Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/7j9uxnJfVl55LcxAf_fr4i2drjY.roa
File: 7j9uxnJfVl55LcxAf_fr4i2drjY.roa (raw, json)
Hash identifier: 7whaNaNl7Pm7UlaWsp36rTim4yAY8fmMQU6Aiv7KQCs=
Subject key identifier: EE:3F:6E:C6:72:5F:56:5E:79:2D:CC:40:7F:F7:EB:E2:2D:9D:AE:36
Certificate issuer: /CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418
Certificate serial: 0194258FAE1CB778EEBEE6392056C787179B
Authority key identifier: 98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/7j9uxnJfVl55LcxAf_fr4i2drjY.roa
Signing time: Thu 02 Jan 2025 05:49:20 +0000
ROA not before: Thu 02 Jan 2025 05:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199059
IP address blocks: 91.205.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:ae:1c:b7:78:ee:be:e6:39:20:56:c7:87:17:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98d66fb9adadb6a9057bf60aaa3ff52c66540418
Validity
Not Before: Jan 2 05:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee3f6ec6725f565e792dcc407ff7ebe22d9dae36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:03:54:b0:73:03:80:4f:df:e9:fc:86:70:d5:
0c:e1:bc:ac:07:50:57:6b:a8:b0:d0:93:1a:a2:a1:
89:76:1d:46:1f:bf:ee:f5:44:9e:79:be:97:13:2b:
7e:63:3d:60:a1:50:71:29:92:76:1a:8e:be:b8:e6:
f6:45:38:9f:13:75:df:23:05:71:0e:2d:9b:b0:f8:
eb:f4:40:9f:b9:24:8f:9f:bc:de:07:78:1c:c5:d9:
d1:51:ed:d5:4b:aa:49:c2:3b:cd:3c:75:4b:5a:d6:
09:8d:88:0e:35:a4:28:43:45:b6:17:bd:bd:fd:a8:
7e:94:f0:ea:b2:7a:69:05:41:f3:7f:fe:ae:d6:d6:
63:4a:e6:cb:08:db:1f:cc:e8:9b:ef:c5:75:fc:2a:
a6:c8:25:34:66:76:7b:a8:cf:7f:16:0f:ae:32:bc:
ec:7e:34:67:2d:fa:d1:13:85:3b:55:39:39:72:21:
69:65:03:a0:83:14:16:15:50:0a:40:ba:7f:29:d0:
4c:ce:28:3e:75:20:36:f2:53:96:4c:97:ee:e6:6a:
96:d0:4d:2f:7d:5a:3d:d1:c0:dc:0d:86:5c:90:37:
dc:96:e2:d4:55:98:95:47:42:2e:75:04:93:86:23:
20:cc:2f:a6:d2:10:a9:85:17:09:b8:4c:91:ac:08:
d7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:3F:6E:C6:72:5F:56:5E:79:2D:CC:40:7F:F7:EB:E2:2D:9D:AE:36
X509v3 Authority Key Identifier:
keyid:98:D6:6F:B9:AD:AD:B6:A9:05:7B:F6:0A:AA:3F:F5:2C:66:54:04:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mNZvua2ttqkFe_YKqj_1LGZUBBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/7j9uxnJfVl55LcxAf_fr4i2drjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/218197-7ec1-43a8-a591-73675f18113a/1/mNZvua2ttqkFe_YKqj_1LGZUBBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.195.0/24
Signature Algorithm: sha256WithRSAEncryption
08:26:06:37:93:e2:b0:60:e9:75:97:d1:fe:5d:82:8c:48:3f:
53:4d:d7:99:9a:42:b1:ec:2b:1b:7b:4e:5a:d0:68:2d:94:15:
43:fc:fe:78:8a:c3:43:b4:ea:8e:37:0e:6e:ad:95:e1:cd:dd:
68:8e:0b:e6:94:ef:df:68:a8:d5:6b:fe:d0:5d:6c:bf:b9:12:
c3:53:72:e5:31:09:fc:96:f1:69:9a:09:42:4b:c5:30:51:30:
b3:db:5a:92:8c:32:22:bf:df:7a:63:3e:a6:d7:ca:70:6a:5c:
fb:f1:c2:1d:e5:84:e1:e2:ca:d6:2b:6f:6a:b1:74:d4:cd:db:
57:83:45:5f:f9:72:9e:33:b4:2c:08:de:6a:1b:f7:9b:0d:e6:
29:07:50:71:c8:ff:97:82:b9:f5:79:f8:7f:00:4d:15:e1:af:
1f:8e:43:8a:0f:a2:42:0d:e0:23:a1:6f:70:7c:43:d3:90:71:
a3:63:70:aa:53:7b:25:40:ec:19:8c:f5:fa:d7:e5:71:f3:68:
ae:ac:fc:59:d9:7c:e2:42:fd:4a:9c:c7:7f:8a:4f:76:da:81:
d3:14:34:a8:b7:0c:43:88:81:5b:9e:9f:19:c2:6e:45:2b:cd:
6d:0c:6f:e4:34:c8:79:0b:5c:c2:41:f3:3f:8d:af:1b:1c:37:
d8:a1:05:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:32:47 2025 by rpki-client