Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/7GX1lZVeLo3tMPZ_96U2RRiGaZs.roa
File: 7GX1lZVeLo3tMPZ_96U2RRiGaZs.roa (raw, json)
Hash identifier: uV4Pe3KGuUmkJxVlzenbcloupWcKznvXk3AcAb5u9K8=
Subject key identifier: EC:65:F5:95:95:5E:2E:8D:ED:30:F6:7F:F7:A5:36:45:18:86:69:9B
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 0195138697DB6545337EF6C012D7A7FB579B
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/7GX1lZVeLo3tMPZ_96U2RRiGaZs.roa
Signing time: Mon 17 Feb 2025 10:49:02 +0000
ROA not before: Mon 17 Feb 2025 10:49:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 834
IP address blocks: 91.102.166.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:13:86:97:db:65:45:33:7e:f6:c0:12:d7:a7:fb:57:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Feb 17 10:49:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec65f595955e2e8ded30f67ff7a536451886699b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:5b:24:1c:8e:f4:85:49:d7:34:0f:6a:70:ca:
d0:2b:2d:21:4f:19:3c:7d:7e:97:86:a5:0c:86:0a:
ae:75:1b:dc:2e:17:56:44:ee:e3:3c:1a:19:14:3c:
74:a9:9c:84:87:a9:df:18:70:e2:48:e8:c6:eb:47:
19:f5:ce:19:2c:71:35:25:25:cb:20:7e:4d:35:91:
e9:bf:44:a1:39:0a:d6:02:5e:e0:ab:83:5a:e5:8d:
62:62:1b:53:7e:1e:9e:31:c8:9d:a7:c7:e3:80:2d:
43:9f:81:9b:df:d0:d0:d7:14:41:7f:c5:8a:7b:d7:
71:31:1f:b8:b3:a5:36:50:6c:8c:23:50:b9:9f:d0:
44:b7:e9:8f:ed:5c:5d:9f:fe:0c:61:87:08:c4:ef:
18:af:0a:69:d4:7e:b0:bd:8b:a9:1e:60:db:f9:e7:
bf:18:65:2e:94:16:29:04:fc:9f:82:4b:ee:99:8d:
a0:7d:0d:27:6e:ce:6e:e3:df:c4:68:12:82:15:bd:
17:cd:3f:7f:78:e2:2b:82:0d:a1:8c:63:d3:11:5f:
b8:e9:39:3a:d6:76:af:5e:be:fb:55:ed:cb:b6:2c:
4d:c6:36:6d:6e:71:15:04:67:5d:05:80:7f:71:7e:
55:df:47:1e:bb:2e:12:7a:53:61:b4:ee:0c:58:cc:
7c:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:65:F5:95:95:5E:2E:8D:ED:30:F6:7F:F7:A5:36:45:18:86:69:9B
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/7GX1lZVeLo3tMPZ_96U2RRiGaZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.166.0/24
Signature Algorithm: sha256WithRSAEncryption
94:80:d1:2f:7b:b0:b9:63:46:a4:92:6f:3c:36:49:a6:95:3e:
6b:ac:ce:ff:b6:32:e7:56:d5:3d:d7:b7:25:e8:f0:75:f4:e1:
7e:78:b0:85:00:bc:1b:ce:c0:3e:a2:64:b1:16:f0:fe:f7:e6:
8f:46:96:c9:bb:57:a0:9c:f6:ea:08:ed:d7:77:72:fd:54:0a:
55:f2:60:78:be:48:da:7e:46:7a:d4:37:c6:1a:35:5e:13:31:
fa:f5:f5:3f:d8:46:d2:9e:6d:13:a1:e9:cf:81:4a:a0:3b:a5:
e9:69:dc:f6:22:50:e9:5f:a9:40:ad:18:a5:0d:c8:1a:f7:b0:
36:0f:36:c9:85:2f:02:83:81:19:27:f0:52:17:bf:65:4d:ad:
5a:c4:88:82:0f:d0:10:4b:e6:d8:86:16:b8:1e:c9:9f:79:04:
1b:9c:26:f2:51:90:ff:97:6f:fd:15:b2:f3:be:b8:86:19:d5:
8e:1e:83:bf:7d:47:23:fe:0d:02:de:19:ad:78:1a:c1:4e:b5:
9c:00:78:db:f2:dc:64:50:cb:97:e4:ee:d4:da:4e:8b:e3:ae:
be:a6:a4:22:9a:9f:6c:25:91:40:3b:72:c4:4c:2a:01:0a:72:
40:5d:fa:5d:1f:07:bb:aa:e3:03:2d:42:7f:7e:e7:77:a4:71:
56:d9:96:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 12:34:29 2025 by rpki-client