Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/2b4a15-96e9-464c-aedb-0b22ff6be72a/1/_nr8efpDaJxadk33WkOEiQ7M208.roa
File: _nr8efpDaJxadk33WkOEiQ7M208.roa (raw, json)
Hash identifier: PbRv2Ev5xf8QzhCW96a+L/LrFHonlGWPq5mlgMvK+fs=
Subject key identifier: FE:7A:FC:79:FA:43:68:9C:5A:76:4D:F7:5A:43:84:89:0E:CC:DB:4F
Certificate issuer: /CN=ad4a5c7361896c07009c2610075eaf2292f80778
Certificate serial: 019305CB7A073EBE79120E7E8E1A9A04F858
Authority key identifier: AD:4A:5C:73:61:89:6C:07:00:9C:26:10:07:5E:AF:22:92:F8:07:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUpcc2GJbAcAnCYQB16vIpL4B3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/2b4a15-96e9-464c-aedb-0b22ff6be72a/1/_nr8efpDaJxadk33WkOEiQ7M208.roa
Signing time: Thu 07 Nov 2024 08:44:01 +0000
ROA not before: Thu 07 Nov 2024 08:44:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 21022
IP address blocks: 91.196.154.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:05:cb:7a:07:3e:be:79:12:0e:7e:8e:1a:9a:04:f8:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4a5c7361896c07009c2610075eaf2292f80778
Validity
Not Before: Nov 7 08:44:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fe7afc79fa43689c5a764df75a4384890eccdb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:51:02:7a:9a:11:db:4a:c8:71:a2:bf:c7:fd:
7c:85:4e:9e:e8:f2:10:89:08:49:b4:c0:e0:f2:64:
3b:b2:4c:71:3f:ba:e0:6e:d4:72:4d:5a:a1:5e:6e:
a0:9a:ae:ed:c3:dd:5d:0f:61:c3:d2:d2:9a:c2:41:
6c:91:cf:f4:e5:f4:62:72:ba:af:33:49:b7:cd:e8:
51:a1:de:83:37:f3:9d:56:6b:be:00:d3:ad:6e:aa:
86:d6:1f:70:f1:64:54:55:98:c0:14:53:51:7b:86:
f4:5d:ee:1f:b3:3e:f5:db:f0:f8:68:f9:45:c8:98:
31:ae:8e:bd:c7:ed:a2:75:6f:a0:a5:81:db:1c:51:
f0:3d:0b:35:31:d0:92:f7:16:5e:14:e9:69:45:b7:
0c:76:44:40:6c:10:32:44:e9:3d:b9:d8:be:62:cf:
52:a1:11:43:89:8f:7b:1d:5f:f8:49:2f:bd:32:23:
56:59:39:1d:ca:88:3c:c6:b9:94:11:0d:a3:63:5e:
f2:12:85:bb:e0:bc:5a:77:52:f9:f0:1b:e4:f7:73:
93:e6:b5:fd:42:49:3c:3a:b3:37:e7:4c:0d:12:86:
70:6e:69:8b:71:49:39:2c:cb:00:25:e6:55:bd:bb:
8d:ae:06:d2:fb:af:56:92:be:61:0e:b6:9b:53:76:
00:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:7A:FC:79:FA:43:68:9C:5A:76:4D:F7:5A:43:84:89:0E:CC:DB:4F
X509v3 Authority Key Identifier:
keyid:AD:4A:5C:73:61:89:6C:07:00:9C:26:10:07:5E:AF:22:92:F8:07:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUpcc2GJbAcAnCYQB16vIpL4B3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2b4a15-96e9-464c-aedb-0b22ff6be72a/1/_nr8efpDaJxadk33WkOEiQ7M208.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/2b4a15-96e9-464c-aedb-0b22ff6be72a/1/rUpcc2GJbAcAnCYQB16vIpL4B3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.196.154.0/24
Signature Algorithm: sha256WithRSAEncryption
67:2c:ac:0f:17:cc:59:82:f6:a1:bb:0d:31:d8:a6:c2:5f:05:
6d:e7:d2:06:63:f3:5d:e4:ea:92:9a:90:dc:36:87:30:8e:d2:
da:d6:6b:fb:09:a4:2c:3b:07:56:fe:b7:99:bb:15:34:b6:3b:
29:f8:ff:ba:0c:c5:45:07:95:37:cf:31:d6:d9:0a:dd:99:7f:
6c:de:96:c2:10:81:53:e6:76:24:53:e8:09:5f:ba:fa:62:da:
8d:a0:a0:e5:25:b3:05:41:fa:a6:31:cb:bc:4f:46:53:88:a8:
a8:19:bd:7f:19:2f:4b:c5:02:31:9e:52:fb:73:01:99:b8:ac:
66:17:1a:4d:11:f2:23:aa:9a:7a:a8:78:81:57:c0:b8:91:0f:
57:36:19:ba:29:19:21:00:f3:62:89:e8:a9:f6:af:2c:85:70:
a5:3b:3d:43:10:9a:32:75:31:7a:f3:be:5a:3c:b9:bc:a8:2a:
6a:99:33:ed:2c:87:5a:3d:f3:9a:11:4b:12:bc:8a:ff:b5:17:
96:b4:4f:f4:00:c8:14:d6:86:5b:46:22:c1:49:01:b6:7a:85:
29:a4:20:ac:58:bd:0d:7e:ff:61:f7:d1:66:c7:3e:44:84:94:
e9:32:80:ea:af:f9:34:4f:4b:9c:9c:61:83:8b:2e:8a:44:1a:
bf:ec:04:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 02:15:07 2025 by rpki-client