Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/7igeo9_TlsXUqUlVvyOjpwVfpDU.roa
File: 7igeo9_TlsXUqUlVvyOjpwVfpDU.roa (raw, json)
Hash identifier: wrE83GpVnnbvy4NsTM2G5dYnzbEPX50/JpJmfQzjBx4=
Subject key identifier: EE:28:1E:A3:DF:D3:96:C5:D4:A9:49:55:BF:23:A3:A7:05:5F:A4:35
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0194266BC8189C7470280630370182E7392C
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/7igeo9_TlsXUqUlVvyOjpwVfpDU.roa
Signing time: Thu 02 Jan 2025 09:49:45 +0000
ROA not before: Thu 02 Jan 2025 09:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 215071
IP address blocks: 91.200.221.0/24 maxlen: 24
109.122.42.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c8:18:9c:74:70:28:06:30:37:01:82:e7:39:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Jan 2 09:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee281ea3dfd396c5d4a94955bf23a3a7055fa435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1d:45:6c:6c:36:36:da:c5:a4:64:c6:bb:50:
fd:53:83:fd:20:43:be:40:7f:dc:ac:ab:6f:09:23:
a4:31:7a:32:77:7e:82:20:e6:be:d4:a5:3f:2b:9d:
0c:22:e7:76:f3:33:08:00:8b:8a:61:3e:bc:95:30:
fd:6e:7b:95:3e:d3:87:d6:c8:18:af:61:2e:85:41:
90:ff:77:81:14:16:7c:4c:3e:a0:22:8a:6c:2f:67:
71:32:42:27:fd:7d:89:20:d5:6f:3f:29:0e:50:61:
41:76:7c:1b:f4:0e:f8:e2:37:96:b0:e8:e6:7a:d7:
51:18:07:8c:18:2e:93:2e:89:a6:7b:1e:99:d5:28:
d4:f0:71:6a:fd:6d:81:8b:7c:3e:27:26:07:6e:1c:
91:ad:a7:dc:f9:c3:d3:2d:d7:e6:4a:4b:9f:fa:be:
32:ba:74:ad:6f:37:4f:f1:a5:4c:5c:b6:0f:74:41:
6c:aa:51:de:2e:e7:14:49:d5:e9:26:cb:59:cd:a1:
6e:73:6b:1e:79:2c:14:ba:d1:66:7a:fe:86:12:7f:
eb:f5:27:18:a2:35:17:af:26:cd:0b:eb:0f:4d:d5:
e1:65:db:f0:18:a3:5a:f1:e8:49:2b:3b:38:e0:7b:
18:c9:f4:65:a4:15:b4:20:cb:90:6e:ea:55:e3:fb:
cc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:28:1E:A3:DF:D3:96:C5:D4:A9:49:55:BF:23:A3:A7:05:5F:A4:35
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/7igeo9_TlsXUqUlVvyOjpwVfpDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.200.221.0/24
109.122.42.0/24
Signature Algorithm: sha256WithRSAEncryption
60:c1:ab:bc:bd:66:a1:b9:c0:eb:2e:c6:94:26:29:51:be:a7:
20:e5:d3:53:9b:63:1c:8c:a9:12:df:f1:80:8b:59:5c:68:93:
74:be:52:da:c2:32:9a:9a:f5:90:0e:79:3e:4d:86:d8:ac:21:
15:11:51:f9:09:9a:0e:50:d1:e3:c5:4f:63:fb:f3:82:23:83:
a0:dc:69:00:a0:df:f6:df:d5:23:96:dd:6d:3b:3f:be:bd:bc:
6f:b5:88:cd:72:ef:80:5d:e8:e0:b7:72:be:bc:af:8a:e4:d5:
d1:b3:75:ed:4d:8b:14:72:db:45:95:e2:b7:35:07:bb:2b:59:
00:6d:b6:15:f7:6a:27:f3:9c:4d:e6:c4:e0:57:97:bd:05:fd:
b0:e5:bf:ef:cf:2c:e0:fa:3d:3d:88:ec:3f:3c:d9:d8:4f:1d:
03:20:5f:1d:14:17:3f:c9:cf:32:ee:c8:b2:a2:16:ba:08:fd:
73:37:ac:fc:df:88:a4:b6:b6:36:af:54:2d:a4:96:99:20:d0:
f9:54:bf:a1:06:4a:17:89:3d:08:79:e3:63:12:df:13:1c:87:
4c:05:c3:0e:7c:4e:a7:83:cd:ae:78:29:32:8f:27:1e:80:38:
bc:2f:35:66:3a:73:c9:b0:73:0e:be:6d:19:a3:3a:4a:96:b5:
e2:7a:82:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:16:37 2025 by rpki-client