Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/f45K-_tztLGikN2V1uWSCFuY_68.roa
File: f45K-_tztLGikN2V1uWSCFuY_68.roa (raw, json)
Hash identifier: xJe3gW2GTPkOmGgSxCeDd1gAbtFU96D/eKs9HOKj+Eo=
Subject key identifier: 7F:8E:4A:FB:FB:73:B4:B1:A2:90:DD:95:D6:E5:92:08:5B:98:FF:AF
Certificate issuer: /CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Certificate serial: 019427485D0C78B99EB7C40F07C853E4096A
Authority key identifier: C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/f45K-_tztLGikN2V1uWSCFuY_68.roa
Signing time: Thu 02 Jan 2025 13:50:41 +0000
ROA not before: Thu 02 Jan 2025 13:50:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 2116
IP address blocks: 91.208.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:5d:0c:78:b9:9e:b7:c4:0f:07:c8:53:e4:09:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c27cf5560207ece8482c32fcb6995f77d7f730cb
Validity
Not Before: Jan 2 13:50:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f8e4afbfb73b4b1a290dd95d6e592085b98ffaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:e7:50:e7:73:0a:1f:b2:20:43:2b:c5:05:fc:
d1:37:b9:f2:b1:13:ee:18:96:fc:e8:da:2a:7c:c3:
2d:70:6a:53:c3:03:f1:0b:25:65:ee:fb:b8:d1:a8:
71:bf:8d:3c:75:c5:23:1b:93:e6:d5:5a:16:9d:59:
3e:c6:29:51:12:f5:c3:3e:f9:a4:d3:e6:81:c9:10:
b3:2a:5e:8e:1d:a3:53:36:e6:eb:0e:0c:b7:8d:45:
89:f5:b9:3e:c5:87:7d:0b:8a:20:2d:25:4f:9b:f9:
78:bd:ef:bc:bc:68:03:b0:78:38:7f:18:82:b6:10:
bb:c6:ee:8c:33:8c:da:42:42:e1:b1:eb:f1:85:87:
3f:34:0f:68:a0:cc:5e:d8:eb:f7:5b:93:fb:3c:2f:
18:00:55:ec:75:a1:93:0a:a4:a3:51:ee:46:f6:3d:
0c:9a:90:b6:63:3f:0a:ed:62:b7:80:9f:26:c0:c8:
ca:6a:7f:36:cf:4f:ac:0f:b8:fd:bb:27:a8:76:9f:
01:7a:7e:d8:19:9f:a1:94:58:1c:07:4f:6c:42:ff:
b1:e8:73:26:25:2b:4f:07:99:76:cb:62:71:fe:70:
7d:14:ad:6c:a2:a5:33:57:c8:41:27:b7:f9:27:91:
7a:4e:70:b3:c2:db:c7:83:a3:24:37:5e:1f:97:33:
c3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8E:4A:FB:FB:73:B4:B1:A2:90:DD:95:D6:E5:92:08:5B:98:FF:AF
X509v3 Authority Key Identifier:
keyid:C2:7C:F5:56:02:07:EC:E8:48:2C:32:FC:B6:99:5F:77:D7:F7:30:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wnz1VgIH7OhILDL8tplfd9f3MMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/f45K-_tztLGikN2V1uWSCFuY_68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/32f3bb-2594-4b37-94aa-941244f5dded/1/wnz1VgIH7OhILDL8tplfd9f3MMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.8.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:bf:a0:48:af:e4:40:e0:cf:be:89:68:11:8c:0c:7f:c8:e0:
f8:cc:22:10:c1:51:37:8b:0b:9e:36:46:e7:8e:bf:e5:17:63:
e4:59:56:8b:22:46:19:50:67:44:34:c2:57:f2:a1:05:e8:a5:
6c:5d:a0:e9:bb:18:cc:0f:f5:28:50:62:22:3b:fe:8b:fc:49:
2d:b5:63:5a:4b:4d:1f:be:95:43:fd:4f:56:8b:06:6b:1d:2d:
12:41:aa:0a:6d:4d:3f:d8:4e:4d:bb:c5:25:f4:c4:66:af:29:
0c:01:10:9d:22:bf:0b:ed:49:bf:7d:fd:9d:32:7b:7c:e3:d8:
1f:ac:20:6a:a6:bf:b4:07:b0:4a:fb:40:25:e5:49:fb:38:2e:
73:2e:5b:a3:04:f5:1e:b0:00:69:f3:85:9e:49:80:a4:2f:1c:
c3:d0:f8:7a:4c:9f:6d:93:6d:c8:35:40:fd:e6:0a:f2:1d:b2:
e7:d4:c6:07:13:8f:fc:e3:a1:9f:2a:b0:5b:87:77:c4:0f:72:
ea:8a:fe:a2:4a:60:01:53:f9:44:b4:63:9c:53:c5:87:4c:b2:
28:94:d2:0f:74:10:69:11:64:f5:9f:c0:75:1e:9d:6a:87:70:
0b:a0:3c:bd:b5:04:42:2e:a6:fd:2e:c9:59:6c:d9:89:ef:b6:
ea:da:c6:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:08:28 2025 by rpki-client