Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/1-L2iUJjeoTf_ph-MVPEwqI-zSWY.roa
File: 1-L2iUJjeoTf_ph-MVPEwqI-zSWY.roa (raw, json)
Hash identifier: ZkGbAV0LuYcgIIPlX7PUDAf4X3H5foWfL0e6qLCIZsQ=
Subject key identifier: F8:BD:A2:50:98:DE:A1:37:FF:A6:1F:8C:54:F1:30:A8:8F:B3:49:66
Certificate issuer: /CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Certificate serial: 0194266C3A1436FFED174CA7FFA6AEE52C08
Authority key identifier: 7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/1-L2iUJjeoTf_ph-MVPEwqI-zSWY.roa
Signing time: Thu 02 Jan 2025 09:50:14 +0000
ROA not before: Thu 02 Jan 2025 09:50:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210895
IP address blocks: 91.198.166.0/24 maxlen: 24
185.253.7.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:3a:14:36:ff:ed:17:4c:a7:ff:a6:ae:e5:2c:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fcad89df1bf99a36f290cc3ef0f1e7b4d027533
Validity
Not Before: Jan 2 09:50:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8bda25098dea137ffa61f8c54f130a88fb34966
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3f:d3:50:41:64:e6:6c:3c:52:a0:bf:28:58:
39:12:38:83:40:b6:c6:e0:dd:9e:ae:bb:91:67:b1:
f8:08:a6:3c:2b:7e:54:fc:0d:b1:93:56:93:73:18:
53:75:66:25:45:3d:56:71:0e:98:d8:56:5e:c2:5a:
81:13:bf:20:98:58:09:4c:d5:29:5a:ea:c6:c1:6c:
ac:78:01:0e:d4:3e:48:0d:09:3a:a6:69:4a:0b:77:
f7:df:c1:1f:76:e6:91:b9:47:55:e5:c2:a7:2f:e2:
3d:5d:f4:8c:85:8c:a0:0c:4c:30:7a:29:bc:fc:e2:
16:ba:7c:a7:f3:26:15:dd:fc:ab:6c:ff:98:00:0c:
b7:57:51:a3:77:c6:11:29:95:04:02:87:a4:a8:b1:
2d:25:6a:d2:89:5a:18:78:8c:8e:1d:aa:1c:5e:2c:
6f:6a:72:16:a6:40:7e:1b:01:70:e6:10:08:4b:68:
e1:8a:22:8f:e9:48:9f:48:df:57:28:cf:ac:15:17:
5a:3b:44:77:0a:85:8d:93:03:cd:45:6d:5f:be:2a:
03:ce:c9:71:2b:ff:7f:6b:f5:fd:a8:82:8c:3b:c5:
79:36:72:27:41:d7:2a:3e:ea:69:0e:19:9a:e3:c5:
dc:a4:fc:e2:75:05:fc:fd:00:0f:54:41:95:2c:57:
e4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:BD:A2:50:98:DE:A1:37:FF:A6:1F:8C:54:F1:30:A8:8F:B3:49:66
X509v3 Authority Key Identifier:
keyid:7F:CA:D8:9D:F1:BF:99:A3:6F:29:0C:C3:EF:0F:1E:7B:4D:02:75:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8rYnfG_maNvKQzD7w8ee00CdTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/1-L2iUJjeoTf_ph-MVPEwqI-zSWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/9f8b16-284f-4512-b3dc-015d9f1b4b50/1/f8rYnfG_maNvKQzD7w8ee00CdTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.166.0/24
185.253.7.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:cf:81:ae:cb:e9:1b:1f:06:f1:68:51:7a:fc:a0:5a:f3:1a:
fb:d1:26:b0:77:a4:41:2e:47:0d:7d:39:17:04:55:c6:da:0e:
fa:56:76:9d:8d:fe:ab:1d:f0:17:fa:0e:36:44:f3:42:23:45:
3b:2e:2b:82:2b:78:60:c9:78:3c:47:d7:d4:7d:64:8e:94:2b:
df:1d:0f:ff:8a:a0:eb:11:aa:c2:ce:39:1c:29:a5:1b:ba:ac:
81:bd:e3:89:38:29:40:6e:d5:d1:6c:40:9d:57:05:84:5a:85:
7c:ba:b9:95:99:a1:af:2c:37:d2:6f:d1:d2:f8:b7:57:1e:84:
a6:a7:6d:9b:31:01:a3:7d:f3:a8:d5:70:9b:ed:90:88:12:72:
d9:9c:84:5f:a7:2a:8a:a1:90:a2:e6:57:be:a4:7d:39:13:e4:
3e:ff:d2:e5:17:91:fe:45:ed:45:33:69:95:ca:cc:93:37:cd:
3b:88:ac:24:39:32:d6:eb:4e:eb:11:17:ed:8b:44:75:3b:11:
21:d9:29:a1:6a:97:c3:a6:ee:b8:99:d2:c5:58:33:7b:9c:a8:
9c:3a:8d:c1:d0:9a:7e:82:7a:f4:66:38:dd:28:56:fb:8c:49:
1e:83:38:c8:fd:f5:fa:8a:ed:d8:b2:5c:23:81:b0:79:e8:7e:
dc:d1:e8:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:59:21 2025 by rpki-client