Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/MyfnN7_GeDEIFOv2Po3D--A0qr4.roa
File: MyfnN7_GeDEIFOv2Po3D--A0qr4.roa (raw, json)
Hash identifier: Q+ck4wNBk8gHUXF8i3xSK2P0e3p9/YGq6s+8125aWKo=
Subject key identifier: 33:27:E7:37:BF:C6:78:31:08:14:EB:F6:3E:8D:C3:FB:E0:34:AA:BE
Certificate issuer: /CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Certificate serial: 019425209C84DA21333275CC38CF0DB6284F
Authority key identifier: 53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/MyfnN7_GeDEIFOv2Po3D--A0qr4.roa
Signing time: Thu 02 Jan 2025 03:48:01 +0000
ROA not before: Thu 02 Jan 2025 03:48:01 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 0
IP address blocks: 91.211.25.0/24 maxlen: 24
195.88.162.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:20:9c:84:da:21:33:32:75:cc:38:cf:0d:b6:28:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53cbd1477044a03404c7fc43961c2c83bba75bbc
Validity
Not Before: Jan 2 03:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3327e737bfc678310814ebf63e8dc3fbe034aabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:18:8c:64:fc:0d:f3:9a:95:7f:3b:64:fb:76:
52:84:6e:ea:1b:d7:cc:c0:c8:e0:ff:29:5c:26:da:
ca:be:8c:88:2a:f7:ba:f6:01:af:ee:6e:ee:92:65:
a4:a2:61:56:a7:19:f8:f0:94:bb:86:1a:bf:9b:5a:
47:59:30:d8:bd:92:0b:7f:8a:52:0c:5c:e9:7f:e4:
a2:3e:3a:c0:15:12:85:b9:65:f0:31:b7:92:24:b3:
79:53:8f:9a:b4:76:fc:47:52:a1:08:f0:e6:78:b2:
f4:66:40:87:9d:45:46:9b:80:10:79:7b:79:23:75:
4d:5b:90:86:fa:fa:ba:90:d4:57:7d:ce:1f:f3:4b:
75:7d:67:0b:bf:26:97:9b:65:c8:a7:d4:d4:79:63:
ac:71:e1:a9:de:06:10:a9:65:6c:f4:8c:9b:05:8b:
75:2b:ae:d6:54:7c:3b:bd:e9:2e:f0:b7:42:66:be:
c5:ce:de:7d:fe:b6:36:25:39:48:b2:7b:7a:2b:1e:
47:85:42:10:b5:df:15:2f:55:22:d0:08:d4:15:20:
81:43:94:5c:6e:b5:96:cb:bc:c6:d3:15:37:40:7a:
b5:8c:95:b5:27:90:36:98:c7:67:bc:f0:f1:eb:6f:
b7:7b:40:66:1c:c1:23:98:89:de:2a:9d:97:38:3c:
e3:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:27:E7:37:BF:C6:78:31:08:14:EB:F6:3E:8D:C3:FB:E0:34:AA:BE
X509v3 Authority Key Identifier:
keyid:53:CB:D1:47:70:44:A0:34:04:C7:FC:43:96:1C:2C:83:BB:A7:5B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8vRR3BEoDQEx_xDlhwsg7unW7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/MyfnN7_GeDEIFOv2Po3D--A0qr4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/dce44a-4a90-43ea-b1fb-a2d116560aca/1/U8vRR3BEoDQEx_xDlhwsg7unW7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.211.25.0/24
195.88.162.0/23
Signature Algorithm: sha256WithRSAEncryption
97:48:8e:29:8a:87:dd:8e:08:ba:8c:3a:52:a4:c1:4d:1d:13:
0e:40:e8:3a:17:15:30:e7:88:12:83:58:f0:62:af:96:38:21:
1a:1a:61:31:66:df:58:7b:56:df:b6:4d:f4:73:44:e9:d6:78:
b9:52:8f:6a:d8:a0:93:52:76:79:1b:87:63:b7:7d:29:7a:e2:
38:3b:9a:97:f5:5f:e0:61:57:73:81:11:a5:37:24:16:d1:d3:
e7:b7:9c:9c:6f:31:8c:cf:8d:1d:af:22:8f:c7:3e:a8:ed:fc:
65:95:b9:52:33:4f:9e:1d:28:86:8b:7e:f2:07:54:68:c2:df:
cf:60:6c:8b:e0:07:98:dc:bf:ae:c9:84:53:a1:c2:0a:52:98:
3f:bc:88:a7:9b:c3:84:da:39:a9:28:58:0a:b9:a8:4b:1e:e4:
b2:27:e1:6e:73:e9:01:d2:ad:75:98:f9:94:15:9c:f2:dd:e2:
4a:94:57:86:54:7c:b9:1d:92:cc:7f:01:ad:85:cb:15:65:46:
8d:30:7b:6b:37:2e:bd:d8:39:60:85:66:fe:ba:3d:36:e3:f3:
23:d5:27:96:48:d8:ed:f1:c4:bd:0d:67:dc:4a:cd:4a:d0:51:
86:b0:4c:f1:1d:c3:7a:ad:72:96:4a:88:82:f1:c0:6d:ca:55:
55:5e:0b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:26:51 2025 by rpki-client