Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/FsJ3zITAe84c1D5csHES5hjciz4.roa
File: FsJ3zITAe84c1D5csHES5hjciz4.roa (raw, json)
Hash identifier: YNKbDTh8tdjiYkEUi21i1eLdfiJOkLdo8vV3R3CkNJc=
Subject key identifier: 16:C2:77:CC:84:C0:7B:CE:1C:D4:3E:5C:B0:71:12:E6:18:DC:8B:3E
Certificate issuer: /CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
Certificate serial: 019420D5AC29591C8CF72977D516E3F99CAC
Authority key identifier: 7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/FsJ3zITAe84c1D5csHES5hjciz4.roa
Signing time: Wed 01 Jan 2025 07:47:41 +0000
ROA not before: Wed 01 Jan 2025 07:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34309
IP address blocks: 91.197.228.0/22 maxlen: 24
185.181.116.0/22 maxlen: 24
2a0a:cb80::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ac:29:59:1c:8c:f7:29:77:d5:16:e3:f9:9c:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ba289ebe93351236a5580eb5b70102cf3f11dfc
Validity
Not Before: Jan 1 07:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16c277cc84c07bce1cd43e5cb07112e618dc8b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:87:56:dc:34:a0:e9:98:e8:7e:cf:71:50:ac:
4a:09:47:0e:f0:0c:fc:cd:61:ce:51:31:65:90:82:
72:33:73:0f:f8:19:af:7b:87:f7:8c:51:c4:9a:9b:
f1:bf:b6:82:20:3e:09:2e:af:ef:a1:ad:a2:2a:9c:
6b:11:81:2d:9d:a9:55:92:78:16:98:7d:f6:3c:4f:
fe:9d:2e:e3:6a:f4:6b:75:2a:bf:ca:d8:92:ec:cc:
20:bc:59:3f:24:dc:4d:da:ea:73:e0:2f:98:ec:76:
fe:1e:b8:76:ba:e9:b2:99:f2:6b:36:36:14:2e:61:
c9:fb:a3:f0:f9:ea:b1:d1:1f:94:22:ca:94:83:59:
d5:67:7d:2f:ca:1b:f8:cf:75:00:85:c1:70:e8:fc:
47:af:4c:8b:0d:94:14:de:66:0d:5f:30:2e:91:3b:
9d:fe:2d:4a:4c:9e:53:59:66:cb:60:af:42:35:6c:
7d:32:0f:27:60:db:e1:7d:b4:c6:40:54:67:0b:ad:
04:90:2e:29:65:78:38:ad:b2:18:8e:b3:aa:38:20:
2b:a6:79:08:52:f5:a9:ea:75:68:31:c8:86:eb:fc:
ae:2d:90:de:84:a6:c2:8d:f5:f0:17:07:69:df:e8:
a0:15:9a:96:a4:ec:2f:12:1d:b0:d9:36:8b:de:1c:
fd:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:C2:77:CC:84:C0:7B:CE:1C:D4:3E:5C:B0:71:12:E6:18:DC:8B:3E
X509v3 Authority Key Identifier:
keyid:7B:A2:89:EB:E9:33:51:23:6A:55:80:EB:5B:70:10:2C:F3:F1:1D:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/FsJ3zITAe84c1D5csHES5hjciz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/de1e7c-7d74-4ccc-9c6c-d163b5499e68/1/e6KJ6-kzUSNqVYDrW3AQLPPxHfw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.197.228.0/22
185.181.116.0/22
IPv6:
2a0a:cb80::/32
Signature Algorithm: sha256WithRSAEncryption
1e:98:a1:7f:dc:12:40:5e:0d:6c:27:46:4d:dc:2a:2c:66:5c:
9e:e9:00:a6:dc:22:2c:82:c2:45:65:70:36:7d:f3:1d:52:45:
1b:b8:85:60:2d:b9:a8:d1:19:d6:6a:9e:6e:96:98:3e:f3:74:
34:7e:f2:ea:92:8c:d0:b4:74:01:85:e6:aa:c1:79:f4:bd:97:
7b:d4:4f:f8:65:6f:03:88:93:8c:7b:f9:81:e2:27:4e:b9:e6:
4e:a9:b9:1d:6e:12:79:a5:0a:c0:d4:85:2b:c4:20:bf:84:a7:
b9:55:3e:4e:10:2c:2a:43:06:08:55:27:19:5e:32:f3:15:16:
11:c5:ee:36:ce:12:9f:bf:6c:df:cc:d0:82:e3:5c:87:fa:60:
a2:93:d5:bd:b9:e0:9a:0b:e6:8e:c4:57:b5:a6:c0:66:e2:97:
09:a4:de:7b:0b:19:7e:6e:b1:fa:c1:b6:2a:73:bd:95:af:3f:
a8:8b:e9:95:ca:e7:d3:73:5a:0a:30:42:87:73:70:7d:2b:a2:
7e:c5:6a:c9:09:2b:c3:bb:04:03:58:d4:7f:4e:53:79:ba:1d:
51:6c:db:0c:eb:be:7f:8b:96:93:45:23:4e:b9:3a:c4:8c:7f:
61:c6:ed:01:a1:a0:10:6f:32:69:c0:98:80:b8:bb:ba:af:76:
74:b0:92:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 02:53:05 2025 by rpki-client