Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/7JwTekQ2tjFEdZLkqTIWTWDl694.roa
File: 7JwTekQ2tjFEdZLkqTIWTWDl694.roa (raw, json)
Hash identifier: vwEa+p0/d9QBYzjnHEhK+7G2R/Qxw/NinB7TZ/V7TxA=
Subject key identifier: EC:9C:13:7A:44:36:B6:31:44:75:92:E4:A9:32:16:4D:60:E5:EB:DE
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 01941FFAB6A90AD8ECE508279038404264BF
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/7JwTekQ2tjFEdZLkqTIWTWDl694.roa
Signing time: Wed 01 Jan 2025 03:48:31 +0000
ROA not before: Wed 01 Jan 2025 03:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 42330
IP address blocks: 185.250.9.0/24 maxlen: 24
185.250.10.0/23 maxlen: 23
2a0b:9400:1000::/48 maxlen: 48
2a0b:9400:1001::/48 maxlen: 48
2a0b:9401::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:b6:a9:0a:d8:ec:e5:08:27:90:38:40:42:64:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Jan 1 03:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec9c137a4436b631447592e4a932164d60e5ebde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c1:a5:d3:5c:5a:9e:a0:89:59:d1:47:cf:ed:
fb:91:40:ca:99:a2:37:49:09:db:77:5f:f6:a7:81:
fd:19:62:19:dd:a5:7e:b3:68:df:9f:80:04:28:23:
19:ba:c8:9b:82:45:3e:f2:fc:d2:de:6f:a5:3d:83:
6d:02:f4:3e:95:52:b9:20:72:33:40:e4:6e:ce:22:
55:ab:3c:51:06:35:3e:63:f3:2a:53:6c:bf:ec:f3:
7a:57:55:8c:20:55:de:bb:f8:8b:cd:8a:ae:2f:77:
2c:1d:70:89:f9:bc:af:8b:4a:d0:f7:25:02:dc:4d:
d6:f0:f3:32:b5:e5:71:02:9a:63:0b:f8:e2:51:2f:
0e:ea:50:58:ee:f1:02:13:1a:d5:16:5f:c7:41:e3:
5c:21:9b:f3:da:f9:fc:fa:e3:24:7c:8a:7c:c3:f8:
b3:27:37:83:f9:19:fd:3b:3e:39:aa:26:d5:0e:35:
41:cb:14:f1:a6:e4:1a:59:f3:bd:be:95:5c:cd:2b:
3d:bb:e8:b4:40:3b:ca:7d:80:7a:fb:a9:76:04:98:
c9:fd:39:b4:5a:a1:c8:11:e9:4c:c6:4c:0b:29:e0:
95:8e:76:0a:82:fc:62:9a:2d:ea:9d:ef:f6:40:4c:
53:3f:fb:09:0a:db:97:88:b7:7e:69:a1:f9:e8:3b:
6a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9C:13:7A:44:36:B6:31:44:75:92:E4:A9:32:16:4D:60:E5:EB:DE
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/7JwTekQ2tjFEdZLkqTIWTWDl694.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.9.0-185.250.11.255
IPv6:
2a0b:9400:1000::/47
2a0b:9401::/32
Signature Algorithm: sha256WithRSAEncryption
4e:12:74:9c:b5:3f:87:1e:1e:90:97:a5:77:02:58:0e:c4:77:
1a:f1:a7:84:1f:b8:71:49:58:be:96:b7:fb:05:2a:c9:a6:b3:
43:3d:ee:0a:1f:82:2e:95:2d:25:b1:39:bc:a2:06:d4:11:89:
1d:ba:be:0f:1e:a5:ec:74:0e:71:99:cb:6f:de:ab:d0:86:34:
9b:27:40:18:5d:d3:93:63:0f:c7:8e:9e:0e:ae:14:f3:7e:19:
2b:ef:dc:ad:36:21:72:09:53:54:72:9f:7f:df:11:5e:83:13:
3a:2f:9f:ff:7c:d2:b0:89:01:be:fb:39:1b:08:50:aa:5c:7a:
e1:61:2a:2b:ff:dd:cf:4b:72:87:55:9c:f9:80:1f:13:d0:9e:
41:ce:da:b9:55:c4:da:0d:b1:2c:12:e0:0a:f5:a0:86:e1:da:
39:bc:43:ce:9c:c4:a4:0c:8a:39:6c:3c:24:4d:ed:79:e5:55:
0e:5c:be:ae:9d:e4:19:d9:d4:24:be:15:fb:8e:28:84:2e:8d:
dc:e7:56:04:9c:b9:8b:7c:9a:37:98:a8:65:c6:5c:45:4c:19:
9c:8b:17:2e:38:46:5c:9c:1c:e0:5e:2c:15:d9:79:12:71:e2:
5c:e5:a2:69:6d:85:38:4b:df:18:f5:e8:a5:3c:7a:94:d7:a4:
5a:6a:f7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:02:08 2025 by rpki-client