Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/p7_Reg5oqAMCTuSKYBRdx9R8y_Q.roa
File: p7_Reg5oqAMCTuSKYBRdx9R8y_Q.roa (raw, json)
Hash identifier: 4Tird0gxSDvtdkssmOnvUe7c/36Wu7079grQvljApx8=
Subject key identifier: A7:BF:D1:7A:0E:68:A8:03:02:4E:E4:8A:60:14:5D:C7:D4:7C:CB:F4
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019428246E8AF0664A574F42B028B92A7B5A
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/p7_Reg5oqAMCTuSKYBRdx9R8y_Q.roa
Signing time: Thu 02 Jan 2025 17:51:03 +0000
ROA not before: Thu 02 Jan 2025 17:51:03 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 31490
IP address blocks: 85.217.188.0/24 maxlen: 24
87.121.121.0/24 maxlen: 32
93.123.23.0/24 maxlen: 24
185.219.124.0/24 maxlen: 24
2a00:1728:20::/48 maxlen: 48
2a00:1728:20:100::/56 maxlen: 56
2a00:1728:33::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:24:6e:8a:f0:66:4a:57:4f:42:b0:28:b9:2a:7b:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 17:51:03 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7bfd17a0e68a803024ee48a60145dc7d47ccbf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:8d:26:56:51:0c:22:73:f6:5f:f7:5a:b7:82:
c9:62:65:72:bb:d5:8f:ed:43:2d:81:2e:49:5c:cd:
2f:6e:5c:81:ee:86:34:c0:31:48:6a:27:7d:d1:63:
8f:d4:7c:b0:2e:de:1b:64:92:0c:53:cc:21:5b:ee:
e4:d1:d9:3a:9c:32:10:8a:10:94:4a:2c:9e:90:82:
96:66:78:29:5a:f2:c2:f8:1c:8b:70:37:06:50:1b:
fa:f8:ae:40:43:bb:f9:d6:6c:d7:b8:9a:da:81:30:
bd:78:6a:55:7f:09:b8:4d:49:44:66:4d:2e:6a:34:
d6:48:f5:02:2e:a2:d0:8f:95:7f:9c:9e:bf:b1:8a:
29:f7:9c:9a:65:66:03:ce:9c:60:8a:b7:2b:0b:81:
88:c5:76:68:d3:33:6b:bf:16:32:14:d2:ac:f9:aa:
f2:6a:37:a2:d1:c6:4c:f6:b4:77:35:46:af:d7:28:
e7:c3:74:b9:af:f6:ef:e0:7b:71:f1:f0:00:24:24:
c0:9a:a1:29:11:8b:c9:9a:a8:2d:15:8b:70:f4:5d:
e1:60:98:d0:de:db:0d:d1:3b:0f:9b:6c:7c:4b:4e:
82:3e:38:75:41:06:9c:0a:c1:44:0b:c3:2e:ce:4f:
7a:7c:87:d5:de:48:b7:d5:ad:9b:69:b3:b3:2c:dd:
20:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:BF:D1:7A:0E:68:A8:03:02:4E:E4:8A:60:14:5D:C7:D4:7C:CB:F4
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/p7_Reg5oqAMCTuSKYBRdx9R8y_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.188.0/24
87.121.121.0/24
93.123.23.0/24
185.219.124.0/24
IPv6:
2a00:1728:20::/48
2a00:1728:33::/48
Signature Algorithm: sha256WithRSAEncryption
ae:91:cf:51:b8:58:52:e3:ac:da:77:1f:9d:1d:17:64:ec:7e:
f2:b0:28:c8:a1:a7:d9:3b:d5:de:ed:10:73:b2:67:7e:0d:ec:
50:bf:40:d8:24:06:8a:68:cd:39:9f:3a:9f:f4:b1:35:da:2d:
77:ea:5d:0d:03:d2:66:5d:34:df:f6:4e:29:ce:2c:8b:6f:cb:
d4:7e:42:3d:75:e4:fd:2f:ee:d4:44:2f:7e:23:80:8a:a0:44:
e1:c9:14:d8:fb:d1:9d:0d:60:f0:16:64:b5:2d:79:0f:a4:ad:
29:d2:25:81:09:96:db:0e:dd:1b:d8:d9:b9:04:a0:0e:b0:d0:
79:63:da:46:94:24:a3:f2:f5:e3:a7:c3:82:7a:4d:0b:48:f4:
1a:78:57:02:25:d6:54:4b:45:e3:7f:49:85:4c:2a:4b:e6:4c:
1e:e1:35:20:be:4c:a8:67:14:a8:3c:e8:62:84:e0:b3:0e:a2:
c1:d1:a0:39:fd:29:d9:5d:9b:11:82:7f:1b:86:3b:b2:fe:ea:
95:79:65:80:6e:74:85:29:14:50:34:9f:eb:58:ec:d2:70:37:
64:00:3c:27:92:ea:61:3e:34:43:c2:15:0f:a3:e2:87:63:52:
b6:92:de:4e:a9:7d:b9:50:72:03:0a:e7:11:3b:e1:e8:6b:fc:
48:88:2a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 08:57:07 2025 by rpki-client