Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/f4d0pGSSiHub4rrjLgiCoVR8Lcs.roa
File: f4d0pGSSiHub4rrjLgiCoVR8Lcs.roa (raw, json)
Hash identifier: B5KcDdQ8zEYWfUf5mVlUALm2ca+VbtrqnIaM9zvKgrI=
Subject key identifier: 7F:87:74:A4:64:92:88:7B:9B:E2:BA:E3:2E:08:82:A1:54:7C:2D:CB
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 01942521EEC329F5C6CE7AE8EBAC75CCF41A
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/f4d0pGSSiHub4rrjLgiCoVR8Lcs.roa
Signing time: Thu 02 Jan 2025 03:49:28 +0000
ROA not before: Thu 02 Jan 2025 03:49:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 32181
IP address blocks: 91.238.71.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ee:c3:29:f5:c6:ce:7a:e8:eb:ac:75:cc:f4:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Jan 2 03:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f8774a46492887b9be2bae32e0882a1547c2dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:38:af:41:3b:a6:1d:57:6e:f0:06:e8:97:6e:
06:28:ee:39:07:9b:cc:59:54:af:e4:ba:18:33:10:
17:1c:9a:f4:b7:2d:03:39:8c:a6:e7:5c:64:cc:d1:
a4:60:07:ad:8b:9b:76:ce:74:27:81:89:23:0e:54:
15:14:cf:f6:68:10:da:fb:fa:0c:a7:88:a0:58:1e:
e8:e4:89:93:5c:fd:e0:47:0c:5b:1d:9f:a8:db:44:
db:31:e8:22:98:2b:64:82:a7:dc:07:68:d3:7a:75:
8d:2a:a2:47:da:2a:3a:46:57:50:95:5c:a8:21:72:
1e:77:51:cd:83:b6:f5:2a:c0:34:c6:b2:98:a5:3d:
df:1c:37:c2:ed:6e:c8:d8:69:b9:47:4e:0f:77:bd:
5b:97:30:49:fb:9d:29:88:c5:7b:88:81:85:8b:4e:
9f:d6:16:27:8f:4c:a2:a9:a6:da:fc:cb:cc:88:3c:
d8:f6:45:a5:b8:30:0e:6f:de:0d:77:8c:3d:18:c0:
76:31:c9:9e:2f:a8:0b:f1:e1:ec:af:ce:65:05:79:
69:59:98:64:77:ac:48:ea:7a:6f:27:58:30:09:a5:
54:37:d9:3c:c0:d8:b8:ad:cd:b4:9f:7f:14:b7:2a:
34:47:28:f7:a8:ff:2c:2a:85:ab:c0:6f:00:09:11:
34:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:87:74:A4:64:92:88:7B:9B:E2:BA:E3:2E:08:82:A1:54:7C:2D:CB
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/f4d0pGSSiHub4rrjLgiCoVR8Lcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.71.0/24
Signature Algorithm: sha256WithRSAEncryption
79:a0:b8:96:64:fe:ca:75:31:09:ae:88:4e:bf:8b:c8:a0:2b:
88:df:ae:dd:c1:ff:ac:18:de:4a:0d:56:8a:e1:4c:fa:a5:37:
8f:e0:94:13:2c:6b:0e:75:23:30:ab:1a:cb:36:25:f1:66:fc:
b1:51:60:11:6d:48:62:0f:7d:3d:a2:44:74:44:75:51:22:7c:
d5:d0:91:1d:73:ed:1f:d7:c0:ad:35:4b:66:59:20:aa:7a:ca:
f9:8c:ca:12:0e:86:90:94:cd:a7:3a:bb:52:76:77:6a:95:bf:
0f:4e:cd:69:86:ae:78:6e:44:dd:ab:a1:1a:47:ed:da:94:70:
d5:d6:e5:64:f8:95:88:6b:5e:4d:d8:67:45:4f:3b:2a:8c:31:
d5:83:ea:aa:f8:2d:e3:6e:cd:dd:a6:fd:58:dd:fb:00:bb:8d:
fb:f4:3d:5d:1c:fc:f4:6a:91:0e:7c:5d:03:ac:2e:24:bd:6f:
02:3c:39:84:78:2c:80:96:b5:38:5f:5e:88:31:28:2f:fe:65:
ca:11:cb:8e:5c:ca:57:83:26:8d:06:48:b1:36:27:45:7b:00:
7d:aa:be:06:16:20:77:fe:4f:32:eb:b1:aa:78:89:28:0b:78:
7f:38:0c:be:39:70:2a:af:38:54:d0:e6:08:e1:16:d3:ce:94:
0c:49:10:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:26:47 2025 by rpki-client