Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/FrjAEg86v5SV-4VLldw-NEA5C1M.roa
File: FrjAEg86v5SV-4VLldw-NEA5C1M.roa (raw, json)
Hash identifier: Rm7Xoat+7nBF56KNvwJMCJ6wscvSb/PfpXRNxa3KAIc=
Subject key identifier: 16:B8:C0:12:0F:3A:BF:94:95:FB:85:4B:95:DC:3E:34:40:39:0B:53
Certificate issuer: /CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Certificate serial: 01941F8C877EC8DAFD59996390BFA8B3039A
Authority key identifier: E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/FrjAEg86v5SV-4VLldw-NEA5C1M.roa
Signing time: Wed 01 Jan 2025 01:48:10 +0000
ROA not before: Wed 01 Jan 2025 01:48:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25514
IP address blocks: 91.218.12.0/22 maxlen: 22
195.34.90.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:87:7e:c8:da:fd:59:99:63:90:bf:a8:b3:03:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7185120e7a3b962b9ffe4abed16d0aa3a320518
Validity
Not Before: Jan 1 01:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=16b8c0120f3abf9495fb854b95dc3e3440390b53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:bd:6a:93:1b:50:72:8e:4e:3f:e3:df:b0:dc:
09:48:10:ca:99:9c:45:15:10:a9:55:5c:d6:4e:b0:
fb:ad:b2:dc:4b:87:7a:1c:67:34:0d:38:74:55:a4:
d9:e6:18:bf:95:10:40:a7:2c:f8:74:0e:cf:d3:74:
b6:79:2d:c9:02:e5:68:8f:d0:a8:eb:b5:c0:cb:50:
65:1d:0c:64:8e:2c:92:33:e0:62:49:53:ea:f5:20:
75:b1:5e:32:bd:8d:41:4a:eb:93:06:d5:ce:ab:85:
5b:49:4a:c9:67:d4:26:5d:68:53:ea:5d:91:42:2e:
db:89:4f:9c:da:50:b3:d9:fd:ce:e0:1e:c5:4c:32:
b5:9a:a9:99:12:14:08:ae:fd:e1:41:26:65:54:55:
cd:82:3b:f8:68:58:60:60:1b:a4:dd:66:da:16:31:
4d:e6:d5:0d:54:cc:37:ca:3f:ff:dd:2b:b7:5a:7c:
ee:c1:20:d7:d4:81:cd:61:db:3e:31:22:42:9e:b4:
c3:45:c1:bb:36:0d:68:f0:50:93:58:df:9b:51:fd:
09:4c:34:49:ac:0f:2d:b6:55:0c:05:ab:f7:95:42:
89:d0:90:bd:c5:d0:ac:98:86:b8:7c:48:73:ce:2c:
af:81:23:36:90:49:a8:56:bd:60:f7:ab:c8:2b:ed:
f4:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B8:C0:12:0F:3A:BF:94:95:FB:85:4B:95:DC:3E:34:40:39:0B:53
X509v3 Authority Key Identifier:
keyid:E7:18:51:20:E7:A3:B9:62:B9:FF:E4:AB:ED:16:D0:AA:3A:32:05:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xhRIOejuWK5_-Sr7RbQqjoyBRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/FrjAEg86v5SV-4VLldw-NEA5C1M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/80001d-b581-45fb-9138-89c6420d6f36/1/5xhRIOejuWK5_-Sr7RbQqjoyBRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.12.0/22
195.34.90.0/23
Signature Algorithm: sha256WithRSAEncryption
14:2b:4c:2b:e8:0a:f6:40:84:bd:c9:d3:f0:5f:8c:5f:1f:ca:
10:ba:20:1b:0a:83:11:43:bb:9b:71:7a:2b:ac:a9:3a:42:c7:
75:6e:5a:7e:22:34:e6:c1:79:a5:9a:97:32:f9:fd:62:75:50:
f8:e0:b3:19:12:a8:93:40:4b:e3:a3:1c:9a:d5:3c:0c:8d:4e:
77:37:60:12:d3:c6:82:be:86:2e:9c:2f:5e:9a:c6:c5:a9:e8:
79:9c:3a:ba:2b:a5:b8:f6:1b:25:68:b7:c0:5e:3d:e9:68:30:
b4:36:af:8f:e1:ec:18:4f:8d:a9:4f:75:ed:e1:7e:a3:62:31:
c7:cc:0e:dd:4c:bf:36:57:f4:48:d6:ed:c2:b4:f4:c1:34:4d:
2f:5d:19:65:be:63:43:a5:7e:cb:7c:60:fd:1d:a6:f4:7c:3d:
00:6d:7c:82:3a:7f:87:2a:d9:5d:11:a1:ee:c1:d3:13:98:7a:
c4:83:5f:ff:2c:e8:17:cc:ca:04:1d:7f:7c:5c:16:4a:f9:a9:
ad:d4:68:2a:34:10:85:cc:16:2a:56:d1:6a:9d:1f:0d:70:ca:
a3:b1:74:55:30:33:35:d6:4c:75:a2:f9:58:85:f5:71:9d:cd:
4c:93:18:29:66:e9:3a:c0:8b:bd:51:37:05:bf:f1:de:37:3d:
26:de:69:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:12 2025 by rpki-client