Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/rnFKFHUDJ2VK_n3nnMWQgvu93Us.roa
File: rnFKFHUDJ2VK_n3nnMWQgvu93Us.roa (raw, json)
Hash identifier: ddxwbWDe9h7jTPjb6zGryBRSU7cXly9K/marvCxyA4o=
Subject key identifier: AE:71:4A:14:75:03:27:65:4A:FE:7D:E7:9C:C5:90:82:FB:BD:DD:4B
Certificate issuer: /CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Certificate serial: 0194266BB8C047A3683A5EAAF8B50AAAC5E2
Authority key identifier: F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/rnFKFHUDJ2VK_n3nnMWQgvu93Us.roa
Signing time: Thu 02 Jan 2025 09:49:41 +0000
ROA not before: Thu 02 Jan 2025 09:49:41 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 213358
IP address blocks: 91.208.68.0/24 maxlen: 24
94.124.100.0/22 maxlen: 24
194.113.22.0/23 maxlen: 24
2a06:a900::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:b8:c0:47:a3:68:3a:5e:aa:f8:b5:0a:aa:c5:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f64ad45d22b5f3cf2e71ce0ac01074b7cd21ac57
Validity
Not Before: Jan 2 09:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ae714a14750327654afe7de79cc59082fbbddd4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:54:32:7e:c7:23:0e:5b:da:1d:a1:1c:ed:02:
ab:45:cf:33:4e:dd:f2:93:cd:f7:1c:80:a3:95:68:
69:4b:cf:a0:78:63:dd:d0:f8:5a:d9:6b:79:6a:ff:
35:4c:d3:7d:5c:67:cc:f3:22:04:5d:7a:f7:e9:fe:
a4:f2:d0:d3:9d:b2:e7:3d:c4:6b:73:99:51:74:88:
76:a6:4b:09:d2:8e:b6:c8:55:27:5c:c2:97:98:37:
67:fb:72:91:76:ef:9b:03:02:01:d1:2d:60:31:ab:
06:56:a9:35:2e:e9:ec:e8:5e:8e:0e:bb:9e:69:ed:
17:e6:0d:dd:86:86:73:47:6a:45:8a:53:86:82:71:
3f:ee:cf:b2:b5:61:88:a0:f5:2b:80:91:56:49:2f:
e1:8b:44:c4:e4:29:be:93:08:47:bd:f4:38:9f:c8:
a1:6e:b9:24:6d:72:f4:03:bb:f1:9c:a0:37:c3:5a:
c7:d7:c0:58:e7:fe:f7:58:2b:2b:a1:b4:fe:b4:c7:
30:f9:7d:58:1f:86:f1:12:26:09:72:8d:b1:cc:bf:
15:c4:cf:2a:cb:97:17:50:00:55:22:3f:72:68:6e:
df:d0:46:55:03:09:e7:21:8a:53:82:cb:31:65:86:
8f:73:14:e6:ce:c7:79:29:18:0d:8e:74:3a:a1:79:
49:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:71:4A:14:75:03:27:65:4A:FE:7D:E7:9C:C5:90:82:FB:BD:DD:4B
X509v3 Authority Key Identifier:
keyid:F6:4A:D4:5D:22:B5:F3:CF:2E:71:CE:0A:C0:10:74:B7:CD:21:AC:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9krUXSK1888ucc4KwBB0t80hrFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/rnFKFHUDJ2VK_n3nnMWQgvu93Us.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/ee3b84-27d7-4dc7-8f3d-699b234fc78c/1/9krUXSK1888ucc4KwBB0t80hrFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.68.0/24
94.124.100.0/22
194.113.22.0/23
IPv6:
2a06:a900::/29
Signature Algorithm: sha256WithRSAEncryption
a2:a5:d7:4e:af:d2:a0:6c:99:f8:7b:ac:08:ad:34:60:d1:4a:
be:b7:8b:25:70:c3:4a:23:a1:83:80:0e:b4:b6:cf:35:f6:e7:
ef:3a:0c:70:17:b2:b2:fe:2d:df:26:b1:48:14:a8:e5:bd:db:
b6:53:a9:ed:f0:a5:c7:00:5f:16:b3:c7:73:b7:d4:07:2e:21:
36:fe:f9:ea:ef:cd:9d:4d:94:10:62:6f:f3:a7:81:3a:0a:09:
5a:26:06:a9:51:6b:46:58:55:3a:bc:6b:d9:7c:a4:d7:84:6d:
ed:07:60:2d:ad:87:3c:09:29:16:17:e2:da:9a:ce:8f:c4:5e:
78:d0:39:80:58:02:fe:01:ea:eb:21:ae:f0:ca:b0:53:ad:98:
2a:b1:82:b5:ea:70:26:b3:59:f3:3c:47:9a:7c:a9:b2:93:74:
61:61:a4:77:6e:98:e4:29:14:33:07:46:3e:1d:af:39:5d:6d:
12:1a:54:bc:49:45:b3:42:24:cd:38:f0:e6:3d:71:5e:a8:43:
a4:85:c8:d5:30:8e:7e:9c:6c:75:89:a2:35:63:d3:ee:d0:ad:
90:02:3c:1b:2d:39:17:b7:79:93:65:a0:d9:d4:2b:2c:cc:cf:
01:8c:6f:d0:5c:b8:82:08:f1:bd:fd:bf:7f:e3:51:1f:03:22:
f6:37:61:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:42:31 2025 by rpki-client