Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/7-j4zYeoEZb3GyJAS87cCTQvMeg.roa
File: 7-j4zYeoEZb3GyJAS87cCTQvMeg.roa (raw, json)
Hash identifier: EAdEDlZP/7sT6Qp3HfzjAY/RfoPmZ+aNXdW6ptqfGUA=
Subject key identifier: EF:E8:F8:CD:87:A8:11:96:F7:1B:22:40:4B:CE:DC:09:34:2F:31:E8
Certificate issuer: /CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Certificate serial: 0194258E3BE480FC08BA4A86B91B1524CC42
Authority key identifier: F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/7-j4zYeoEZb3GyJAS87cCTQvMeg.roa
Signing time: Thu 02 Jan 2025 05:47:45 +0000
ROA not before: Thu 02 Jan 2025 05:47:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31554
IP address blocks: 91.220.232.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8e:3b:e4:80:fc:08:ba:4a:86:b9:1b:15:24:cc:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Validity
Not Before: Jan 2 05:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=efe8f8cd87a81196f71b22404bcedc09342f31e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6c:74:d6:4f:69:be:61:12:ef:a4:73:be:83:
e3:1b:46:67:e6:66:d2:69:a8:f2:9a:1a:81:59:11:
b4:1f:0b:f1:0d:f7:0a:fe:62:18:6e:6b:30:95:3c:
8f:aa:19:5c:f8:04:a1:b7:23:d9:39:0b:15:ae:17:
ed:14:b7:ba:46:fa:06:48:35:04:ea:fb:ec:26:52:
74:16:1a:53:a5:a2:3f:3f:71:b6:0f:59:c4:a2:84:
6e:f6:b1:61:79:81:66:74:dd:c6:8a:ce:c3:06:bd:
39:61:6b:f7:22:70:3d:fd:17:37:61:0f:93:74:a7:
b4:a9:30:48:c8:db:2f:b5:b9:fe:01:b9:5b:10:68:
83:02:87:78:59:fa:ad:d1:8d:e4:b5:44:21:58:4f:
90:a9:72:f2:4a:b6:77:5a:8a:51:69:e6:03:cf:e2:
8c:3c:9d:ef:b4:ee:d1:b7:76:59:29:82:af:97:c8:
98:e9:ee:45:7b:95:0f:03:8b:8e:2f:21:ca:c5:04:
52:6c:01:88:e0:7a:b7:76:8d:52:77:41:18:bc:01:
66:95:77:18:ec:74:06:b5:39:45:3a:e0:40:bb:6b:
c6:8f:f5:92:cc:4c:59:14:d8:62:90:74:64:74:81:
7c:f2:97:26:a0:47:be:39:f3:82:42:d0:3b:9e:f3:
9f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:E8:F8:CD:87:A8:11:96:F7:1B:22:40:4B:CE:DC:09:34:2F:31:E8
X509v3 Authority Key Identifier:
keyid:F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/7-j4zYeoEZb3GyJAS87cCTQvMeg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.220.232.0/24
Signature Algorithm: sha256WithRSAEncryption
63:bd:4f:d9:42:2c:0b:65:f0:12:83:56:62:e1:2f:b7:d7:2f:
e4:5a:c3:83:64:b1:bf:36:ed:8f:7d:df:84:da:f1:ac:70:72:
81:8d:5d:2f:c6:14:a8:6b:85:ec:8a:7f:30:10:c4:39:00:35:
01:77:f9:58:0b:26:37:7f:dd:07:d1:c2:27:d3:b0:2d:46:1f:
6e:ed:b8:ee:c2:c4:7a:5c:27:6e:f5:ab:e3:ca:2d:b6:61:50:
38:dd:51:c3:46:a9:b5:30:fb:17:65:82:0b:fa:21:2d:37:43:
20:e3:d8:ab:d7:44:fb:a4:d5:ee:d0:17:85:ef:12:2d:c8:f5:
74:aa:f8:b9:7b:4b:ff:8e:a2:0a:a8:96:f5:6d:33:87:9b:74:
02:a6:68:ce:a5:1c:5c:75:87:12:6a:a2:88:7a:36:78:8c:f9:
54:11:27:4a:be:24:c2:b5:a1:7d:c5:2a:ae:f2:ec:13:c4:65:
3a:22:07:fd:2a:f2:42:3d:1c:0e:68:5d:85:d3:e0:e0:43:a6:
1d:8e:c8:ad:f6:27:bd:5d:83:e6:fb:21:10:59:e8:12:4e:4b:
36:96:f3:ac:ac:0d:a3:c4:a4:ab:21:ec:84:43:7a:cb:87:42:
e8:ae:2e:a4:e3:69:58:e1:80:6b:bd:49:39:d5:31:78:45:e4:
9f:33:83:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 13:02:47 2025 by rpki-client