Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/iCASJufkL7y0bMUvn8IqLTzGPYE.roa
File: iCASJufkL7y0bMUvn8IqLTzGPYE.roa (raw, json)
Hash identifier: INWHICniz6zWWSqMWPOuPOjMAKv1y3stcVV7r6T0Z4Y=
Subject key identifier: 88:20:12:26:E7:E4:2F:BC:B4:6C:C5:2F:9F:C2:2A:2D:3C:C6:3D:81
Certificate issuer: /CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Certificate serial: 01958935A78D777AFF6F05026CD1B5298411
Authority key identifier: C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/iCASJufkL7y0bMUvn8IqLTzGPYE.roa
Signing time: Wed 12 Mar 2025 07:15:49 +0000
ROA not before: Wed 12 Mar 2025 07:15:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 60781
IP address blocks: 91.214.110.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:89:35:a7:8d:77:7a:ff:6f:05:02:6c:d1:b5:29:84:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c853fb7988a42f39838b1c7f9f0400692e9295d7
Validity
Not Before: Mar 12 07:15:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=88201226e7e42fbcb46cc52f9fc22a2d3cc63d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4b:6b:91:55:f6:e6:ff:e4:36:18:85:05:7a:
34:6b:65:0c:16:d5:29:05:1b:ef:2c:6b:46:68:0d:
90:6b:fc:01:31:29:79:56:13:62:a4:0c:e8:7a:9d:
d7:c4:d0:09:e2:0e:4b:fc:8d:4e:10:3d:f1:6f:d9:
19:c4:68:a7:f7:35:83:6d:18:df:91:2f:33:2e:e2:
34:33:60:79:7e:08:4f:ac:a1:b3:b3:16:25:bc:13:
8d:89:8a:6c:72:3f:84:b1:e7:01:75:91:d3:36:8d:
91:4c:6f:38:dc:d1:4e:68:db:5d:6e:4e:c3:03:24:
ae:9c:a5:5e:3d:37:f1:38:39:6e:bb:d6:94:95:46:
b8:8d:26:9a:19:02:0c:5e:96:26:49:cd:7f:60:1d:
42:06:d4:c4:59:17:d4:ca:e3:0b:ef:ed:ef:85:91:
d6:55:6f:50:95:97:dd:02:1c:66:8d:7f:12:da:86:
91:af:f1:82:e1:91:7e:38:40:22:8f:b0:a6:03:27:
d9:7b:d2:28:80:83:d0:d8:ec:09:66:df:46:5f:22:
2e:4d:06:16:da:72:7d:5c:ed:50:1a:bf:69:cb:c9:
eb:41:9a:1e:2c:80:a4:d9:8c:d5:71:4e:4f:4c:0b:
0c:38:fa:0f:ed:14:9a:41:c4:65:30:3c:18:15:0c:
c0:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:20:12:26:E7:E4:2F:BC:B4:6C:C5:2F:9F:C2:2A:2D:3C:C6:3D:81
X509v3 Authority Key Identifier:
keyid:C8:53:FB:79:88:A4:2F:39:83:8B:1C:7F:9F:04:00:69:2E:92:95:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yFP7eYikLzmDixx_nwQAaS6Sldc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/iCASJufkL7y0bMUvn8IqLTzGPYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/0c61a6-e0fa-4017-9582-1e7bdb7f30f6/1/yFP7eYikLzmDixx_nwQAaS6Sldc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.110.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:e1:1d:a7:84:39:c1:d9:64:1b:fe:cf:c8:3e:73:86:eb:5f:
78:e1:8b:e9:59:52:65:c0:f0:9a:46:88:c9:bf:13:02:c7:5d:
38:0a:b3:4b:cd:de:c1:9d:6f:49:91:99:2d:e2:38:a6:3b:71:
31:21:64:a1:8d:ed:81:4e:be:09:a0:36:a5:9b:7d:88:36:79:
1a:50:72:b0:f1:4b:02:a8:0c:b9:63:85:34:e8:fd:0d:18:19:
88:49:92:24:2f:3a:8f:86:9d:84:d0:36:d1:24:d3:86:42:6c:
40:ea:be:38:80:4e:29:26:76:ae:8d:6b:a9:0f:cc:c1:78:22:
f9:e2:c2:5b:a8:6b:2c:8d:35:0c:59:4f:bc:e2:a9:34:da:80:
9d:23:01:57:4c:57:4a:eb:fb:86:2d:c7:e4:2e:21:7f:b4:14:
87:15:f2:81:63:62:6f:f8:b7:03:c0:b4:2b:8d:f9:6b:18:b4:
cc:4e:20:ac:a0:9c:9f:79:fa:9e:e5:8e:1f:06:88:09:77:79:
a1:92:1b:0f:28:18:43:6d:64:5a:c6:e0:4e:bd:1c:5a:21:02:
57:44:b2:fb:32:41:9f:6e:a8:38:d8:07:f8:71:ce:7c:eb:09:
a4:12:01:65:38:dd:c8:4f:8c:bf:5a:e9:a8:1d:d2:66:74:bc:
91:f1:d0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 19:26:17 2025 by rpki-client