Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fbxGcDZ4JffpLB-VA4euV8cUHbI.roa
File: fbxGcDZ4JffpLB-VA4euV8cUHbI.roa (raw, json)
Hash identifier: ZaYZ23rjJ96t14BAX6CvRsmnyjmgBRcXDVd5G/xhkus=
Subject key identifier: 7D:BC:46:70:36:78:25:F7:E9:2C:1F:95:03:87:AE:57:C7:14:1D:B2
Certificate issuer: /CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Certificate serial: 019422FBF18730567C9CD9317F72ACF5EF95
Authority key identifier: 7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fbxGcDZ4JffpLB-VA4euV8cUHbI.roa
Signing time: Wed 01 Jan 2025 17:48:44 +0000
ROA not before: Wed 01 Jan 2025 17:48:44 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31027
IP address blocks: 91.233.142.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f1:87:30:56:7c:9c:d9:31:7f:72:ac:f5:ef:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c07dbdc71f12bda7bb7fa80cadc2ed9a2feefeb
Validity
Not Before: Jan 1 17:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7dbc4670367825f7e92c1f950387ae57c7141db2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7b:6c:3c:04:7a:6e:2f:e8:70:f5:56:df:09:
cc:ff:90:50:48:ed:fd:44:71:b9:0c:89:0c:45:c2:
7e:35:52:1d:7e:a4:30:09:58:ca:26:20:64:dd:0c:
71:13:55:f2:91:64:0e:bd:a7:7b:32:4a:6b:33:29:
8b:88:02:62:26:4f:13:cf:52:db:a6:08:da:c8:d1:
0f:aa:9c:ee:3c:2c:e1:f6:49:81:c1:84:58:05:e5:
ef:2e:28:c2:28:a8:52:11:29:db:9f:1e:1e:cd:5f:
2d:9e:81:90:f5:d6:48:82:91:05:2c:b3:fe:59:4d:
aa:56:27:cb:82:e4:bc:13:73:bc:82:45:79:81:be:
ac:59:b7:b9:f9:6f:e1:85:d4:9d:75:3d:3a:79:ce:
df:3a:2b:3d:f1:04:38:b3:2c:0b:1b:65:d4:03:30:
f6:91:b3:4f:f1:15:a9:ee:6c:94:b3:e9:68:f6:30:
d1:04:2b:65:88:3a:63:a4:fe:7f:e2:67:63:c7:99:
df:05:0c:5c:a3:59:45:30:98:c3:78:4a:c5:a9:ae:
74:5d:14:ad:d2:71:b1:70:67:cc:69:37:c7:c1:ec:
92:92:9e:7b:28:c0:91:42:7c:98:39:8d:58:69:ec:
b9:9c:2d:a0:08:85:79:5a:9c:43:28:a4:07:16:ef:
80:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BC:46:70:36:78:25:F7:E9:2C:1F:95:03:87:AE:57:C7:14:1D:B2
X509v3 Authority Key Identifier:
keyid:7C:07:DB:DC:71:F1:2B:DA:7B:B7:FA:80:CA:DC:2E:D9:A2:FE:EF:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fAfb3HHxK9p7t_qAytwu2aL-7-s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fbxGcDZ4JffpLB-VA4euV8cUHbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/19650d-2b87-4911-ae1e-895b0d3c4b45/1/fAfb3HHxK9p7t_qAytwu2aL-7-s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.142.0/23
Signature Algorithm: sha256WithRSAEncryption
13:6d:73:6f:41:34:68:64:9f:41:97:56:81:e2:26:b8:10:a7:
2a:97:80:cf:e2:d1:f7:3a:77:0f:77:fc:33:95:61:7a:16:56:
7a:ae:55:ef:75:7d:d3:f6:dd:de:6b:55:d8:1b:34:ac:37:dc:
8c:cf:53:8c:49:1f:72:0d:d6:07:c3:f4:97:33:aa:9f:ea:01:
cf:ee:ac:e4:d9:f8:49:13:7d:cc:6a:51:0d:36:0c:52:4b:fe:
2f:83:62:d9:1e:6d:10:95:e1:22:af:2b:ba:15:1a:57:da:fa:
35:1e:8e:22:f8:43:fd:03:79:ad:7e:a9:a4:46:a7:51:9b:05:
9e:4f:49:01:c6:65:cc:51:11:42:d2:23:1f:93:fb:9d:d0:34:
0f:4a:01:c9:c7:0a:69:db:7f:9b:f6:bd:d4:b8:0d:92:2f:aa:
93:d9:ff:37:5a:cb:8b:cc:c8:ac:29:ac:20:5d:4f:58:7d:83:
cb:6a:28:05:b9:9b:ba:49:24:78:17:c4:c6:ac:f4:78:d3:67:
b7:74:34:0a:61:11:7b:01:2c:f0:28:91:8c:fe:f2:db:7e:5c:
bf:79:cb:4e:72:7a:84:2b:ef:27:56:ef:28:ea:0b:60:f6:30:
a7:a3:40:73:cd:49:a4:e3:c5:a2:e0:ae:9a:58:25:4e:c9:62:
b9:a5:bd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 20:58:20 2025 by rpki-client