Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/FP1gEuGEjbpWb2pgTr8_e0YIMHY.roa
File: FP1gEuGEjbpWb2pgTr8_e0YIMHY.roa (raw, json)
Hash identifier: 600aZ6q5O0wcuSJR6gmiPTL2g48j+zt4OCs5vRM8W0k=
Subject key identifier: 14:FD:60:12:E1:84:8D:BA:56:6F:6A:60:4E:BF:3F:7B:46:08:30:76
Certificate issuer: /CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Certificate serial: 01941F8C392388BC94C5F24D9305B323C5E4
Authority key identifier: C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/FP1gEuGEjbpWb2pgTr8_e0YIMHY.roa
Signing time: Wed 01 Jan 2025 01:47:50 +0000
ROA not before: Wed 01 Jan 2025 01:47:50 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209372
IP address blocks: 91.108.192.0/24 maxlen: 24
91.108.193.0/24 maxlen: 24
91.108.194.0/24 maxlen: 24
91.108.195.0/24 maxlen: 24
91.108.196.0/22 maxlen: 22
91.108.200.0/22 maxlen: 22
91.108.204.0/22 maxlen: 22
91.108.208.0/22 maxlen: 22
91.108.208.0/24 maxlen: 24
91.108.212.0/22 maxlen: 22
91.108.216.0/22 maxlen: 22
91.108.220.0/22 maxlen: 22
91.108.224.0/19 maxlen: 24
91.108.224.0/24 maxlen: 24
91.108.236.0/24 maxlen: 24
91.108.238.0/24 maxlen: 24
91.108.255.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:39:23:88:bc:94:c5:f2:4d:93:05:b3:23:c5:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2ee45426e12e50fe30e8ffc39e04485d8f73339
Validity
Not Before: Jan 1 01:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=14fd6012e1848dba566f6a604ebf3f7b46083076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:59:5d:a3:5a:f7:b8:15:1f:40:aa:c3:fd:3c:
2a:f6:77:97:b2:f5:ec:b9:30:00:a0:4c:34:d5:23:
8c:07:cf:46:c5:43:ea:cf:37:54:17:f2:37:fa:59:
68:f8:5b:ee:ee:c8:2a:f2:fe:d9:38:a5:52:6b:cf:
fd:42:31:3c:62:71:aa:09:63:59:b0:74:4f:7c:49:
d6:aa:2b:7a:9c:f5:05:54:89:6d:5b:49:88:ef:dd:
c7:98:eb:31:ec:14:c9:ea:56:42:30:64:8b:05:4b:
d8:1b:ab:77:f2:56:94:7e:22:37:38:ff:fe:cd:89:
7c:af:ef:b3:ba:b5:65:34:f0:ea:a2:6c:c1:c3:c9:
f7:2f:06:d7:a3:78:89:97:0f:cc:30:7c:7d:9c:26:
37:65:a8:d4:85:81:9b:32:28:1a:fb:0e:25:35:ab:
68:b9:28:12:c9:98:ac:2b:6c:f3:b0:16:e7:30:7c:
54:7f:57:2d:96:87:ef:a8:55:fd:09:67:aa:24:40:
ca:3b:31:f1:91:3e:5f:9a:d1:3d:28:78:25:28:2b:
0a:7f:13:ee:c9:d6:c5:06:a5:29:ee:a3:68:c2:61:
4e:26:03:f3:02:63:fa:2d:e6:c7:8e:0c:4a:d1:4a:
ce:8a:72:78:dc:82:15:db:2e:fb:1d:0c:1f:a0:a7:
0f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:FD:60:12:E1:84:8D:BA:56:6F:6A:60:4E:BF:3F:7B:46:08:30:76
X509v3 Authority Key Identifier:
keyid:C2:EE:45:42:6E:12:E5:0F:E3:0E:8F:FC:39:E0:44:85:D8:F7:33:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/FP1gEuGEjbpWb2pgTr8_e0YIMHY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/70aa32-9607-4db7-8f1e-da75430b16f6/1/wu5FQm4S5Q_jDo_8OeBEhdj3Mzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.108.192.0/18
Signature Algorithm: sha256WithRSAEncryption
88:4b:f2:9c:ba:91:94:ec:c4:38:bc:a2:1c:fd:37:79:63:20:
9e:8c:2a:44:3c:00:08:28:98:42:5f:07:ba:67:4f:63:62:89:
36:94:9c:4e:f4:c1:e0:41:7f:6d:ae:7f:dc:9e:78:d7:9a:c4:
a1:d0:e5:91:42:ed:ef:f3:b2:56:30:71:70:84:db:d3:9a:8f:
0c:42:3a:05:8a:19:3a:7f:58:ab:2c:d9:6f:b0:4a:b1:8c:94:
b4:1f:e4:75:f5:1c:9e:b4:f8:35:d4:34:45:1c:10:3c:93:a7:
a2:d5:80:9c:5f:ff:a0:77:2c:74:82:36:99:fc:1c:87:6a:b4:
83:e9:64:c2:98:10:99:8d:6c:41:d2:81:99:d0:9b:f1:4f:b1:
56:3c:28:1c:3a:de:1c:44:e2:af:9d:25:a7:68:0f:00:82:a3:
ee:d2:0b:22:c5:24:e6:fc:4d:8f:07:3f:33:2a:aa:9c:d7:4e:
17:4d:da:87:7e:83:e8:b1:d7:84:a9:6e:56:96:9f:8f:5d:d0:
b4:07:b1:d2:9b:8b:08:fe:1f:69:e3:07:65:11:03:a9:ae:5c:
40:dd:6c:d0:02:25:80:75:6d:04:a0:8d:91:e6:c2:72:97:d9:
a4:ad:da:44:9b:16:0a:ce:33:5d:52:c8:c9:ae:59:36:6b:bb:
7d:6b:ef:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:21:14 2025 by rpki-client