Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/f9n1-MsvFF9hgPCEtznTrREmBS4.roa
File: f9n1-MsvFF9hgPCEtznTrREmBS4.roa (raw, json)
Hash identifier: nLwX0ooKqTqap8AB7jQ/dh56XcE7TbuyoiwolR5U2oI=
Subject key identifier: 7F:D9:F5:F8:CB:2F:14:5F:61:80:F0:84:B7:39:D3:AD:11:26:05:2E
Certificate issuer: /CN=dceb394aae0836d34341f7ad319494765ab56b07
Certificate serial: 019522932396CFF1AB4B3DC0B7BFFA44787E
Authority key identifier: DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/f9n1-MsvFF9hgPCEtznTrREmBS4.roa
Signing time: Thu 20 Feb 2025 08:57:02 +0000
ROA not before: Thu 20 Feb 2025 08:57:02 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 29119
IP address blocks: 79.171.222.0/23 maxlen: 24
152.89.164.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:22:93:23:96:cf:f1:ab:4b:3d:c0:b7:bf:fa:44:78:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dceb394aae0836d34341f7ad319494765ab56b07
Validity
Not Before: Feb 20 08:57:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7fd9f5f8cb2f145f6180f084b739d3ad1126052e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e1:40:b8:66:9c:23:2f:14:2f:0e:f8:5f:9e:
58:4d:2a:32:bd:7a:7b:df:f3:d1:db:8a:4f:93:9b:
8b:b8:3e:d5:df:0e:bc:b3:3f:7f:e4:f8:57:a8:24:
8f:e9:79:61:ed:36:94:b3:59:1f:fc:af:6e:c9:d5:
2c:6c:c7:4d:10:50:c7:64:6c:bb:89:34:ba:dd:dd:
b2:ab:b3:d4:3c:6a:d0:f5:4f:08:fe:ff:88:4c:e8:
64:d6:5e:f3:23:4a:e8:62:73:c6:db:ff:59:d8:1f:
69:a4:ac:01:0d:14:d4:6a:f4:bb:d7:de:9f:1a:72:
ff:59:ea:f0:e9:09:3a:f7:3e:7d:1b:51:73:3a:38:
82:57:35:44:30:f5:dc:bc:ea:ee:f9:e8:e5:f7:5b:
4b:a4:90:0a:7e:16:29:4e:82:07:89:76:c3:64:59:
2f:c7:82:1b:cd:ac:f1:ba:f2:2e:92:91:9b:0d:7f:
ae:4b:02:46:6d:55:95:08:1f:92:75:b3:15:11:af:
63:aa:cc:e2:46:45:27:40:eb:e1:2a:3e:3d:76:02:
e7:f6:a5:47:91:40:2f:ee:59:cf:07:98:38:f7:79:
ca:c1:d2:77:74:b4:af:c2:d5:99:75:39:54:d5:ea:
24:9a:1f:d8:81:a4:20:fa:67:c6:b1:6a:65:f9:77:
d7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D9:F5:F8:CB:2F:14:5F:61:80:F0:84:B7:39:D3:AD:11:26:05:2E
X509v3 Authority Key Identifier:
keyid:DC:EB:39:4A:AE:08:36:D3:43:41:F7:AD:31:94:94:76:5A:B5:6B:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3Os5Sq4INtNDQfetMZSUdlq1awc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/f9n1-MsvFF9hgPCEtznTrREmBS4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b064f-b01a-4371-a44a-40c86b32eb22/1/3Os5Sq4INtNDQfetMZSUdlq1awc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.222.0/23
152.89.164.0/22
Signature Algorithm: sha256WithRSAEncryption
23:40:fa:00:a3:70:f7:c6:cb:70:3a:57:f9:08:2f:b2:48:d9:
85:60:33:74:fe:ca:c2:ee:7e:95:32:fd:49:17:17:70:b9:bd:
19:ef:8f:97:0f:18:da:71:dd:87:ee:00:40:81:c8:25:40:0a:
e7:70:37:1a:ba:70:36:33:05:88:b8:0b:4a:17:f8:fa:9a:eb:
fb:72:3f:9c:5c:61:bc:15:00:cc:11:c2:53:a2:b4:72:dc:33:
6d:0d:a7:76:54:75:29:de:50:bf:46:a8:c5:7e:16:84:b8:fa:
0f:04:03:6a:3e:b1:e4:36:50:9f:f5:b1:33:05:10:92:e7:e8:
94:e3:88:e6:b2:05:21:3b:09:7a:60:b3:ce:d2:e8:83:26:c7:
ed:b8:0e:7b:17:63:d1:4c:06:69:d8:33:61:cb:98:c7:ac:9d:
c2:81:b4:8e:7a:8f:7b:db:af:28:80:08:e1:5f:b7:d5:80:7e:
db:9b:95:f2:5a:12:4c:cd:ce:f8:46:a7:4c:a1:63:fe:1b:95:
68:ad:89:1c:9e:e3:52:05:97:4d:57:3a:a5:4c:dd:c3:8b:f8:
c9:37:70:86:63:d5:1d:05:3d:db:b7:50:f3:e8:58:33:e8:d9:
79:b1:63:7a:a5:16:5d:c7:8f:51:97:a1:0e:b8:fb:06:9d:68:
8d:f0:e2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:59:24 2025 by rpki-client