0:fa:a4:bb:a4:ed:ab:48:46:a4:93:fa:
40:9f:20:86:58:87:1c:57:6a:cd:b6:99:3e:33:d9:00:ce:07:
b1:c4:f5:95:f3:a9:a2:5a:29:e8:88:b3:cd:2d:ad:af:cd:d3:
69:0a:61:f4:11:78:0c:b9:93:46:20:81:35:38:11:4a:eb:28:
bd:e8:3c:ff:58:41:a4:6e:b4:70:73:ac:4e:7b:e8:dd:59:12:
70:86:e1:ab:90:f5:ab:76:99:86:a8:0d:62:b7:20:85:09:35:
9f:32:94:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:02:06 2025 by rpki-client