Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/F9Q0Mg_SdChrVPmjRELNfy5ikeQ.roa
File: F9Q0Mg_SdChrVPmjRELNfy5ikeQ.roa (raw, json)
Hash identifier: D+oypEIJiZTBGT95av8yorKEZBq5uNCWOIeANOZvJiA=
Subject key identifier: 17:D4:34:32:0F:D2:74:28:6B:54:F9:A3:44:42:CD:7F:2E:62:91:E4
Certificate issuer: /CN=07c9ca1e278307bae2405a4834af447c06414701
Certificate serial: 0194221FC8C8002F92595849145489300D61
Authority key identifier: 07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/F9Q0Mg_SdChrVPmjRELNfy5ikeQ.roa
Signing time: Wed 01 Jan 2025 13:48:15 +0000
ROA not before: Wed 01 Jan 2025 13:48:15 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200322
IP address blocks: 91.217.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:c8:c8:00:2f:92:59:58:49:14:54:89:30:0d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07c9ca1e278307bae2405a4834af447c06414701
Validity
Not Before: Jan 1 13:48:15 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=17d434320fd274286b54f9a34442cd7f2e6291e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b0:23:b4:a7:63:06:21:3f:84:e9:49:95:d8:
16:8b:51:36:ac:bb:bf:75:9a:ed:ce:51:85:a5:54:
c6:b5:c5:4c:74:fe:6b:48:74:91:ab:fe:6c:57:ba:
a1:8c:fc:75:9c:07:cb:72:3a:dd:c1:07:8e:22:14:
7c:a7:e5:bc:63:4c:3c:cc:ad:ed:34:84:b0:fa:c5:
b0:70:a4:1c:62:ae:a5:94:de:3d:ad:a6:e9:af:3b:
6b:56:9a:46:36:9b:9e:45:91:ce:64:f0:dc:3c:c8:
4e:89:36:db:e7:47:d2:54:13:1b:3a:17:b8:9b:b8:
2c:9b:5d:a6:ce:33:14:ca:b7:90:1f:e6:e8:b8:0a:
ac:41:63:8a:23:da:53:08:62:f0:2e:d5:57:14:66:
22:40:dd:8e:37:bb:a7:2f:9d:71:c6:86:57:4a:3e:
b1:9d:1b:38:6a:c0:84:a9:02:85:aa:9a:2a:fa:a8:
d5:5b:a7:89:0b:a4:78:48:49:4f:74:93:10:5f:62:
41:23:14:ea:0a:2f:c1:fa:e3:6e:8d:4c:cf:bf:8d:
62:2f:83:5f:b2:b0:f8:07:dd:05:54:4f:b8:e5:2b:
67:62:49:34:47:2a:ce:b2:ce:84:fb:5c:96:70:a1:
53:82:5a:e4:69:0d:13:e5:06:2b:3a:a0:fe:a9:40:
67:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:D4:34:32:0F:D2:74:28:6B:54:F9:A3:44:42:CD:7F:2E:62:91:E4
X509v3 Authority Key Identifier:
keyid:07:C9:CA:1E:27:83:07:BA:E2:40:5A:48:34:AF:44:7C:06:41:47:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B8nKHieDB7riQFpINK9EfAZBRwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/F9Q0Mg_SdChrVPmjRELNfy5ikeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/263c26-7dca-4512-834f-005edfb761c6/1/B8nKHieDB7riQFpINK9EfAZBRwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.154.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:15:f9:bf:fd:e4:8e:7c:ae:c1:c0:ab:8c:ec:e5:6d:07:1f:
02:f6:47:06:c7:8c:c5:e5:cc:5d:53:96:1b:5b:52:52:35:f9:
4e:51:e2:d5:d9:62:f1:3f:b6:0c:22:7d:e5:55:75:16:95:c1:
7a:49:2e:31:35:6b:17:39:b4:65:ef:e8:57:a4:c0:90:65:c0:
7b:e3:63:b6:44:73:4e:99:b8:17:33:1c:7b:6c:96:53:49:f3:
3d:b6:4f:31:4c:44:d1:67:32:c2:c4:5e:85:f6:f1:50:06:6b:
2b:4d:95:8e:5a:a7:68:7f:76:a4:3f:ec:5b:e0:1e:5c:a4:aa:
72:37:c8:2b:8f:2f:3e:5d:a0:85:47:9d:22:bd:94:de:2d:40:
b5:ab:e1:92:48:28:9f:0e:10:84:88:ca:f6:07:67:6c:64:f0:
6c:9e:0b:98:f8:76:c0:cc:3d:38:c9:a8:eb:68:be:1d:27:64:
99:06:49:0b:3d:a6:c0:48:c0:26:4f:e0:1f:6f:bc:99:a1:28:
85:ae:a1:99:94:90:1e:4f:30:7e:c7:bc:b1:67:91:e7:bc:59:
c8:5d:58:08:31:3d:8c:8d:3c:98:de:86:db:80:a6:fc:4e:09:
70:6d:75:ea:68:30:19:ea:a3:3e:0c:3a:70:d6:3b:dc:3a:f2:
a1:64:b5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 03:12:00 2025 by rpki-client