Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/Feoglcvw_6-C4xgxUoU6eiA0vbo.roa
File: Feoglcvw_6-C4xgxUoU6eiA0vbo.roa (raw, json)
Hash identifier: i5QN1v0aIKZsC1I8BX0SBzxPphQ7cFRhZicwbqLkWoI=
Subject key identifier: 15:EA:20:95:CB:F0:FF:AF:82:E3:18:31:52:85:3A:7A:20:34:BD:BA
Certificate issuer: /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial: 0194DABA3F92D582E1699CEC782426D1CBEF
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/Feoglcvw_6-C4xgxUoU6eiA0vbo.roa
Signing time: Thu 06 Feb 2025 10:07:06 +0000
ROA not before: Thu 06 Feb 2025 10:07:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210895
IP address blocks: 91.198.166.0/24 maxlen: 24
185.253.7.0/24 maxlen: 24
212.162.155.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:da:ba:3f:92:d5:82:e1:69:9c:ec:78:24:26:d1:cb:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Validity
Not Before: Feb 6 10:07:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15ea2095cbf0ffaf82e3183152853a7a2034bdba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b1:a2:6e:fe:8c:58:92:c7:69:c0:fd:a3:f4:
61:f4:27:00:c5:44:a0:c4:fc:68:d0:64:2c:8e:de:
43:df:b8:ba:3f:96:f8:a2:b4:30:33:27:e7:9d:8b:
bd:22:4a:46:27:52:78:02:2f:38:86:97:43:4e:0e:
04:d7:a2:70:bd:0d:13:18:6f:82:74:50:93:38:90:
55:e0:24:db:7a:cb:3f:d5:69:5e:e4:97:02:4f:26:
5b:da:9c:15:1a:63:43:c6:6c:45:d6:b6:0a:df:e4:
14:a0:cd:f5:2a:82:5b:b1:0e:71:98:c0:30:85:5d:
cd:dc:fd:ba:75:8b:ff:c8:e3:2b:47:b0:2a:4f:71:
cf:cb:45:2a:98:4d:de:7b:b4:f0:8f:a4:ef:28:a6:
40:f8:74:7f:e5:8d:31:ee:34:02:f0:d8:c2:fd:d8:
89:4d:e4:fa:6c:1a:f9:b8:68:f1:44:33:2e:b4:71:
54:37:7c:f1:74:d3:40:b5:92:ca:02:55:52:f9:82:
ab:ef:db:27:90:06:e5:79:e7:15:bd:91:b3:8e:c5:
65:6c:ee:0f:a2:ef:e8:0e:31:82:4a:13:29:ee:5a:
bb:f1:7d:ae:c1:5c:df:5c:a2:2a:10:bc:1d:30:a0:
3f:24:23:3e:fa:48:4b:40:cc:06:22:39:77:19:fd:
3a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EA:20:95:CB:F0:FF:AF:82:E3:18:31:52:85:3A:7A:20:34:BD:BA
X509v3 Authority Key Identifier:
keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/Feoglcvw_6-C4xgxUoU6eiA0vbo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.166.0/24
185.253.7.0/24
212.162.155.0/24
Signature Algorithm: sha256WithRSAEncryption
36:b8:0b:8a:97:fc:8a:2b:63:05:47:51:dd:79:71:22:17:a4:
55:f2:bf:c3:12:09:4b:6a:63:4b:e6:d1:f4:7f:58:20:05:8c:
00:15:f0:0d:30:f2:02:12:1f:7a:80:07:b8:27:70:97:48:ef:
7d:7f:fd:f5:36:a4:66:34:4a:6d:2b:26:b5:ee:70:c1:3d:17:
8b:bc:e5:0e:20:3e:42:42:97:03:e3:8b:e8:35:62:1f:6b:fd:
bf:76:9f:89:61:bf:d8:78:6b:63:f5:f4:17:7c:d4:2b:2e:d8:
26:28:7e:8f:26:9e:a4:9c:a2:cf:c9:d9:8e:15:e0:1f:6b:4d:
14:09:d6:eb:13:9c:d1:40:bd:8f:bf:53:6f:ce:03:5b:80:b0:
0d:8f:79:9b:c3:65:ba:55:d7:eb:f9:ed:31:b7:90:e7:0e:14:
58:c6:c9:b6:d7:fd:ef:30:98:1a:48:e0:c0:43:f8:c7:f2:4e:
ee:06:13:c4:3e:a6:c9:e2:8f:75:ad:11:b6:ab:67:4e:e4:e0:
9b:75:b1:ff:a1:a3:9e:2e:e0:6a:8a:2b:14:3f:ac:d7:9e:a1:
4c:11:13:f7:f8:ad:19:2f:d0:57:e3:d9:29:7c:b2:4a:68:e9:
62:17:58:f1:7b:ed:50:a4:4d:0b:ef:d2:4f:76:ee:c9:94:51:
df:90:2b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:41:44 2025 by rpki-client