Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/c7MGsEbypq7HQmSi7CA8wcLve5E.roa
File: c7MGsEbypq7HQmSi7CA8wcLve5E.roa (raw, json)
Hash identifier: qY1ylvNOSUvOO34D9YGb2Z/M9yHjYdSK25iwWmwBxOk=
Subject key identifier: 73:B3:06:B0:46:F2:A6:AE:C7:42:64:A2:EC:20:3C:C1:C2:EF:7B:91
Certificate issuer: /CN=601331eccd96d02c1035734cd00a390e8311d942
Certificate serial: 019422FBECB6201ADBCFF8643CC5CC14424A
Authority key identifier: 60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/c7MGsEbypq7HQmSi7CA8wcLve5E.roa
Signing time: Wed 01 Jan 2025 17:48:42 +0000
ROA not before: Wed 01 Jan 2025 17:48:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 200076
IP address blocks: 194.59.24.0/22 maxlen: 22
2a0c:fac0::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:ec:b6:20:1a:db:cf:f8:64:3c:c5:cc:14:42:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601331eccd96d02c1035734cd00a390e8311d942
Validity
Not Before: Jan 1 17:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73b306b046f2a6aec74264a2ec203cc1c2ef7b91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:86:cd:da:9b:84:83:b3:ff:20:bb:13:19:59:
e9:fe:ef:db:16:4a:e2:4e:c5:39:a0:fc:a7:1d:92:
60:07:37:fd:60:4e:49:d3:78:94:98:98:09:2f:f5:
d6:28:31:8f:42:17:21:55:7b:cb:75:a6:02:3e:85:
ca:21:af:4f:bb:2f:38:53:c9:d1:2e:e0:db:87:83:
c6:8a:38:e4:0e:06:f4:08:4f:43:a5:65:77:6b:5b:
5e:9d:14:f8:24:c1:92:ae:3d:5f:31:4f:52:c5:fa:
cb:54:e7:5a:bc:35:ef:a6:4f:14:5d:0c:10:25:27:
02:ac:6c:24:35:f4:e9:ba:43:a7:86:c8:56:1b:7e:
90:45:99:6d:79:95:2b:3e:0e:39:2e:af:be:c6:2e:
bb:dd:4d:dc:bf:97:c1:dd:c9:96:af:39:60:19:f7:
57:bd:c9:7e:06:b0:eb:6d:b6:a6:72:0b:87:ce:f8:
69:6a:c0:ed:03:e0:d3:69:96:20:4b:2c:82:10:f3:
11:15:63:9f:0c:57:c3:a5:ce:cd:f0:32:a5:a6:fa:
ad:e2:2f:df:dd:41:6e:6b:ff:8a:b7:e8:79:f9:86:
30:3a:ff:5a:c9:8b:31:e0:c5:a6:5a:7a:26:06:70:
b4:2f:54:b5:cf:94:e9:f4:b0:cc:2c:6b:6d:79:0b:
7a:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B3:06:B0:46:F2:A6:AE:C7:42:64:A2:EC:20:3C:C1:C2:EF:7B:91
X509v3 Authority Key Identifier:
keyid:60:13:31:EC:CD:96:D0:2C:10:35:73:4C:D0:0A:39:0E:83:11:D9:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/c7MGsEbypq7HQmSi7CA8wcLve5E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/bf656b-ff93-454b-a39e-3b1131e504b8/1/YBMx7M2W0CwQNXNM0Ao5DoMR2UI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.24.0/22
IPv6:
2a0c:fac0::/48
Signature Algorithm: sha256WithRSAEncryption
00:ec:59:39:52:d7:3e:22:7d:db:6d:4c:0e:b8:72:f6:69:8d:
21:45:ed:3e:29:75:3c:38:cc:f6:e6:f6:bc:6f:21:28:3e:1d:
dc:ad:cc:d4:a5:db:ea:b5:5f:9c:56:32:e6:18:c7:9d:0c:da:
d6:41:79:79:cb:db:70:a7:d1:19:05:11:62:32:6f:54:d1:8c:
67:0f:9d:6f:db:18:3f:a7:1f:25:10:68:e0:61:7d:52:1f:cb:
2f:ec:a4:58:ea:cf:c6:24:b8:99:74:fd:50:44:1a:1e:de:74:
49:b7:2b:d2:6b:25:2d:65:e1:e6:4e:e2:2c:63:e2:f4:e4:21:
ea:ce:06:e8:ef:28:47:70:1d:d1:32:a7:6b:c6:c0:f4:54:27:
20:63:d7:ba:fd:5a:b8:a7:22:91:06:1d:6d:c3:af:12:9b:aa:
2c:99:8c:e0:06:da:61:b1:ae:83:0e:02:0e:26:2e:7c:6e:ec:
a5:3c:92:99:b4:2c:5c:8b:60:e8:63:8f:f9:fd:99:bc:fe:05:
42:d4:5d:b3:b1:cb:78:5a:ff:e2:07:39:96:01:11:6a:c4:1f:
53:5f:f8:5e:3e:f1:e9:df:fd:cc:48:f8:3b:52:91:f9:22:52:
65:4e:bb:f6:bc:eb:67:dc:e5:1b:a6:38:57:70:39:9f:61:60:
f6:02:d0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 00:33:00 2025 by rpki-client