Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/fweRbovLWdF9pH6rb4wkNI7Qa5A.roa
File: fweRbovLWdF9pH6rb4wkNI7Qa5A.roa (raw, json)
Hash identifier: Ij1i47Q8RIaDs08CnmY/mVxyR0aEzscrR4GtWWkDV3Q=
Subject key identifier: 7F:07:91:6E:8B:CB:59:D1:7D:A4:7E:AB:6F:8C:24:34:8E:D0:6B:90
Certificate issuer: /CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Certificate serial: 01942369506DCA59C54CD7DBD191A5876891
Authority key identifier: 8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/fweRbovLWdF9pH6rb4wkNI7Qa5A.roa
Signing time: Wed 01 Jan 2025 19:48:11 +0000
ROA not before: Wed 01 Jan 2025 19:48:11 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43135
IP address blocks: 91.225.53.0/24 maxlen: 24
91.225.54.0/24 maxlen: 24
91.225.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:50:6d:ca:59:c5:4c:d7:db:d1:91:a5:87:68:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6e65b82fe4007e82fd2db134cf42c6aec4e0bc
Validity
Not Before: Jan 1 19:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f07916e8bcb59d17da47eab6f8c24348ed06b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:95:cf:c0:bd:5e:f0:03:01:0b:2a:ec:9d:df:
41:b0:ea:3f:7b:d8:bf:94:58:0c:10:9f:51:1b:1e:
16:7e:64:4d:c4:db:e4:e8:1f:84:63:b0:1d:51:66:
9d:74:c9:7e:0b:6d:67:9e:b4:69:f1:f8:cf:07:c0:
21:e8:b1:07:e2:e7:90:40:90:13:0d:51:a2:a3:1b:
79:c3:e0:af:f2:eb:19:c7:22:a7:3b:a5:e7:24:50:
a7:b0:43:1b:08:41:3c:d3:9d:89:73:fa:6b:55:68:
36:55:bb:e5:3d:62:0e:be:83:39:b9:76:54:10:8b:
8d:82:5b:22:61:44:04:03:e5:40:ba:e5:00:80:fa:
41:32:c7:bf:2e:54:0d:9f:85:e6:bf:2c:15:30:ff:
0b:0d:5d:d6:4d:ca:93:e0:ca:43:36:70:4b:50:c7:
b3:cc:ec:80:c8:b4:e0:05:f7:05:be:af:65:1b:ca:
bf:0c:8b:13:64:91:53:be:85:b8:a7:51:10:4c:78:
d4:e4:1d:03:bf:5b:07:19:78:b5:a2:22:76:0d:e3:
8c:17:32:ba:3a:2f:33:60:08:29:ab:f7:98:8b:7d:
15:ec:07:63:25:c8:01:53:cd:d9:f6:44:dd:c8:cc:
1a:11:81:2f:98:98:6a:52:e5:0e:08:84:e3:c6:e9:
2f:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:07:91:6E:8B:CB:59:D1:7D:A4:7E:AB:6F:8C:24:34:8E:D0:6B:90
X509v3 Authority Key Identifier:
keyid:8B:6E:65:B8:2F:E4:00:7E:82:FD:2D:B1:34:CF:42:C6:AE:C4:E0:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i25luC_kAH6C_S2xNM9Cxq7E4Lw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/fweRbovLWdF9pH6rb4wkNI7Qa5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7bd68c-a036-4cfe-b763-af90362bd3ba/1/i25luC_kAH6C_S2xNM9Cxq7E4Lw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.53.0-91.225.55.255
Signature Algorithm: sha256WithRSAEncryption
26:a1:0d:5b:f3:d7:2f:50:05:b6:c9:98:14:7b:18:ac:6c:4e:
3d:8e:02:b9:b3:e6:95:44:04:8a:eb:b3:b8:30:3a:9d:92:32:
1c:cc:57:bd:73:f9:ac:b5:52:18:ae:d6:d7:dc:ee:77:f2:ce:
b2:61:8e:31:cc:ae:39:44:74:bd:9f:87:ee:c9:d9:11:c4:d2:
e2:6e:71:61:9c:a7:84:c5:55:6e:de:f9:d8:95:33:58:d5:43:
43:dc:35:c3:b8:ae:b0:8f:9e:ca:5a:89:52:82:44:e3:13:e3:
b7:f7:42:46:dd:46:c1:4b:fe:78:d7:04:8e:12:23:74:99:a3:
26:f8:37:e9:71:62:7a:9c:5a:e6:d6:1d:97:26:dd:27:72:2c:
38:bf:9c:b1:36:ef:71:3c:69:ad:39:f0:8f:a4:6d:d1:1e:91:
33:45:7d:2d:46:5b:6b:15:d1:64:bc:d0:d8:ba:17:4a:e4:49:
d6:23:e4:ed:64:dd:cf:09:f2:39:23:e5:c9:f9:ef:d8:76:8d:
91:09:ff:c8:92:e5:9c:bf:f9:ff:db:b3:c6:de:24:0e:d2:85:
4c:d6:d7:a8:64:c4:c0:5c:e9:a8:be:f9:3c:ba:ca:50:08:a6:
33:5f:96:be:c4:d6:87:10:3e:39:8b:46:60:55:b6:5d:72:4e:
f3:17:2b:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:02:36 2025 by rpki-client