Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/8-SPB1FRD1dqgSwieEEafk1GdQA.roa
File: 8-SPB1FRD1dqgSwieEEafk1GdQA.roa (raw, json)
Hash identifier: vazRE5ylOn6vVMnXFU4rXRZh7sO8QjAU8zOnvhOztXo=
Subject key identifier: F3:E4:8F:07:51:51:0F:57:6A:81:2C:22:78:41:1A:7E:4D:46:75:00
Certificate issuer: /CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Certificate serial: 019423D7CC4CA0FBCD45D574A18A6E8E573B
Authority key identifier: A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/8-SPB1FRD1dqgSwieEEafk1GdQA.roa
Signing time: Wed 01 Jan 2025 21:48:52 +0000
ROA not before: Wed 01 Jan 2025 21:48:52 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 49554
IP address blocks: 91.225.112.0/22 maxlen: 22
91.225.113.0/24 maxlen: 24
2001:678:c00::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:cc:4c:a0:fb:cd:45:d5:74:a1:8a:6e:8e:57:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7fc5c65c93a7404086b17a54e7e0da960a9b293
Validity
Not Before: Jan 1 21:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f3e48f0751510f576a812c2278411a7e4d467500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:27:04:06:e6:39:e3:51:b9:ed:6d:54:a8:ca:
47:4c:84:e6:09:93:a9:fe:b1:44:ae:99:b2:a0:0b:
d2:cb:27:a8:a5:63:db:05:1d:5c:bd:ab:ff:fc:63:
9d:bd:7a:1e:c9:00:61:40:c5:e2:d4:ed:1a:03:14:
36:5a:c5:44:91:b4:61:08:27:8c:02:ae:f3:ff:85:
bf:7f:d3:17:33:c0:1c:75:d9:60:ad:2d:f8:36:6c:
55:bf:e7:85:60:7a:bf:e6:f5:ee:63:76:09:84:7e:
87:b1:7b:9c:39:27:74:aa:e2:58:d6:69:94:0b:46:
41:fa:c4:8b:09:52:c5:be:a5:c0:cb:bf:1e:df:9f:
cd:1c:db:38:4b:5c:de:75:13:2a:4a:75:e1:f5:da:
1d:51:79:6f:04:e1:95:a6:b7:8a:c5:b5:f4:d0:e3:
9d:c6:33:1d:5c:d3:cc:a0:8e:42:38:70:0c:68:30:
c1:c0:a1:21:c0:cc:54:fe:a7:c2:1e:ea:5e:01:e4:
15:d0:8f:fb:bd:61:6a:b8:c0:f4:59:e8:dc:36:50:
ba:46:80:6d:f3:2b:b2:28:c3:b7:0c:09:c8:57:25:
61:29:e4:d4:47:8d:83:91:46:12:63:1f:d6:62:15:
cb:2a:0e:94:13:d8:40:80:21:06:ee:90:8c:e4:80:
a2:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:E4:8F:07:51:51:0F:57:6A:81:2C:22:78:41:1A:7E:4D:46:75:00
X509v3 Authority Key Identifier:
keyid:A7:FC:5C:65:C9:3A:74:04:08:6B:17:A5:4E:7E:0D:A9:60:A9:B2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p_xcZck6dAQIaxelTn4NqWCpspM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/8-SPB1FRD1dqgSwieEEafk1GdQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8fcb12-ae4e-4353-a3b9-f0ad375a8086/1/p_xcZck6dAQIaxelTn4NqWCpspM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.225.112.0/22
IPv6:
2001:678:c00::/48
Signature Algorithm: sha256WithRSAEncryption
8e:21:27:14:a3:8b:d3:ad:96:a8:b8:9d:50:76:14:15:9b:2f:
7d:96:fd:08:12:de:fc:ce:ec:ed:35:56:03:e3:d7:71:1a:12:
d8:e9:76:24:88:7c:d0:25:98:eb:eb:3e:b0:20:55:c5:e9:6a:
32:66:65:83:55:89:95:2b:38:61:d6:81:b0:8b:8b:1f:00:7b:
80:a8:20:80:96:6a:74:f9:f3:97:90:84:a9:53:83:19:18:b5:
df:33:3e:ad:38:da:de:e7:52:99:dc:84:f4:c7:1d:cb:e4:68:
b9:19:64:26:66:c8:4b:2c:2b:0f:0d:5e:b1:7d:dd:70:1e:a2:
67:fd:6b:5a:9a:58:5a:e9:5e:d3:2a:5e:ae:25:54:b3:ee:88:
54:91:1f:92:cb:3c:b4:fe:d2:d7:7c:2d:9f:82:c7:ab:83:fb:
cb:ea:9a:43:76:e4:e4:66:b2:f4:c5:11:33:25:fb:58:48:4a:
f7:9a:2a:db:d3:a5:a9:4a:09:3e:c6:94:36:3c:3a:63:3b:24:
ed:5c:8f:bd:c9:38:ce:70:bd:0e:48:e5:21:cc:d1:71:6f:85:
c1:a1:0f:80:2f:ba:f5:ec:d5:22:b2:19:8e:a2:16:3b:e0:54:
e8:35:b9:fc:a8:d4:34:a8:45:49:ce:d6:f1:ac:37:45:ec:0b:
03:f1:31:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 14:26:05 2025 by rpki-client