Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/1-NglftYb2V7rgWaj06UP-4Fbxaw.roa
File: 1-NglftYb2V7rgWaj06UP-4Fbxaw.roa (raw, json)
Hash identifier: zvrixR1OfM7l+BuV+ILz2uoXSyiF2KQB8j15busAZgQ=
Subject key identifier: F8:D8:25:7E:D6:1B:D9:5E:EB:81:66:A3:D3:A5:0F:FB:81:5B:C5:AC
Certificate issuer: /CN=17eb3e00450198c8ad45ebf83e130219b93643a5
Certificate serial: 01942369A26DBF41E00AB6A039088E0712EE
Authority key identifier: 17:EB:3E:00:45:01:98:C8:AD:45:EB:F8:3E:13:02:19:B9:36:43:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/1-NglftYb2V7rgWaj06UP-4Fbxaw.roa
Signing time: Wed 01 Jan 2025 19:48:32 +0000
ROA not before: Wed 01 Jan 2025 19:48:32 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49256
IP address blocks: 91.214.12.0/24 maxlen: 24
91.214.13.0/24 maxlen: 24
91.214.14.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:a2:6d:bf:41:e0:0a:b6:a0:39:08:8e:07:12:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17eb3e00450198c8ad45ebf83e130219b93643a5
Validity
Not Before: Jan 1 19:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8d8257ed61bd95eeb8166a3d3a50ffb815bc5ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:89:83:a4:34:f4:cb:fa:c0:ed:5e:d4:03:
dd:07:cc:00:59:47:86:05:10:41:93:8c:10:37:ce:
48:bc:48:53:15:97:b3:87:be:19:47:12:3c:63:d2:
b9:77:a5:72:9b:58:f7:d7:34:69:ef:82:ce:53:9a:
14:0e:19:bd:4c:74:3d:8d:2c:9c:99:3c:ee:12:60:
8a:da:88:15:d8:cb:44:18:54:91:cb:60:86:1d:6e:
f5:e5:e5:11:2c:f8:42:75:4f:16:a5:77:3c:98:a0:
9e:70:ff:cb:ae:16:bd:8a:5f:71:d6:4e:a6:39:83:
a3:e3:85:3e:48:f8:80:0b:0b:47:0a:85:50:4a:ab:
b4:44:cb:f9:4f:18:b0:9c:0f:f8:aa:19:f5:c7:6f:
99:65:06:8d:75:90:bf:0e:38:57:42:04:3f:31:da:
5c:97:7e:83:9b:f8:b6:11:02:8e:87:34:40:a4:c8:
fc:e1:45:df:83:18:f8:9e:1e:47:6a:f6:50:46:37:
d6:86:5f:01:c5:d3:1c:14:f1:5b:db:80:08:40:23:
3f:a1:e6:17:73:77:f8:b0:72:e9:aa:6b:2c:8e:5d:
6c:ae:3e:ff:a7:13:47:88:3d:1e:93:2f:99:71:50:
69:ab:fc:d6:8b:27:2f:88:d2:14:12:d1:b8:9d:4b:
e3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:D8:25:7E:D6:1B:D9:5E:EB:81:66:A3:D3:A5:0F:FB:81:5B:C5:AC
X509v3 Authority Key Identifier:
keyid:17:EB:3E:00:45:01:98:C8:AD:45:EB:F8:3E:13:02:19:B9:36:43:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F-s-AEUBmMitRev4PhMCGbk2Q6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/1-NglftYb2V7rgWaj06UP-4Fbxaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/23640c-3065-43b8-b955-1888845ca859/1/F-s-AEUBmMitRev4PhMCGbk2Q6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.214.12.0-91.214.14.255
Signature Algorithm: sha256WithRSAEncryption
a7:6f:28:99:0d:81:50:4d:74:ef:02:f8:0d:35:57:41:27:3f:
e6:57:0a:78:ff:e8:ef:6f:ac:7a:dd:9c:85:e9:64:fb:9c:2f:
b4:7d:d4:c4:03:b6:e9:e2:82:08:ac:bc:40:f3:15:ee:9b:d7:
2f:bd:ac:b2:34:12:06:89:2f:05:50:d2:62:37:a0:c1:96:38:
25:fb:93:9d:73:68:62:b5:7a:f0:9d:28:9d:51:17:3c:ee:00:
fd:e3:c9:bc:25:e8:9d:68:99:5e:47:f9:28:d9:04:4c:0f:71:
82:73:71:a2:77:86:a8:8d:a0:59:d6:d8:b3:ec:0c:ed:92:d3:
ca:f8:46:3b:48:61:77:fd:bc:ec:b3:f9:ac:59:ea:24:70:19:
d8:23:a0:64:1b:7c:30:36:c5:ea:0b:93:71:62:5a:7a:55:92:
39:0d:d2:6e:7a:91:2b:ed:0b:b8:a3:69:91:bb:e9:13:f8:4f:
bf:90:f2:6c:94:7f:5d:b8:38:ea:e8:a6:88:ff:90:f3:8d:63:
31:89:a4:82:83:8d:63:d6:26:3e:35:cd:3d:cd:41:6c:16:78:
0d:be:34:b7:40:d8:1a:28:63:af:00:75:ad:4d:9e:dd:b7:70:
59:04:0f:ac:2c:ba:03:e6:e0:d3:9f:0a:db:b8:c9:04:55:87:
17:21:d6:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:14:10 2025 by rpki-client