Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/C0t1fb68tH4owkDmVZ6xwZW1iYA.roa
File: C0t1fb68tH4owkDmVZ6xwZW1iYA.roa (raw, json)
Hash identifier: Y7ISCB0haKo2tmOyS195RCJ+HbABAyZzsD8GbOG5Lkk=
Subject key identifier: 0B:4B:75:7D:BE:BC:B4:7E:28:C2:40:E6:55:9E:B1:C1:95:B5:89:80
Certificate issuer: /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Certificate serial: 01948D63F7C6741DC534AC54F0C519F20BC1
Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/C0t1fb68tH4owkDmVZ6xwZW1iYA.roa
Signing time: Wed 22 Jan 2025 09:42:06 +0000
ROA not before: Wed 22 Jan 2025 09:42:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200736
IP address blocks: 91.211.212.0/22 maxlen: 24
194.187.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:8d:63:f7:c6:74:1d:c5:34:ac:54:f0:c5:19:f2:0b:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Validity
Not Before: Jan 22 09:42:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b4b757dbebcb47e28c240e6559eb1c195b58980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:22:83:fb:33:b3:99:39:70:65:7d:32:aa:88:
39:3e:16:fc:31:84:9e:36:b0:ab:c7:db:4e:5f:7a:
f6:8d:7c:eb:e8:f3:a3:2a:30:ab:4f:3c:fb:8f:14:
7e:2f:26:e2:40:fa:aa:d9:ad:7f:34:dc:85:41:24:
97:a7:ca:e8:4a:0e:a9:59:f3:f9:7a:eb:70:ee:b0:
fe:ae:ca:68:a2:a0:92:58:be:74:57:f6:06:18:25:
89:ef:0f:39:37:c5:5f:7b:6b:8a:6e:5d:15:6d:45:
60:9a:04:15:43:66:9d:9f:c8:89:98:ed:34:50:fa:
44:0c:74:ed:44:7e:25:09:cb:04:97:07:67:be:c2:
86:5c:2f:f6:9f:78:4c:54:b9:af:9f:bb:44:26:84:
46:ec:9c:4a:e5:9c:10:46:0a:ba:6d:bd:5d:47:91:
0d:86:2c:ef:7f:64:a6:c3:f7:22:b1:4e:a7:3a:f8:
eb:32:2f:f8:03:c3:ea:b4:d2:df:a8:2a:cd:be:8e:
0f:2c:9c:21:ac:3b:0f:2a:87:95:9c:ea:9b:14:79:
ab:3d:92:bd:5b:b6:e5:9e:78:8d:06:e8:3b:fe:90:
7a:77:ad:28:f2:89:48:4c:14:87:8e:03:78:a2:cf:
bb:44:69:98:42:9c:6d:7f:68:4b:4d:c0:2d:fe:78:
f0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4B:75:7D:BE:BC:B4:7E:28:C2:40:E6:55:9E:B1:C1:95:B5:89:80
X509v3 Authority Key Identifier:
keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/C0t1fb68tH4owkDmVZ6xwZW1iYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.212.0/22
194.187.255.0/24
Signature Algorithm: sha256WithRSAEncryption
10:c2:8f:44:92:e7:71:ce:52:ac:9b:3d:d3:ff:f4:6a:e9:c1:
f8:25:51:ed:d8:ff:0f:8e:5b:04:1a:3f:42:59:07:0e:98:05:
29:75:36:2d:d3:a4:ef:99:66:a9:83:4a:24:24:8b:50:dd:13:
01:0d:7f:1b:ec:89:f8:e7:0c:e2:85:50:b0:ed:6b:74:14:d4:
0f:d2:ff:19:b6:67:e2:06:87:ed:46:a2:96:9d:5d:25:42:96:
9a:e7:00:37:b1:72:66:cf:ec:5f:ed:1b:51:d1:79:77:db:23:
e9:d1:cd:13:b7:a9:0d:3e:e6:ae:66:57:71:12:3c:30:fd:f1:
90:ff:35:fc:c2:a4:86:24:22:c5:43:73:b6:bd:81:e1:47:09:
3b:a7:9b:a7:e9:42:40:15:8e:98:0d:cc:87:3c:08:2b:08:9c:
b0:52:5a:af:53:76:2b:e6:71:c3:81:b5:f7:cc:b3:a6:af:0b:
46:37:b1:a9:b0:4b:68:61:23:51:0a:24:57:3e:90:17:19:66:
d6:63:5a:8a:1e:c2:d2:b9:83:a2:44:0f:06:23:da:bc:0a:68:
c7:e4:86:b0:7c:d0:b8:f6:b1:d8:36:50:b3:db:12:0a:c2:4d:
fb:6a:53:f8:9f:b6:34:f5:ba:ca:c4:21:d3:a3:d2:7b:bf:40:
50:2e:f8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:47:01 2025 by rpki-client