Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/8NLi_c1_iiPvN5887CrVN736Jhc.roa
File: 8NLi_c1_iiPvN5887CrVN736Jhc.roa (raw, json)
Hash identifier: 9ETnZ2O3HV11y21G0nfn4r0VvrQadHxVnDFmmkbvtLM=
Subject key identifier: F0:D2:E2:FD:CD:7F:8A:23:EF:37:9F:3C:EC:2A:D5:37:BD:FA:26:17
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 0194266BF7AD63E1D76ED15C4C3E677A825C
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/8NLi_c1_iiPvN5887CrVN736Jhc.roa
Signing time: Thu 02 Jan 2025 09:49:57 +0000
ROA not before: Thu 02 Jan 2025 09:49:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207838
IP address blocks: 188.114.91.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:f7:ad:63:e1:d7:6e:d1:5c:4c:3e:67:7a:82:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 2 09:49:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f0d2e2fdcd7f8a23ef379f3cec2ad537bdfa2617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:aa:fa:65:54:ab:3e:71:b8:87:f1:43:0e:ea:
f8:81:e1:f4:6e:62:82:9c:0c:5b:53:97:d6:56:0f:
a1:72:98:ce:d7:cb:1c:44:53:ab:b5:65:b4:f3:33:
ed:a7:99:0a:92:fe:d9:4c:29:44:c8:bd:5f:e0:03:
9f:e7:dd:1e:e4:4b:15:ee:0c:36:ed:c1:d4:bd:26:
ec:17:90:8f:d0:93:b3:57:17:83:20:59:70:83:35:
30:59:de:c0:e4:1e:9d:8f:29:f9:32:d9:89:bb:43:
29:3e:42:b4:55:31:bf:0c:cd:6d:62:8f:b3:00:d5:
29:d3:54:dd:56:cb:20:24:5a:e8:03:51:5a:15:e7:
6d:e7:fc:2b:44:ad:87:66:04:ba:65:d8:e9:42:14:
bf:7a:8b:1c:63:c3:01:6d:ff:77:04:98:0f:31:43:
64:15:62:91:28:5b:52:23:fe:d0:fc:87:ba:42:ea:
b1:71:2f:47:63:42:ce:28:39:ee:34:07:e2:b2:a6:
0e:32:1b:f5:2d:4c:76:75:ca:0b:cb:a8:2b:5e:77:
b5:3b:49:a3:dd:7b:41:27:dd:8d:4e:b4:32:19:d7:
43:d5:09:82:42:3a:83:f1:23:34:5b:ee:52:62:c3:
8c:d5:b5:d6:f7:74:0d:fe:48:55:2b:56:15:e1:67:
24:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D2:E2:FD:CD:7F:8A:23:EF:37:9F:3C:EC:2A:D5:37:BD:FA:26:17
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/8NLi_c1_iiPvN5887CrVN736Jhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.114.91.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:2b:7b:f0:9b:a7:27:0a:8b:01:78:cc:e2:39:5a:cd:a9:32:
7b:a4:a8:12:ed:84:18:32:9e:ef:86:1d:a1:fc:25:18:92:c8:
d6:b5:17:ec:c4:e4:43:38:d4:58:04:27:a0:90:71:fc:5c:22:
2d:85:32:c3:e9:11:29:93:87:76:fb:6f:fb:be:6a:44:79:dd:
d1:fb:42:a6:a6:d9:df:8e:8d:f7:b9:82:ad:64:fa:9d:a2:ef:
18:db:b5:c2:8d:f4:74:0e:b4:a3:73:41:d3:c3:2c:ae:b8:3d:
8a:80:61:79:7f:93:6e:51:fc:4c:78:85:b3:39:ce:39:7e:af:
89:d0:a7:84:50:64:6a:01:32:87:59:8f:72:49:5b:86:79:eb:
40:3a:b3:14:9c:1b:02:dc:94:fc:aa:5f:86:05:60:f4:f5:13:
76:5a:00:08:a3:f5:43:aa:bd:7e:90:4b:3a:b9:30:bc:48:0e:
47:d8:bc:af:45:8d:39:03:da:80:82:ed:dc:b5:01:ca:ed:d3:
8e:87:66:fe:11:be:75:cc:45:2a:aa:88:97:b1:23:47:91:a1:
24:84:e4:42:91:54:db:f9:87:69:e6:b2:a9:b1:7f:3c:6d:cd:
66:fd:be:7a:62:01:88:81:dd:79:a4:57:56:65:10:d3:6d:bc:
63:4b:77:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:01:57 2025 by rpki-client