Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/9A-rirlc-Q8ELv8iFJOQTMPnqnA.roa
File: 9A-rirlc-Q8ELv8iFJOQTMPnqnA.roa (raw, json)
Hash identifier: +HEEBUU8+gQzglIPJCfWo+K7ZHhYE/WZboDb6DJWbzQ=
Subject key identifier: F4:0F:AB:8A:B9:5C:F9:0F:04:2E:FF:22:14:93:90:4C:C3:E7:AA:70
Certificate issuer: /CN=926697c9efda955cba3e6f8970d72e996bf3c165
Certificate serial: 0984F61B
Authority key identifier: 92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/9A-rirlc-Q8ELv8iFJOQTMPnqnA.roa
Signing time: Thu 10 Mar 2022 20:42:55 +0000
ROA not before: Thu 10 Mar 2022 20:42:55 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 212238
IP address blocks: 91.245.236.0/24 maxlen: 25
88.218.44.0/24 maxlen: 25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 159708699 (0x984f61b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=926697c9efda955cba3e6f8970d72e996bf3c165
Validity
Not Before: Mar 10 20:42:55 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=f40fab8ab95cf90f042eff221493904cc3e7aa70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ad:73:68:95:55:4c:dd:23:70:f8:33:21:a3:
34:b6:60:3e:06:55:c2:c1:30:49:06:41:c1:b9:16:
7f:56:e8:f5:86:96:bc:0b:8c:7f:04:8e:97:a7:3a:
3e:7b:22:16:28:ec:86:30:23:63:d8:21:2a:d1:bb:
ba:78:c9:20:d7:cf:3b:4b:08:0e:81:8b:45:2c:e4:
09:26:4d:bb:c8:c4:62:bd:d4:d8:7a:f1:57:4d:d3:
84:54:8f:e1:81:ae:a1:b2:2f:a4:bb:8c:74:13:f2:
ab:ad:27:c6:de:51:e1:da:11:aa:10:fe:f6:07:46:
ae:f9:5b:45:47:df:89:7f:8a:6d:f2:97:a9:21:3e:
f1:ae:4d:46:a4:d5:a0:b6:9b:31:45:3f:49:83:75:
0e:fa:5e:99:5d:f1:d8:85:75:c0:34:9a:1b:4d:0e:
16:3e:91:f3:87:36:28:d6:12:ec:4d:a0:66:a0:1e:
26:a4:b6:19:54:74:62:7f:cc:6b:46:71:75:c7:13:
88:5a:f0:a6:14:17:03:42:59:51:87:30:33:2a:0a:
05:9e:a7:1e:66:d2:7e:eb:ac:e8:39:c5:44:b1:85:
2e:f7:9e:69:d8:5e:d9:de:24:2b:38:c6:86:9f:03:
ed:56:7d:dc:53:bc:a5:de:7d:6c:17:15:f3:4e:c1:
27:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:0F:AB:8A:B9:5C:F9:0F:04:2E:FF:22:14:93:90:4C:C3:E7:AA:70
X509v3 Authority Key Identifier:
keyid:92:66:97:C9:EF:DA:95:5C:BA:3E:6F:89:70:D7:2E:99:6B:F3:C1:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kmaXye_alVy6Pm-JcNcumWvzwWU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/9A-rirlc-Q8ELv8iFJOQTMPnqnA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/0c4fbd-e07f-4f59-b8f4-2a4713eebff3/1/kmaXye_alVy6Pm-JcNcumWvzwWU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.44.0/24
91.245.236.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:55:ed:d8:67:30:36:91:28:c2:c1:54:aa:d6:13:05:ba:63:
aa:1a:d2:2e:4c:3c:68:e0:91:fa:3b:ae:b9:b7:c6:31:20:52:
e7:c1:b0:23:19:3c:25:39:6a:78:9a:7c:b0:0d:15:92:71:4c:
8a:b9:a3:23:f4:91:99:d7:b0:1d:f2:e8:06:08:d7:d4:72:f1:
bc:46:ab:56:56:47:a9:84:83:a5:41:f5:c4:b4:e9:18:2c:2f:
8d:7e:df:fb:a1:82:4e:db:c3:7d:2b:d9:45:a2:98:af:72:d2:
1b:4c:b2:ee:67:a8:de:0a:55:24:fb:42:65:54:8d:26:92:9b:
67:67:99:96:4f:54:d2:c0:20:e8:42:71:d2:20:54:56:5b:15:
2a:d0:c1:00:f7:11:0e:57:5f:99:d1:6f:82:76:19:3a:ab:54:
09:c8:35:d8:6e:3e:6b:b0:34:a5:0e:ec:0c:51:ff:8b:d6:a5:
01:f1:41:61:fc:46:7f:28:0d:e2:7d:e0:d4:ac:f1:66:a5:e2:
8d:5f:91:ba:f7:3a:8d:9c:3b:de:9c:eb:8d:cb:1a:38:a1:33:
4c:cd:53:31:60:78:3d:8a:80:d5:2b:32:fa:13:02:50:bf:6e:
b6:ff:d9:f9:e9:1d:39:da:67:7d:26:bc:09:c0:28:4b:34:f7:
a4:cf:ab:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:19:07 2025 by rpki-client