Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/718OhuWzPYV76do8dJwyLY1c4nY.roa
File: 718OhuWzPYV76do8dJwyLY1c4nY.roa (raw, json)
Hash identifier: 9f1oMEBCBFVGB8zDkVGomUjvRpOkdkFNzsMeZuhP+EQ=
Subject key identifier: EF:5F:0E:86:E5:B3:3D:85:7B:E9:DA:3C:74:9C:32:2D:8D:5C:E2:76
Certificate issuer: /CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b
Certificate serial: 0194258F86F6F11A1FE3A8F3C9D215753D74
Authority key identifier: FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/718OhuWzPYV76do8dJwyLY1c4nY.roa
Signing time: Thu 02 Jan 2025 05:49:10 +0000
ROA not before: Thu 02 Jan 2025 05:49:10 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210671
IP address blocks: 85.92.119.0/24 maxlen: 24
194.48.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:86:f6:f1:1a:1f:e3:a8:f3:c9:d2:15:75:3d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b
Validity
Not Before: Jan 2 05:49:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef5f0e86e5b33d857be9da3c749c322d8d5ce276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:22:4b:f8:d2:78:ab:4b:fe:90:b7:2a:0e:af:
cf:c6:81:76:bc:14:a4:e5:ce:9b:a4:de:82:25:0e:
f5:4d:5e:97:af:d6:70:e0:5c:be:69:50:22:9d:c3:
d0:0f:f6:a6:3d:39:81:8f:1a:1a:95:74:d1:9f:24:
c2:f4:f1:a4:ba:5d:81:d1:08:98:dc:76:fb:52:a4:
f5:21:ce:4a:01:94:ec:63:e5:2f:8c:d2:85:11:12:
e3:54:f5:78:d1:84:82:20:8b:03:29:09:66:3f:4b:
1c:92:e0:71:01:32:1d:09:25:18:43:36:db:3d:93:
bf:87:13:88:ba:f2:0f:3f:49:41:bc:0e:a9:1e:d1:
a2:4f:e4:ae:ea:0d:af:5f:6c:01:ef:81:e7:31:8a:
c5:19:c5:28:3a:78:14:24:45:fc:41:76:88:56:cc:
9b:f4:12:b2:af:d9:66:e6:5e:ac:f7:e0:ae:c0:42:
36:b1:8f:4a:bf:0a:40:0a:83:a8:f7:d1:23:28:b8:
92:65:a5:46:f6:c5:39:90:a3:62:9c:0a:a4:79:b1:
42:45:5c:13:90:84:8d:6a:63:03:73:9b:f0:66:c3:
ee:bb:66:51:94:32:3c:07:e6:25:54:cb:29:83:2b:
c9:51:af:34:9d:b3:9f:e8:70:77:ef:c8:3c:de:f3:
f8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:5F:0E:86:E5:B3:3D:85:7B:E9:DA:3C:74:9C:32:2D:8D:5C:E2:76
X509v3 Authority Key Identifier:
keyid:FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/718OhuWzPYV76do8dJwyLY1c4nY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.119.0/24
194.48.211.0/24
Signature Algorithm: sha256WithRSAEncryption
55:48:72:66:d9:16:a0:78:ba:75:00:bc:31:66:c9:27:7f:81:
8c:e5:47:db:e0:cc:aa:c2:6b:b1:3d:e8:f5:d1:9a:74:6d:75:
ae:2e:15:04:61:a7:4e:2f:c6:44:0a:09:a5:97:78:b2:a4:18:
81:ba:a9:a9:24:ca:39:98:1e:95:f4:2f:42:8d:21:42:bd:f8:
8f:a5:ab:24:88:e0:55:49:70:a4:b8:6e:1d:88:40:cf:6e:82:
bd:cc:c8:63:b5:35:12:a2:b9:92:81:aa:47:58:44:26:97:ad:
29:0f:aa:e1:50:32:d1:fa:04:b7:12:1e:f6:2e:8c:2e:38:c6:
f9:51:c8:c8:b9:92:46:57:75:38:cf:f4:5d:3e:ce:8b:73:c0:
0e:e8:92:ec:8b:18:89:5a:f5:00:c0:c6:d8:30:de:f8:97:37:
13:7d:3d:8f:65:ee:9d:49:f8:99:0c:74:ef:c6:16:84:b9:9d:
1b:e8:7d:9a:ca:38:db:b5:56:99:9b:fa:89:ee:d4:6e:57:af:
2e:26:62:4a:90:34:91:07:46:85:03:7a:f8:a8:b1:e1:26:a9:
0d:c5:6d:6a:c2:b5:4c:8c:72:89:a9:f8:a2:60:22:49:a3:18:
47:97:a2:01:48:ac:12:00:f2:5a:cf:1a:5f:ae:8a:f8:2d:af:
26:4d:cc:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:39:27 2025 by rpki-client