Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/1-Bi08UyF5kDlTfAFEBLTv3vJUyE.roa
File: 1-Bi08UyF5kDlTfAFEBLTv3vJUyE.roa (raw, json)
Hash identifier: sX+xxidCxJKw0arEwxAVgO2x+NsuL6KJIlJ1Hn044sM=
Subject key identifier: F8:18:B4:F1:4C:85:E6:40:E5:4D:F0:05:10:12:D3:BF:7B:C9:53:21
Certificate issuer: /CN=237f7db033314c473cda194e0df79f1c375da3f4
Certificate serial: 019426D9622712391475657A5FE1C5359147
Authority key identifier: 23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/1-Bi08UyF5kDlTfAFEBLTv3vJUyE.roa
Signing time: Thu 02 Jan 2025 11:49:28 +0000
ROA not before: Thu 02 Jan 2025 11:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6453
IP address blocks: 91.140.128.0/17 maxlen: 24
194.54.192.0/18 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:62:27:12:39:14:75:65:7a:5f:e1:c5:35:91:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237f7db033314c473cda194e0df79f1c375da3f4
Validity
Not Before: Jan 2 11:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f818b4f14c85e640e54df0051012d3bf7bc95321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2f:0a:dd:b6:e1:d8:16:bb:83:4e:12:c8:0c:
90:c0:df:4d:25:c1:c5:72:5e:b1:3b:85:c9:b7:88:
62:e8:00:e5:d2:1c:67:81:ba:1d:3c:fb:5c:69:00:
57:63:02:e0:4a:57:b4:58:55:cd:1b:b3:a6:11:34:
5f:ff:cf:91:9f:fa:49:d2:9b:e5:30:72:a4:ff:eb:
a2:cf:0d:d9:03:96:f0:49:e9:4f:7f:1e:33:28:d6:
ea:33:42:e8:fd:21:33:54:cf:21:09:da:ff:8b:81:
69:21:32:e3:25:52:37:e6:3f:29:ae:4a:a8:9c:69:
73:49:f2:40:ba:82:b1:a0:4b:ee:82:14:35:bb:0e:
c6:f3:23:72:39:b9:30:6b:31:03:d7:4b:3a:4c:2f:
80:bd:3d:ed:5b:88:01:e6:1c:01:e9:c9:fd:34:b1:
81:58:52:92:88:f1:8a:dc:2c:dc:25:36:5e:34:04:
9f:4c:ca:ae:63:cf:4e:f8:a8:5a:48:0f:bc:41:95:
05:97:8f:e6:03:52:84:80:29:73:bf:8b:4e:2c:c4:
cf:95:9e:27:24:ea:05:ce:4c:37:83:52:41:e6:12:
2a:fe:f1:7b:a3:68:7b:aa:aa:99:c2:79:dc:67:cf:
d5:8c:f2:01:7c:ee:3c:99:7a:5b:7b:95:46:f5:7d:
54:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:18:B4:F1:4C:85:E6:40:E5:4D:F0:05:10:12:D3:BF:7B:C9:53:21
X509v3 Authority Key Identifier:
keyid:23:7F:7D:B0:33:31:4C:47:3C:DA:19:4E:0D:F7:9F:1C:37:5D:A3:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I399sDMxTEc82hlODfefHDddo_Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/1-Bi08UyF5kDlTfAFEBLTv3vJUyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/eef557-0e10-40ce-a48f-ee0603949f93/1/I399sDMxTEc82hlODfefHDddo_Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.140.128.0/17
194.54.192.0/18
Signature Algorithm: sha256WithRSAEncryption
89:66:6a:d7:41:c1:8a:d5:f9:99:06:fb:90:37:85:df:2f:55:
6e:5f:92:cb:aa:aa:0e:b0:95:75:31:63:2e:22:2c:e4:f3:58:
49:c4:bd:3b:f0:a5:a8:cf:06:bf:fc:70:4a:a1:45:1b:20:9d:
ef:1b:d1:8e:46:9f:5f:47:d9:e0:67:25:a5:ae:76:b3:c4:5c:
ee:61:0c:62:fe:59:27:31:6e:b8:f1:ec:f0:00:3d:bb:38:47:
ed:cb:6f:2c:ae:47:15:b8:26:e8:2c:58:33:b2:5b:0e:e3:82:
e4:8d:70:ac:e1:4e:6b:d4:55:76:9d:14:58:18:53:4a:ba:81:
86:86:cc:26:f7:37:4a:62:f8:01:c5:3c:67:97:f1:ec:6c:25:
37:7b:f5:66:22:41:97:83:4b:ad:c1:39:58:30:57:92:f9:6b:
0b:04:51:5f:b0:cd:39:7e:f9:d8:b6:3e:19:a6:52:4b:c4:07:
28:b1:ac:9f:82:3e:11:ac:54:ab:43:88:6c:80:dc:ed:89:68:
ab:69:f9:44:8e:38:9d:61:c7:13:3c:e5:40:21:21:b0:cd:1f:
01:eb:96:0f:a6:6f:e5:d9:1f:da:51:f7:a0:23:2f:eb:ec:13:
61:fa:28:64:26:b6:93:5e:f3:6e:49:17:c1:03:0a:f8:4f:24:
e2:74:34:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 05:28:16 2025 by rpki-client