Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/TJhuA5qI7EN9HDyV96WXGF2JSfo.roa
File: TJhuA5qI7EN9HDyV96WXGF2JSfo.roa (raw, json)
Hash identifier: 5D865Bd9WMBm3Lfxl+Be0ercoZWZG3ocPw41PojFMmo=
Subject key identifier: 4C:98:6E:03:9A:88:EC:43:7D:1C:3C:95:F7:A5:97:18:5D:89:49:FA
Certificate issuer: /CN=f2f4a6c0b3c2b0c032deddcd23d421ffb96200fc
Certificate serial: 0194228DD6C7F83C7F87EE89E4085FC82364
Authority key identifier: F2:F4:A6:C0:B3:C2:B0:C0:32:DE:DD:CD:23:D4:21:FF:B9:62:00:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8vSmwLPCsMAy3t3NI9Qh_7liAPw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/TJhuA5qI7EN9HDyV96WXGF2JSfo.roa
Signing time: Wed 01 Jan 2025 15:48:28 +0000
ROA not before: Wed 01 Jan 2025 15:48:28 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49798
IP address blocks: 91.219.132.0/22 maxlen: 22
91.221.4.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8d:d6:c7:f8:3c:7f:87:ee:89:e4:08:5f:c8:23:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2f4a6c0b3c2b0c032deddcd23d421ffb96200fc
Validity
Not Before: Jan 1 15:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4c986e039a88ec437d1c3c95f7a597185d8949fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:50:23:d8:01:f7:89:b7:56:d3:f4:75:9e:46:
65:69:0b:eb:09:a1:9f:db:0f:eb:e5:2c:6f:6c:45:
ef:63:15:55:16:cd:ff:da:d4:d2:79:d5:0a:87:28:
b0:10:88:22:8e:2b:aa:cf:12:44:bd:eb:04:9b:c4:
ff:4a:52:0e:f1:da:68:22:9c:81:95:6a:ce:c5:34:
aa:7c:4a:a9:a1:33:86:8d:22:15:d9:a8:ed:12:bd:
de:61:f6:f8:9d:ae:8d:3d:a0:53:71:6e:9e:5f:f5:
cf:90:7f:77:62:28:45:66:3e:24:cb:31:3e:f2:60:
b6:a6:f1:65:5b:2e:bd:c4:18:52:32:36:6b:e4:6b:
4c:da:4f:04:b6:ce:d7:d3:87:a0:f7:53:d6:9d:37:
f6:bb:3c:a9:0c:35:09:e6:0b:7e:b9:d6:b2:29:8a:
ca:75:a6:4c:c7:d2:95:0a:5b:21:ae:7a:ec:31:71:
ef:d8:8e:bf:23:e8:22:16:3c:82:65:d1:52:bf:5f:
10:cf:6c:c2:16:0e:59:bd:41:b5:14:b4:25:b4:6d:
60:9b:f0:9c:3f:88:0d:2d:ac:20:0d:f2:25:af:fc:
74:bb:67:2e:28:23:d6:4c:ba:31:e6:e1:65:dd:bc:
a3:f9:c1:48:14:e1:71:8f:5b:8e:ae:fe:fe:0b:d9:
96:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:98:6E:03:9A:88:EC:43:7D:1C:3C:95:F7:A5:97:18:5D:89:49:FA
X509v3 Authority Key Identifier:
keyid:F2:F4:A6:C0:B3:C2:B0:C0:32:DE:DD:CD:23:D4:21:FF:B9:62:00:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8vSmwLPCsMAy3t3NI9Qh_7liAPw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/TJhuA5qI7EN9HDyV96WXGF2JSfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/cbe997-1c8b-4242-a701-309864b4d491/1/8vSmwLPCsMAy3t3NI9Qh_7liAPw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.219.132.0/22
91.221.4.0/23
Signature Algorithm: sha256WithRSAEncryption
10:88:86:4f:6d:cc:3d:07:3b:dc:b4:c4:c4:4b:8d:35:ad:26:
84:c0:58:68:d8:70:8e:aa:29:c4:5b:08:a4:be:0f:87:17:9e:
9e:1f:25:b2:3e:44:b4:74:97:a0:ca:27:cc:3d:67:cb:c2:38:
b2:6d:ca:da:56:ea:0a:45:14:f6:eb:34:74:13:ff:64:7d:b5:
75:0c:ff:68:42:f2:b5:5b:64:6b:d5:84:42:e8:52:75:29:2a:
6b:db:e3:3d:25:55:dc:7a:64:ae:d5:3b:ad:96:30:1f:ab:25:
8d:3b:29:f4:5b:75:db:69:bd:40:f2:c7:0e:be:dc:97:7c:5e:
f7:f6:83:0f:b0:74:8f:f5:fd:ed:8d:33:a9:ea:77:a5:aa:0c:
75:b8:a1:81:17:da:a1:9c:4a:a2:53:64:4a:46:c0:8f:bd:9e:
1e:c4:d4:d5:9a:f8:b4:7d:d2:3f:d0:9e:24:e1:4b:ae:89:d8:
d3:98:9f:02:c2:2b:30:f1:16:88:4f:4a:71:ea:53:d4:15:9d:
bb:25:cd:b5:c0:f1:12:fb:ca:ef:f9:72:27:ed:98:8a:fd:a0:
7d:28:da:82:cd:47:66:08:d5:76:16:f2:e1:db:4a:4a:04:55:
f1:4c:79:86:1f:3d:58:b7:f5:4d:3a:29:90:c6:33:a0:de:90:
d4:2c:66:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 03:03:33 2025 by rpki-client