Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/c7fpJhGeGEDD59_FpWUO82fzF7I.roa
File: c7fpJhGeGEDD59_FpWUO82fzF7I.roa (raw, json)
Hash identifier: P2sJUsVRcw69DdEldFG6V18oZpVmrOXfMzx820qI+8E=
Subject key identifier: 73:B7:E9:26:11:9E:18:40:C3:E7:DF:C5:A5:65:0E:F3:67:F3:17:B2
Certificate issuer: /CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Certificate serial: 019421B23A00864799EC6C04893E0D9E0550
Authority key identifier: 0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/c7fpJhGeGEDD59_FpWUO82fzF7I.roa
Signing time: Wed 01 Jan 2025 11:48:35 +0000
ROA not before: Wed 01 Jan 2025 11:48:35 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 9002
IP address blocks: 185.212.88.0/23 maxlen: 23
185.212.90.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:3a:00:86:47:99:ec:6c:04:89:3e:0d:9e:05:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a77196340d2144b8ca7b0778984bb04bc1cb378
Validity
Not Before: Jan 1 11:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73b7e926119e1840c3e7dfc5a5650ef367f317b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:5c:ce:66:b0:32:e2:e1:3d:12:db:3b:b6:
76:a2:ac:d4:0b:97:7c:50:a6:3c:81:a1:91:0c:d0:
48:34:b9:3a:42:c6:df:c7:ae:da:41:68:ac:87:0c:
6c:ff:6d:64:50:ec:be:19:ea:83:42:fc:14:ba:5d:
7c:7d:b7:68:51:20:4b:7d:f3:52:e5:f1:7f:25:ed:
8d:a9:c7:75:b4:f8:61:d5:ae:31:6e:50:1e:09:11:
af:5a:0a:42:55:0c:c8:cd:64:28:7c:23:92:4d:30:
a7:29:8c:8e:05:59:30:75:1d:50:f7:85:d8:ae:04:
cc:34:d4:93:ba:6a:ca:68:37:3f:0a:51:d0:3b:e5:
58:10:4c:a2:e8:61:95:37:0f:c7:91:63:81:db:3b:
44:b6:5f:a6:4a:67:cd:32:77:f5:5f:20:87:3d:a4:
87:31:7c:8e:23:48:cb:0f:63:7e:93:9a:f2:e7:7a:
bc:b8:20:64:12:52:83:e8:91:d6:84:67:9a:bc:6e:
8c:69:88:7c:62:ab:2e:1e:d7:30:e0:a7:bb:7e:a9:
51:6d:ee:3a:3c:25:10:85:49:c6:76:51:76:bf:9e:
c3:fd:ea:d4:f6:30:73:db:fc:2f:fc:23:31:70:ec:
7e:03:61:ad:b5:03:34:cc:b5:02:e3:8c:dc:19:4d:
18:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B7:E9:26:11:9E:18:40:C3:E7:DF:C5:A5:65:0E:F3:67:F3:17:B2
X509v3 Authority Key Identifier:
keyid:0A:77:19:63:40:D2:14:4B:8C:A7:B0:77:89:84:BB:04:BC:1C:B3:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CncZY0DSFEuMp7B3iYS7BLwcs3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/c7fpJhGeGEDD59_FpWUO82fzF7I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/4989ba-9af3-4e3d-845d-eb977164a7e4/1/CncZY0DSFEuMp7B3iYS7BLwcs3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.88.0-185.212.90.255
Signature Algorithm: sha256WithRSAEncryption
27:11:90:8d:1b:06:54:78:46:d1:46:c7:05:30:d5:34:3e:28:
dc:3a:9f:23:86:33:ad:4c:3d:8d:8b:53:82:86:50:20:89:57:
ed:0d:5b:10:af:a0:72:3e:a1:36:d4:6e:1f:32:17:61:42:da:
0b:66:2e:0a:b4:07:28:99:97:19:f1:e0:01:fe:d7:df:99:c6:
6f:2f:bf:cb:7a:b8:4d:49:fd:0a:6a:ff:f5:da:21:19:30:86:
26:aa:2e:16:fe:99:78:3a:15:c2:56:c4:dd:89:37:2d:20:a1:
73:2e:89:c1:b3:56:a0:c1:7a:62:e0:4d:7e:e2:dd:69:72:a6:
9b:95:97:b5:9c:b4:00:cb:28:56:67:7c:1b:f6:03:b7:2e:ac:
bb:03:3c:73:d4:4e:c0:82:a0:5d:b4:0a:b0:ca:03:ac:65:9f:
09:14:b4:ca:48:3c:e7:01:20:e3:5b:9f:c6:83:8f:e0:d4:93:
28:a6:26:94:34:a8:71:c1:03:de:24:f7:80:a1:f3:f8:80:02:
06:fb:6e:6f:fa:b3:84:eb:f6:4f:3a:a8:16:52:bb:07:2b:c0:
d1:ea:2a:6f:90:cc:3b:34:cf:42:22:ec:7c:5b:ab:cf:fe:d0:
a2:9e:88:80:85:8b:e8:37:5a:3e:b6:e0:19:ed:e1:29:f7:84:
bb:2b:54:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:09:55 2025 by rpki-client