Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/7uSiA8HXWA8UBPDhlbJf6OPrStI.roa
File: 7uSiA8HXWA8UBPDhlbJf6OPrStI.roa (raw, json)
Hash identifier: FkBj3YOFMPVe1t2rUxjgfIEksgfiFnto6OU3DC0lCyA=
Subject key identifier: EE:E4:A2:03:C1:D7:58:0F:14:04:F0:E1:95:B2:5F:E8:E3:EB:4A:D2
Certificate issuer: /CN=480b4e6530f58db338e41d434e5c248eb8b49eb5
Certificate serial: 019420D5AD4640851203DC9CCE388560B446
Authority key identifier: 48:0B:4E:65:30:F5:8D:B3:38:E4:1D:43:4E:5C:24:8E:B8:B4:9E:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/7uSiA8HXWA8UBPDhlbJf6OPrStI.roa
Signing time: Wed 01 Jan 2025 07:47:41 +0000
ROA not before: Wed 01 Jan 2025 07:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 44628
IP address blocks: 91.211.176.0/24 maxlen: 24
91.211.178.0/24 maxlen: 24
91.211.179.0/24 maxlen: 24
91.237.232.0/24 maxlen: 24
91.237.233.0/24 maxlen: 24
91.237.234.0/24 maxlen: 24
91.237.235.0/24 maxlen: 24
195.42.136.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:ad:46:40:85:12:03:dc:9c:ce:38:85:60:b4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480b4e6530f58db338e41d434e5c248eb8b49eb5
Validity
Not Before: Jan 1 07:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eee4a203c1d7580f1404f0e195b25fe8e3eb4ad2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:d2:a8:27:45:90:51:38:6d:6c:1e:4b:c8:10:
78:60:61:9e:3f:10:fe:b2:78:0f:18:a9:32:f9:e3:
1b:19:a9:f0:8b:71:91:95:ef:67:98:77:0b:f4:6b:
26:d3:92:5e:93:a9:17:c9:c9:a7:34:8b:0e:3c:77:
dd:44:db:28:eb:15:02:7c:da:1a:f6:a0:2f:c1:d6:
4e:02:cf:46:69:75:bf:c3:11:64:9a:13:6e:8a:b2:
4f:8c:6b:b2:f6:25:e5:51:86:9c:d9:58:23:45:3b:
72:86:ed:83:8c:e2:1c:21:f5:37:d6:28:73:f0:ea:
d1:ef:df:62:3e:9b:4d:3a:7f:72:92:e2:e9:e3:c9:
c0:97:db:9b:16:f1:3e:dd:28:b7:e0:0e:93:b5:db:
33:cd:31:c2:7d:08:54:00:2e:a5:ef:74:6f:78:d2:
a8:5a:f0:d1:0e:ae:bd:db:e3:97:81:f4:52:96:40:
75:8f:72:a5:67:b2:56:4e:4e:8d:ce:9e:19:bc:04:
f3:03:dd:fe:d3:65:64:43:06:b5:ae:56:9a:2d:1e:
1e:61:52:6c:2b:dd:e1:21:5d:8a:74:dc:d6:d6:53:
f3:3c:1a:49:13:f1:df:f7:d7:aa:b2:af:cc:fc:f6:
74:86:7c:2d:6e:28:e4:2d:ff:95:c5:54:e9:62:1f:
b4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:E4:A2:03:C1:D7:58:0F:14:04:F0:E1:95:B2:5F:E8:E3:EB:4A:D2
X509v3 Authority Key Identifier:
keyid:48:0B:4E:65:30:F5:8D:B3:38:E4:1D:43:4E:5C:24:8E:B8:B4:9E:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAtOZTD1jbM45B1DTlwkjri0nrU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/7uSiA8HXWA8UBPDhlbJf6OPrStI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/2a72ee-ec1f-40c6-ad9d-5a4df896fc3e/1/SAtOZTD1jbM45B1DTlwkjri0nrU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.176.0/24
91.211.178.0/23
91.237.232.0/22
195.42.136.0/23
Signature Algorithm: sha256WithRSAEncryption
ce:c0:a9:09:2c:e4:54:cc:05:db:d8:7f:57:12:32:15:d4:b0:
a1:f3:94:4f:09:fe:3d:fb:e3:36:e6:70:85:ba:1b:30:dc:09:
16:68:c8:a0:91:6e:cb:cc:24:92:7c:10:0b:7d:36:ec:1e:e7:
6c:e9:82:f1:97:ce:f2:8a:eb:92:28:2b:04:79:97:99:96:55:
c3:e0:32:b4:8c:dc:b7:39:cb:62:48:c6:63:e5:b2:71:5e:51:
3a:f6:25:de:ae:5a:e1:0a:5c:9c:6d:db:07:3f:5e:6c:97:0e:
f7:8e:9c:af:0a:8b:1e:75:f3:66:e1:71:41:ea:02:ca:e7:2c:
f7:a4:66:fc:8a:d0:76:1b:70:97:80:03:34:5b:80:8d:c1:cc:
cd:21:cb:0e:04:08:94:0f:11:dc:43:04:8a:72:f4:1f:b7:51:
e1:83:16:dd:66:51:f7:ec:37:55:ed:67:6b:b2:d1:ea:c9:03:
ee:1f:81:ff:b3:3c:f7:a6:c8:60:9c:5b:04:96:c7:c1:98:bf:
71:89:1e:c6:a2:d2:00:38:3b:bb:1d:d2:ea:9e:d8:62:2f:88:
26:8f:14:1e:fb:ec:c7:c7:8e:ab:01:79:67:12:f4:b1:53:5a:
82:73:4f:30:5d:e6:14:14:1f:f5:82:28:dd:33:67:bb:52:3e:
22:b7:63:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:42:41 2025 by rpki-client