Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/FTj8_RdKzG7dWGvVLUKVJ_-STTY.roa
File: FTj8_RdKzG7dWGvVLUKVJ_-STTY.roa (raw, json)
Hash identifier: nchkj0Q+WV9ioSCx2P/qMrsH8WZ6xa/plWHFpY8CUp8=
Subject key identifier: 15:38:FC:FD:17:4A:CC:6E:DD:58:6B:D5:2D:42:95:27:FF:92:4D:36
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01942144094A1430624724F6C7DE02A50346
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/FTj8_RdKzG7dWGvVLUKVJ_-STTY.roa
Signing time: Wed 01 Jan 2025 09:48:14 +0000
ROA not before: Wed 01 Jan 2025 09:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 58033
IP address blocks: 91.212.32.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:09:4a:14:30:62:47:24:f6:c7:de:02:a5:03:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1538fcfd174acc6edd586bd52d429527ff924d36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ba:ff:d1:05:a7:36:c7:c5:06:c3:6a:7a:77:
d6:c9:77:88:99:58:13:22:c3:c0:40:e3:c5:3a:ac:
cb:96:e8:6d:1f:9b:ea:f0:67:a9:72:49:f6:7c:9e:
0c:bf:db:54:cd:80:58:51:23:e6:e2:b3:20:01:37:
0a:01:29:ce:7a:4c:2c:00:99:81:f1:73:b1:87:bf:
7a:e3:fc:45:c3:9c:2c:3c:14:2b:e8:6d:15:62:4c:
a6:d0:d1:5f:a6:e3:65:65:fb:26:96:2d:54:fd:b7:
1a:26:38:2a:0b:9a:b2:2c:31:c6:a8:aa:58:55:20:
62:d4:7f:9b:9e:a6:38:19:e6:65:3f:bf:79:c5:67:
60:86:dd:13:18:f6:c8:8e:e1:bf:41:a1:db:c4:03:
a3:fe:69:12:f0:79:87:1f:20:00:95:29:74:27:3f:
a9:ce:8f:9e:b3:5f:f5:67:a2:49:d3:9a:1f:bb:eb:
78:06:c2:c9:d3:4c:c2:a8:1b:87:2a:d1:3e:db:5c:
b2:32:6d:21:8b:e1:9e:57:05:ee:19:b2:4f:2c:38:
51:d9:06:dd:2d:65:a0:43:f5:d0:8d:2e:44:69:66:
45:43:d7:3d:27:9a:92:4e:4f:d6:c7:06:38:bb:69:
58:0a:01:61:56:eb:6a:78:ad:48:a1:10:00:53:ef:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:38:FC:FD:17:4A:CC:6E:DD:58:6B:D5:2D:42:95:27:FF:92:4D:36
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/FTj8_RdKzG7dWGvVLUKVJ_-STTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.212.32.0/24
Signature Algorithm: sha256WithRSAEncryption
54:01:71:a5:44:87:3e:4d:13:f2:6c:8c:fb:cd:52:82:79:73:
8c:94:69:14:ab:1e:3c:84:d9:98:6b:24:e1:3f:3b:35:e9:37:
0f:77:15:4a:3f:11:09:75:58:0e:c7:1f:6b:4f:0d:88:b9:36:
c0:9c:4f:54:f1:21:96:6c:7a:ae:d9:0d:81:eb:58:83:64:7f:
8d:35:3a:f7:64:be:1e:6e:2b:ff:3a:44:d5:64:e0:0a:ec:7c:
0e:ba:0b:05:eb:7e:a1:c3:95:07:e6:e0:1c:d8:b9:ad:c6:d2:
35:d2:f4:a2:7d:f3:07:76:d8:7f:6a:92:ce:c9:a4:61:ab:9a:
7a:a9:ab:e9:82:3a:10:5f:68:80:c4:aa:b7:98:00:ce:e8:fa:
a3:18:e7:9c:95:9b:b5:56:fa:96:1d:ff:38:36:4a:c6:4b:14:
bd:01:49:5e:4a:e4:00:e9:c1:40:6b:da:38:0e:25:4c:6e:09:
12:09:2c:21:9b:e6:4f:2a:e5:79:64:f7:31:61:35:41:c0:c9:
c2:fd:10:b4:19:99:3e:a9:c5:1c:15:e8:58:d0:48:2c:3e:e2:
d8:09:ab:ab:74:68:7c:7e:53:aa:f0:80:55:ce:1e:55:4f:3e:
09:d5:fc:de:64:7b:fc:f9:3e:ad:b6:77:78:05:97:f3:8b:6b:
02:8c:1b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:47 2025 by rpki-client