Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/7RyFzAenJrRSfpio3z8gQY_GG64.roa
File: 7RyFzAenJrRSfpio3z8gQY_GG64.roa (raw, json)
Hash identifier: odUPAcO4Dj6oNdh8N9FSZ9wG/7rei3J3ITe8+2Q8Y5M=
Subject key identifier: ED:1C:85:CC:07:A7:26:B4:52:7E:98:A8:DF:3F:20:41:8F:C6:1B:AE
Certificate issuer: /CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Certificate serial: 01941F8C2EADB3312EEC5F3A42F8FFA66AF7
Authority key identifier: B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/7RyFzAenJrRSfpio3z8gQY_GG64.roa
Signing time: Wed 01 Jan 2025 01:47:48 +0000
ROA not before: Wed 01 Jan 2025 01:47:48 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199188
IP address blocks: 185.187.148.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:2e:ad:b3:31:2e:ec:5f:3a:42:f8:ff:a6:6a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Validity
Not Before: Jan 1 01:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed1c85cc07a726b4527e98a8df3f20418fc61bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:24:b6:3d:76:d3:94:b9:57:4f:b0:8e:bc:6b:
e7:99:44:5d:ad:e6:fe:bb:79:6e:e5:a2:50:a9:d9:
12:db:27:74:5a:c8:f6:d4:a6:c1:70:a3:29:e2:e1:
2e:84:7a:73:d3:fc:fe:3c:08:6a:80:ce:a1:56:6f:
89:3a:36:cd:1f:1d:ee:60:f2:e6:f9:71:50:00:b7:
71:ba:9b:fc:d5:1e:78:3e:15:68:f5:8d:65:3b:57:
72:18:f0:83:3b:60:8d:85:06:c9:5d:9e:e7:af:b4:
1e:45:7e:59:4d:3a:1d:f7:8a:9f:50:8d:c8:21:e7:
9a:46:db:36:cf:3f:5d:97:24:0a:6a:67:99:92:63:
9a:78:7c:ca:71:01:29:38:ae:0e:9c:d0:ec:53:39:
8e:7b:ca:63:d7:01:e2:91:66:a2:5f:81:bc:cb:3c:
1c:ca:35:13:56:44:ae:e8:b7:c3:99:9f:81:02:8a:
c8:31:dc:9d:00:5b:5f:d0:61:01:cc:c7:dc:d1:c6:
0d:ca:cd:ce:1f:cd:b9:4e:b4:96:72:80:29:cc:73:
0b:14:36:9b:00:5d:19:8e:b2:e5:0b:11:08:12:2e:
93:2c:71:25:0b:ba:ac:fd:a6:42:34:2e:b7:3a:36:
2a:1b:a8:a1:8b:79:55:f0:fe:2f:69:be:78:94:32:
79:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:1C:85:CC:07:A7:26:B4:52:7E:98:A8:DF:3F:20:41:8F:C6:1B:AE
X509v3 Authority Key Identifier:
keyid:B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/7RyFzAenJrRSfpio3z8gQY_GG64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.187.148.0/22
Signature Algorithm: sha256WithRSAEncryption
7d:ad:82:c8:52:79:11:e0:e3:18:74:6d:e5:9a:29:39:6a:4e:
f9:0d:b2:df:1c:b2:89:61:06:b0:13:d9:ed:4d:af:99:4d:79:
1f:97:79:ca:8c:8a:d7:31:b7:64:12:27:63:11:4e:da:11:57:
23:de:77:be:51:c7:30:58:df:cd:7d:7e:62:13:ef:74:36:e5:
9e:ef:4d:9d:58:09:04:ee:fc:fb:f9:a5:ca:86:82:04:34:96:
db:05:56:05:79:1e:2e:1e:04:00:32:2d:d4:8a:53:c6:66:59:
3d:65:f8:da:23:f9:dc:e5:bb:16:2e:19:9e:02:3f:dd:ca:9b:
0f:bb:d3:b0:36:a9:38:d6:7e:7b:2c:5c:f6:8c:b5:99:c0:1e:
83:79:43:f6:c4:17:46:ab:9c:c1:39:5e:88:05:1d:67:26:2a:
1d:27:4b:9e:ff:ca:a9:59:3b:07:56:d9:09:bc:c4:c1:a9:08:
51:e3:65:e2:9b:e7:b5:ed:d2:be:76:be:59:42:2c:19:fc:7a:
db:9c:db:b3:bf:6d:6f:eb:f7:32:29:bc:45:b6:ba:56:f5:68:
d5:02:24:67:8a:90:d0:d8:64:2e:ce:24:af:78:35:8e:ea:26:
f5:c9:49:c0:68:fa:31:97:97:af:b2:43:4c:c0:b0:ad:d2:7e:
2f:fd:74:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:51:42 2025 by rpki-client