Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/fUaeEEckRfBNE0XG7eTK1gjPW_w.roa
File: fUaeEEckRfBNE0XG7eTK1gjPW_w.roa (raw, json)
Hash identifier: sw5+wxsLZVOQhkR/KheuEdoMzOUAkFrmAKd0BU+FbcE=
Subject key identifier: 7D:46:9E:10:47:24:45:F0:4D:13:45:C6:ED:E4:CA:D6:08:CF:5B:FC
Certificate issuer: /CN=686d6f569500c25070b6124f1b86f60952677a93
Certificate serial: 01941F8CA5BB516238290989328328E8BB9B
Authority key identifier: 68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/fUaeEEckRfBNE0XG7eTK1gjPW_w.roa
Signing time: Wed 01 Jan 2025 01:48:18 +0000
ROA not before: Wed 01 Jan 2025 01:48:18 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 207881
IP address blocks: 91.237.208.0/24 maxlen: 24
91.237.215.0/24 maxlen: 24
91.238.1.0/24 maxlen: 24
91.238.18.0/24 maxlen: 24
2a0f:6940::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:a5:bb:51:62:38:29:09:89:32:83:28:e8:bb:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=686d6f569500c25070b6124f1b86f60952677a93
Validity
Not Before: Jan 1 01:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7d469e10472445f04d1345c6ede4cad608cf5bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4d:59:41:4a:26:fd:94:f5:1e:65:3c:73:e3:
8c:6b:69:83:e3:82:af:43:07:47:fc:cd:56:b4:05:
9e:c3:90:8c:50:82:40:bc:e6:ce:cb:94:06:65:bd:
b5:66:5c:c8:e5:1a:27:13:d1:a3:df:16:d6:9f:0f:
4d:00:d3:59:ed:3d:01:10:17:04:a1:75:86:3f:0e:
b5:83:0f:8d:e5:14:d8:92:44:e8:f5:ee:58:12:e4:
b7:39:97:31:7c:8a:3a:53:f0:52:8b:b5:de:89:08:
56:f0:89:36:c7:74:7e:8a:85:45:21:23:21:d9:5a:
12:99:b7:fb:f3:ed:7f:f8:2f:35:46:15:b4:cf:0f:
43:b2:62:69:0f:33:ef:e4:5b:7d:f8:f6:7f:75:75:
ff:5d:8e:e9:ad:7c:1a:b8:f2:20:70:4c:5d:53:b2:
a0:45:41:de:db:d9:24:52:35:9d:69:f3:3b:72:b7:
50:23:06:15:3c:4a:23:7d:53:60:21:1c:26:12:d6:
2e:4b:10:ad:3c:4e:ae:51:10:94:c3:96:9e:66:d5:
75:b5:d3:e0:99:9e:d5:f2:be:7d:23:c6:a4:c8:5e:
06:65:98:db:2e:90:3e:99:c9:2a:fe:42:b2:29:8b:
87:cb:b8:e9:24:6a:6d:8c:34:63:c6:92:13:f0:ac:
35:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:46:9E:10:47:24:45:F0:4D:13:45:C6:ED:E4:CA:D6:08:CF:5B:FC
X509v3 Authority Key Identifier:
keyid:68:6D:6F:56:95:00:C2:50:70:B6:12:4F:1B:86:F6:09:52:67:7A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aG1vVpUAwlBwthJPG4b2CVJnepM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/fUaeEEckRfBNE0XG7eTK1gjPW_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/2f5269-d433-47ed-bf1b-ab6fc4e0f1e0/1/aG1vVpUAwlBwthJPG4b2CVJnepM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.237.208.0/24
91.237.215.0/24
91.238.1.0/24
91.238.18.0/24
IPv6:
2a0f:6940::/32
Signature Algorithm: sha256WithRSAEncryption
53:ec:6c:8e:46:7f:d4:8e:98:83:c9:a8:c7:94:fe:d7:b1:1f:
a6:94:45:a4:f3:fa:75:00:67:65:00:bb:6e:0b:98:ee:f2:b7:
42:65:22:a5:53:69:54:00:21:7c:d5:47:25:55:bc:10:12:c7:
d5:ff:f8:ce:21:14:46:0c:38:42:d5:b1:c0:37:73:80:4b:8f:
f1:b6:d8:0c:f8:02:bb:a0:49:76:55:83:3c:22:57:e3:d7:f9:
f2:9c:31:d2:fc:51:a3:d6:7b:73:de:4a:6b:c8:70:6c:41:a9:
22:e9:e7:93:f2:4a:3b:d7:95:4d:58:9a:a9:cc:7f:04:5e:a8:
aa:a0:3a:3c:f5:c0:05:9c:0f:e8:b0:05:ad:87:a0:d2:96:36:
3b:cc:9d:e9:d3:81:47:cb:88:36:77:3f:70:53:99:5d:bd:94:
37:4f:c3:08:51:b8:e3:7d:0e:12:70:a6:66:8b:af:5a:f7:a2:
c2:d2:38:0f:2b:c8:3a:94:1a:b7:f1:68:f2:83:c1:89:25:e8:
f6:29:9c:77:de:d5:52:c7:a0:7b:c9:9a:35:5e:c0:b5:c4:c1:
34:86:16:0f:40:6c:97:cf:a9:b2:8a:a9:15:dc:0f:32:3a:ab:
5b:82:39:33:6f:96:d1:a3:a7:78:00:11:4b:af:75:c5:e4:d8:
21:d2:05:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:19:34 2025 by rpki-client