Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/exmtqeslQldhovSpOC-CSOrLj4s.roa
File: exmtqeslQldhovSpOC-CSOrLj4s.roa (raw, json)
Hash identifier: IXHYJUqvNFWkYhESKi5QnQyfrtPde8hk0KEfvOUYiSw=
Subject key identifier: 7B:19:AD:A9:EB:25:42:57:61:A2:F4:A9:38:2F:82:48:EA:CB:8F:8B
Certificate issuer: /CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Certificate serial: 019425217A7C106028AD46E682CB3733710A
Authority key identifier: 9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/exmtqeslQldhovSpOC-CSOrLj4s.roa
Signing time: Thu 02 Jan 2025 03:48:58 +0000
ROA not before: Thu 02 Jan 2025 03:48:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 41236
IP address blocks: 86.107.58.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:7a:7c:10:60:28:ad:46:e6:82:cb:37:33:71:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c542f5df3c1acb857fd50eeb016eed07385ff8c
Validity
Not Before: Jan 2 03:48:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7b19ada9eb25425761a2f4a9382f8248eacb8f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:cf:a2:df:43:ae:c5:c3:25:e7:70:f6:21:13:
4a:d2:03:a3:8a:93:37:95:18:77:5e:de:3f:09:61:
af:7e:46:fc:0f:a3:54:4e:5f:87:d5:e0:40:03:63:
cd:4f:89:0f:9d:2c:08:f0:07:eb:da:66:d6:62:e7:
77:f4:29:79:26:f6:e9:fd:c8:a0:ab:0c:b9:df:f6:
08:71:05:87:20:0e:37:65:cc:c4:4e:b5:e8:17:68:
db:17:4f:b1:41:e2:ed:c4:75:99:4d:6d:3e:c5:ab:
4e:41:ce:d7:63:3b:b8:20:2b:ee:5e:07:14:83:cc:
f4:4d:95:d3:ff:a5:b5:2c:a0:66:7a:c1:15:54:28:
50:25:03:af:3e:6a:52:41:85:ec:a8:f9:de:d4:a4:
14:35:6f:3d:ba:38:c4:d0:64:d1:87:32:86:b5:fe:
a0:99:1c:06:12:8f:6b:0a:7b:ea:45:44:8f:1b:ce:
15:e7:00:49:f6:66:17:7c:86:23:1e:03:1a:18:9c:
38:cc:39:4b:ef:16:e7:4e:f3:ca:e3:e2:f5:f0:e7:
a8:e9:70:0a:d5:f2:fa:1a:07:3d:f7:a0:29:0e:ad:
e0:5a:5e:bf:19:1f:08:80:97:47:96:47:55:1b:e1:
9c:62:55:22:86:f5:58:3d:92:12:8d:ee:ae:be:14:
b1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:19:AD:A9:EB:25:42:57:61:A2:F4:A9:38:2F:82:48:EA:CB:8F:8B
X509v3 Authority Key Identifier:
keyid:9C:54:2F:5D:F3:C1:AC:B8:57:FD:50:EE:B0:16:EE:D0:73:85:FF:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFQvXfPBrLhX_VDusBbu0HOF_4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/exmtqeslQldhovSpOC-CSOrLj4s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb791b-8013-458a-9a1e-25dbf43804c5/1/nFQvXfPBrLhX_VDusBbu0HOF_4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.58.0/24
Signature Algorithm: sha256WithRSAEncryption
37:82:17:35:3e:5c:ba:9c:0a:09:2d:b2:2d:d1:d3:31:90:58:
05:e0:51:0a:5d:d8:09:29:09:aa:d8:4a:4a:c7:eb:e0:a2:46:
ce:8a:eb:dc:64:c0:91:be:f2:7f:05:c6:45:c1:cb:61:79:d4:
bb:b1:38:07:e5:df:d9:b9:f6:3c:aa:38:82:aa:35:ec:76:46:
86:41:f6:0b:ca:33:25:e6:88:2b:d4:dd:f0:50:6e:25:0d:1e:
53:fb:53:e1:1c:8e:b9:34:a2:35:bb:f2:a9:f5:5d:04:b0:8e:
be:65:69:1a:d6:57:9e:87:61:51:56:f8:ed:1b:51:d9:ca:c4:
d3:40:85:02:59:4e:fb:13:ec:63:13:2b:47:a2:88:4e:3d:91:
4c:b4:78:71:e5:37:42:fd:07:92:59:7c:93:ea:e1:69:7b:06:
eb:e1:82:95:31:7e:e6:70:1c:94:3d:08:2f:69:7f:bd:e5:99:
2d:43:d8:48:ef:5b:51:03:0f:34:2e:7d:3d:8d:ff:ba:84:f0:
03:8b:7f:78:d3:16:72:e1:00:f2:78:77:d7:0f:81:8b:aa:85:
6b:cd:28:0d:e7:8e:19:1d:af:6d:9d:5d:9e:10:27:c7:74:a5:
76:68:fa:40:03:bf:6d:13:45:6d:13:de:74:30:6b:19:46:e1:
74:2a:38:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:38:48 2025 by rpki-client