Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/__CEWF990Vxq8pEt2SNVqHsNXfU.roa
File: __CEWF990Vxq8pEt2SNVqHsNXfU.roa (raw, json)
Hash identifier: Q5kqGI2Xj+ot1it1S+fO3Hx4lJ1AbcGy9uzJovk8YkY=
Subject key identifier: FF:F0:84:58:5F:7D:D1:5C:6A:F2:91:2D:D9:23:55:A8:7B:0D:5D:F5
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 019422FB67595B237A82CB847C5A575FBC2B
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/__CEWF990Vxq8pEt2SNVqHsNXfU.roa
Signing time: Wed 01 Jan 2025 17:48:08 +0000
ROA not before: Wed 01 Jan 2025 17:48:08 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 86.104.199.0/24 maxlen: 24
89.35.14.0/24 maxlen: 24
93.117.131.0/24 maxlen: 24
93.119.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:67:59:5b:23:7a:82:cb:84:7c:5a:57:5f:bc:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Jan 1 17:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fff084585f7dd15c6af2912dd92355a87b0d5df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d8:99:10:28:c0:60:b3:26:5e:de:02:36:0a:
3b:25:53:c0:67:39:e6:b6:7e:ca:ae:12:c9:b6:09:
bd:9a:28:1b:f3:fb:ba:ad:e6:ef:1d:46:c3:0d:b0:
cb:a7:1c:46:d7:5c:f2:89:7e:57:42:d7:0b:8c:88:
d9:62:69:94:13:b0:59:8c:e7:a8:9f:c0:d8:2b:0c:
a4:35:c5:34:54:8f:da:8d:22:91:15:ee:ca:4e:e0:
02:12:c1:6c:ba:ed:7b:87:60:7f:73:20:91:83:9e:
9b:0e:95:f1:f6:0f:63:b1:7c:96:36:07:8b:19:3b:
e2:9e:e9:4b:2e:f9:22:c2:2a:7f:c8:d9:20:e7:95:
11:43:3a:63:2b:ff:d2:c8:d0:54:24:53:44:f4:7e:
21:bd:6d:16:2d:6b:c1:24:86:ff:c6:1e:f3:9e:40:
b9:c5:cf:35:3c:4d:ff:1c:cb:22:c0:96:54:40:90:
68:00:cb:9d:2c:0d:cd:17:f6:38:d2:73:b2:1a:6d:
f5:59:d7:d0:c7:a2:dc:e4:da:54:57:36:5c:14:14:
2a:8a:e5:2d:04:e3:0f:22:24:dc:11:0c:0d:1c:e7:
eb:c3:a8:66:02:03:e7:04:ac:7d:e4:a7:b1:5b:63:
5e:40:27:ef:63:80:48:82:d7:18:16:d9:c7:e4:40:
6d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:F0:84:58:5F:7D:D1:5C:6A:F2:91:2D:D9:23:55:A8:7B:0D:5D:F5
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/__CEWF990Vxq8pEt2SNVqHsNXfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.199.0/24
89.35.14.0/24
93.117.131.0/24
93.119.144.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:06:5b:84:eb:59:eb:1c:51:4d:50:25:54:ff:d4:51:db:53:
5c:71:86:24:b2:3f:4a:71:ba:34:05:e2:a8:09:a8:ad:82:b3:
92:8d:ec:75:ac:62:9b:ae:57:da:b6:13:3c:4d:5a:05:71:ff:
f9:7e:67:98:51:0d:f8:8b:24:44:a0:28:43:00:c3:6c:1d:97:
15:24:03:ab:dc:2b:a1:49:5e:a6:7a:eb:b6:3b:31:0f:dd:6a:
2c:7b:6c:2a:e9:19:d1:59:7f:fb:28:af:07:76:3a:6c:6a:6b:
0e:e7:52:cf:db:9c:3c:65:2e:bb:9a:ed:0a:b2:cc:98:a2:90:
9d:7d:23:ed:f5:da:4b:a3:ea:13:4a:30:4b:0c:4c:fa:de:8a:
fb:09:4e:7e:b2:fe:fe:0b:ef:f2:13:f0:ae:96:40:8f:83:35:
2e:b9:57:03:83:7d:a9:e6:4b:0e:a5:b5:1e:06:e7:3e:1d:a9:
09:72:85:a9:ce:02:b4:25:f3:e9:b3:5f:d0:35:09:57:6e:d5:
18:ae:72:1a:bb:f8:43:a2:12:dd:26:94:1a:45:39:3a:6a:f0:
80:3d:11:8e:60:78:94:e5:8e:81:46:b8:01:00:10:00:2c:61:
92:80:c3:85:15:56:ff:67:e0:c3:97:68:35:1a:aa:2d:2c:ad:
0b:03:a4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:48 2025 by rpki-client