Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/FiLJrOB6VSbXcUW10ayq5u0-45c.roa
File: FiLJrOB6VSbXcUW10ayq5u0-45c.roa (raw, json)
Hash identifier: SVzm6u7ARr2O1cZhcAUWJuayXj1RRfV/z3YIwyKiXZI=
Subject key identifier: 16:22:C9:AC:E0:7A:55:26:D7:71:45:B5:D1:AC:AA:E6:ED:3E:E3:97
Certificate issuer: /CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Certificate serial: 019424B3A1D1C49405D5F2004711CDB22CA0
Authority key identifier: EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/FiLJrOB6VSbXcUW10ayq5u0-45c.roa
Signing time: Thu 02 Jan 2025 01:48:59 +0000
ROA not before: Thu 02 Jan 2025 01:48:59 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 197655
IP address blocks: 91.223.193.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a1:d1:c4:94:05:d5:f2:00:47:11:cd:b2:2c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef42aed0e91b23d0cdcbfb24ac839b0dbe6aa04b
Validity
Not Before: Jan 2 01:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1622c9ace07a5526d77145b5d1acaae6ed3ee397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:87:63:91:83:e3:96:52:98:0e:04:34:a9:0b:
5e:c2:23:94:57:40:86:e7:c4:13:64:0c:14:17:96:
aa:b2:64:ac:ad:ab:23:c1:95:24:7a:ce:96:7b:ae:
69:51:ae:a3:64:7b:ca:5a:f1:b5:8d:2b:4a:6a:0e:
0f:3f:17:47:3a:41:1f:5e:cd:a9:aa:98:e7:3e:27:
b8:f9:f0:fa:55:0d:a0:92:0f:24:99:4f:dc:d4:22:
13:5c:23:a0:76:45:ca:8e:19:c4:89:a4:52:61:59:
dd:d3:84:ae:ad:4d:bf:7e:48:7b:25:9d:a1:aa:53:
02:24:47:8d:85:4d:a7:5a:a1:88:ed:2f:71:b0:64:
0d:2c:3b:a2:35:79:ef:45:23:2a:27:c6:c1:86:f5:
b9:63:db:f2:4f:6b:9b:5a:59:79:13:d2:d1:ad:ff:
26:1f:5b:42:0d:a4:5f:b7:5f:fd:6f:dd:5a:98:94:
05:33:57:e4:50:38:58:0b:43:0e:24:dd:b1:ca:f9:
12:97:70:e2:76:37:76:ac:27:43:f4:17:c4:3b:5c:
82:e3:62:4a:7d:99:6c:5e:5e:ca:23:7a:a0:80:e0:
de:83:d4:fe:37:86:b9:5f:29:22:d5:96:f2:57:46:
60:59:09:a0:e8:8e:f8:bc:7f:3a:33:f1:78:07:15:
01:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:22:C9:AC:E0:7A:55:26:D7:71:45:B5:D1:AC:AA:E6:ED:3E:E3:97
X509v3 Authority Key Identifier:
keyid:EF:42:AE:D0:E9:1B:23:D0:CD:CB:FB:24:AC:83:9B:0D:BE:6A:A0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70Ku0OkbI9DNy_skrIObDb5qoEs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/FiLJrOB6VSbXcUW10ayq5u0-45c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/bd75a2-fc6e-4a86-9edf-669909e11ce3/1/70Ku0OkbI9DNy_skrIObDb5qoEs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.193.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:b1:22:b6:3c:73:29:48:98:03:24:dd:fc:53:ad:2c:96:29:
ee:31:b5:0c:08:ea:bf:64:c1:38:3f:95:4d:25:77:0f:23:72:
39:dd:33:3e:e1:c7:da:04:f6:f9:ed:cf:ae:cd:bd:66:3a:9c:
21:b0:71:26:b3:c3:4c:4d:22:1c:60:fb:36:43:84:a7:43:05:
7f:70:c8:3c:e2:2e:a0:43:74:77:b8:06:05:ff:48:6d:cb:41:
85:9d:10:37:4e:dc:5e:1a:cb:33:f6:84:bb:22:58:45:98:73:
96:0c:d8:51:1d:6a:08:0e:68:06:77:11:5b:13:74:ba:52:54:
59:9c:06:a9:96:47:86:2e:2e:da:6a:ef:0d:ee:6c:bb:f0:47:
f8:c6:40:b5:aa:a1:f0:96:97:8d:dc:46:cd:79:7f:90:a6:9c:
12:bd:9e:55:db:aa:6a:59:07:bd:85:12:9c:0f:c9:f8:b4:39:
50:7d:f5:2d:56:2a:e9:31:9c:b6:1a:3e:13:43:4a:df:0c:97:
e2:2f:06:c3:ea:1e:3d:f1:3d:6d:7d:e0:c6:c7:a0:42:e5:91:
66:aa:e6:65:42:13:fb:b6:d8:3d:21:ea:67:c5:15:5e:78:e0:
ce:81:77:0a:c5:10:84:07:64:3d:17:54:e3:49:19:81:5a:1e:
52:6a:b4:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:51:53 2025 by rpki-client