Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/164NuN0RAPFujROsdYusrXaV0cI.roa
File: 164NuN0RAPFujROsdYusrXaV0cI.roa (raw, json)
Hash identifier: xBkfNtGvN+ewPcd2lJZbtWJ7Tff8vgGU+EzsTaEPKDA=
Subject key identifier: D7:AE:0D:B8:DD:11:00:F1:6E:8D:13:AC:75:8B:AC:AD:76:95:D1:C2
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019422FC23C3ABFCB6692815F780747973B6
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/164NuN0RAPFujROsdYusrXaV0cI.roa
Signing time: Wed 01 Jan 2025 17:48:56 +0000
ROA not before: Wed 01 Jan 2025 17:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210027
IP address blocks: 91.236.195.0/24 maxlen: 24
176.126.223.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:23:c3:ab:fc:b6:69:28:15:f7:80:74:79:73:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 1 17:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d7ae0db8dd1100f16e8d13ac758bacad7695d1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:0e:89:ec:88:46:21:cc:45:a8:c0:4b:17:12:
da:01:1c:fe:10:ba:1b:cf:11:7e:0d:c2:e6:4f:51:
b7:7c:a7:d0:2b:4a:f9:07:07:fe:cc:28:02:34:36:
db:ea:23:8d:bf:28:04:56:af:86:40:00:34:54:e9:
cb:a2:70:97:bb:c9:15:50:d9:00:b4:63:ad:75:02:
31:03:0a:82:d0:ac:21:5b:33:ff:bd:60:9d:28:93:
84:e0:57:a6:d2:f4:8b:0a:88:5f:10:a4:0b:12:78:
dd:78:79:83:e9:1c:a5:6f:e9:31:74:6e:12:c5:7d:
86:5e:29:be:ff:ed:c4:3a:d2:16:f4:c2:7d:5f:8e:
f9:a9:a9:0f:12:4b:e2:c4:76:22:f3:16:1e:49:e8:
05:f4:c9:76:0b:ec:04:e9:2e:e2:18:67:6d:3f:d9:
cf:1e:a1:22:f3:e7:66:06:c6:5d:97:d5:e0:4a:d0:
83:72:46:1b:76:26:c0:53:c4:4c:1e:66:bb:e9:25:
58:e9:77:a8:36:34:d6:7c:b0:68:4b:ae:5f:26:df:
48:50:d0:f6:6d:aa:88:5b:57:da:40:5d:ae:fb:51:
81:65:79:2e:3b:93:0f:7d:bf:52:7a:87:42:91:16:
43:53:1c:2a:e4:53:0e:e0:9e:98:eb:ff:93:b8:61:
8b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:AE:0D:B8:DD:11:00:F1:6E:8D:13:AC:75:8B:AC:AD:76:95:D1:C2
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/164NuN0RAPFujROsdYusrXaV0cI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.236.195.0/24
176.126.223.0/24
Signature Algorithm: sha256WithRSAEncryption
64:11:40:4b:6d:c4:58:d6:db:21:f5:a4:d2:9f:df:ad:be:a5:
45:b8:98:6d:02:76:fb:48:bd:0f:b3:eb:05:0f:f6:01:64:7c:
fc:0a:8b:50:e2:20:b8:7b:b5:f3:39:3c:d4:ee:ca:12:94:c1:
7b:e2:c1:8b:99:db:b9:35:d3:c4:a4:d1:d9:c3:c8:9e:5c:f1:
62:06:60:e3:c3:a6:a9:20:f2:da:4a:c1:4b:f6:d3:d1:07:23:
d9:fd:a3:05:1e:02:0f:81:e4:22:a1:6a:0a:0e:d4:7b:13:9f:
0d:7e:d1:c2:67:9d:ef:f9:16:19:bd:a9:f9:9c:18:b4:0d:7d:
be:6d:79:15:70:21:38:ab:4b:fa:b6:81:7f:b4:85:ac:03:0d:
f3:5f:31:26:d0:a1:63:ab:9f:bc:46:c1:a5:73:f3:f6:80:e6:
cd:91:87:4d:2f:6c:57:de:be:ba:61:f1:6a:04:a0:c5:3b:c8:
f1:a0:b8:8c:a9:00:10:24:e7:60:f9:00:bf:b4:64:c7:7b:b9:
de:07:55:9b:55:10:bb:5a:5c:11:26:7a:2b:64:c9:e7:b7:35:
d1:fd:e1:e7:21:de:79:81:70:53:f4:45:d4:7f:5e:5b:be:af:
24:09:39:c2:fe:69:ad:3a:8d:ec:ea:54:c2:4e:0c:c5:48:39:
74:20:8e:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:34:43 2025 by rpki-client