Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/FZaUJFQYhfOyQWOOlP3rV_o9nW4.roa
File: FZaUJFQYhfOyQWOOlP3rV_o9nW4.roa (raw, json)
Hash identifier: 8mXMxLhYRdd/VkcpNmHYspbdck1amSr4XmtcJs+HDLA=
Subject key identifier: 15:96:94:24:54:18:85:F3:B2:41:63:8E:94:FD:EB:57:FA:3D:9D:6E
Certificate issuer: /CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Certificate serial: 019425FC06D1EC40CBB8723713AB083F880B
Authority key identifier: 80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/FZaUJFQYhfOyQWOOlP3rV_o9nW4.roa
Signing time: Thu 02 Jan 2025 07:47:41 +0000
ROA not before: Thu 02 Jan 2025 07:47:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 210078
IP address blocks: 91.247.120.0/23 maxlen: 23
91.247.122.0/24 maxlen: 24
91.247.125.0/24 maxlen: 24
109.200.136.0/22 maxlen: 22
109.200.140.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:06:d1:ec:40:cb:b8:72:37:13:ab:08:3f:88:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=808e238e30dcb759759fb8a394d9e211a28b9d87
Validity
Not Before: Jan 2 07:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=15969424541885f3b241638e94fdeb57fa3d9d6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d0:95:05:b4:4a:67:12:0a:b4:4a:aa:88:54:
0a:02:56:e6:ed:de:c3:45:2f:22:3c:f1:0c:e5:6a:
47:bf:e7:be:fc:52:bf:de:9a:89:57:5d:c4:9b:7b:
70:39:3a:41:37:87:ba:97:3d:04:dc:19:bc:8b:1c:
b4:a0:51:c1:4a:97:6e:81:02:a6:f2:74:81:a2:c5:
3b:1a:f9:74:b7:3b:a7:b5:03:1b:d0:2e:b4:41:57:
4e:fa:49:7b:c7:fd:8d:24:ca:bb:2c:ac:39:f4:65:
bd:90:aa:3e:c9:82:47:12:4d:66:be:46:4f:5a:c3:
ce:85:09:08:2f:43:5b:c9:50:7b:9f:e6:9a:da:d7:
06:01:2d:14:36:6d:7a:02:12:a0:af:81:05:d2:c9:
91:44:a3:b4:97:af:b6:71:bf:67:d1:76:fd:1f:50:
89:0c:8d:c0:b0:7c:49:57:4d:76:48:88:04:a3:64:
a8:57:23:f6:d1:3b:83:a6:e9:95:1d:3a:bd:94:02:
31:a4:9c:19:ab:b3:55:4f:fc:c1:b7:14:79:41:a1:
fb:a8:23:ec:91:48:4e:d9:00:3b:52:77:12:04:91:
04:3b:07:36:43:fb:c5:e3:9e:67:05:9e:3f:1a:49:
db:80:56:24:b6:f2:05:fa:1a:f9:96:db:43:53:c3:
5b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:96:94:24:54:18:85:F3:B2:41:63:8E:94:FD:EB:57:FA:3D:9D:6E
X509v3 Authority Key Identifier:
keyid:80:8E:23:8E:30:DC:B7:59:75:9F:B8:A3:94:D9:E2:11:A2:8B:9D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gI4jjjDct1l1n7ijlNniEaKLnYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/FZaUJFQYhfOyQWOOlP3rV_o9nW4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/7b2cd6-b1f3-43fc-9f09-cd974042649f/1/gI4jjjDct1l1n7ijlNniEaKLnYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.247.120.0-91.247.122.255
91.247.125.0/24
109.200.136.0-109.200.141.255
Signature Algorithm: sha256WithRSAEncryption
77:f1:3b:cd:d0:aa:7a:ed:9d:4d:b2:8c:e6:83:d3:31:8f:61:
b3:36:3f:9c:26:76:36:a4:42:98:12:67:ae:25:03:ff:fe:f8:
41:0a:36:b7:4d:08:3b:d5:5a:7b:16:29:eb:84:f3:71:dc:ba:
68:05:97:2e:77:f5:a6:4d:f0:6b:c4:a0:6b:48:e6:bc:06:1b:
71:7f:38:2f:0d:a7:52:84:99:ca:2f:d7:29:bb:9b:6b:10:28:
55:75:55:3d:59:b6:63:cc:11:4a:a2:68:54:4b:2f:23:cd:68:
97:95:c3:77:8d:5a:32:cb:fa:4b:60:87:97:52:46:c3:3e:60:
e3:15:15:65:88:6f:16:a7:29:08:c9:ce:8c:d8:ed:4d:00:48:
36:15:d7:42:9a:c8:37:d1:60:8f:49:55:ff:1c:11:a0:9f:13:
21:90:4b:2c:be:be:ef:12:fc:3e:d9:e7:36:32:ba:f8:fc:ab:
2b:a0:54:93:27:9b:ce:c6:84:3e:90:23:07:76:e9:a5:dc:97:
34:1b:f8:4e:87:c4:91:52:ca:a1:ca:10:48:ba:1b:1e:eb:3f:
c3:56:e6:45:97:1c:83:4f:06:24:78:9d:f3:1d:bb:4e:23:5c:
55:80:f0:94:94:70:2a:5f:c6:36:5b:bb:f9:0c:4b:24:e0:12:
f5:f8:55:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:42:40 2025 by rpki-client