Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/k-hTaQknXDp2DKuP6vvaZN3brec.roa
File: k-hTaQknXDp2DKuP6vvaZN3brec.roa (raw, json)
Hash identifier: IoaNc7VRuQAEFnNwpBORifvWy2POOqQygfpjoy01lPY=
Subject key identifier: 93:E8:53:69:09:27:5C:3A:76:0C:AB:8F:EA:FB:DA:64:DD:DB:AD:E7
Certificate issuer: /CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Certificate serial: 01942368DDF96DDFF653906C37472C328684
Authority key identifier: B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/k-hTaQknXDp2DKuP6vvaZN3brec.roa
Signing time: Wed 01 Jan 2025 19:47:42 +0000
ROA not before: Wed 01 Jan 2025 19:47:42 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199332
IP address blocks: 79.171.192.0/21 maxlen: 24
185.19.236.0/22 maxlen: 24
2a02:fe00::/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:dd:f9:6d:df:f6:53:90:6c:37:47:2c:32:86:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7b67ba579f48a4207ac409abf4f01194046ea3a
Validity
Not Before: Jan 1 19:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=93e8536909275c3a760cab8feafbda64dddbade7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:08:8d:fc:47:be:f1:25:2f:69:3e:f5:81:ec:
db:94:52:73:23:b2:e4:cc:bf:c9:05:ce:c8:60:d7:
24:92:34:3b:41:47:85:6d:00:59:ef:86:b2:f1:68:
78:d2:90:47:c0:7b:8c:81:50:c3:2d:0c:c8:0e:d9:
77:54:2a:32:13:39:fd:7c:f0:c6:4a:7b:58:ff:d4:
cd:f6:a3:df:9d:96:5f:b5:2a:7a:bf:01:b1:63:a3:
0c:a1:00:be:a2:af:e8:bf:9a:db:f9:5f:ac:6b:71:
d6:54:7a:a1:d7:51:74:04:fb:45:2b:d1:81:fd:a9:
ab:3b:7e:11:24:cc:71:aa:ed:0d:3f:fc:8e:ac:e4:
20:88:33:4d:29:26:32:cd:0f:e9:a6:8d:5e:98:20:
92:8f:d7:2e:47:ab:62:9c:e7:04:cc:9a:be:39:65:
ec:97:ef:11:8d:fb:d3:4c:a3:7d:a1:e4:5f:df:aa:
ee:c4:a9:a9:f5:cc:7d:88:1a:c5:a3:a7:69:eb:31:
25:70:f3:4e:75:a0:6c:98:d4:1a:b7:cb:64:83:d2:
05:03:3c:7c:83:f4:53:cc:40:52:fa:95:29:35:18:
df:65:9c:5b:f4:9a:46:cd:11:03:db:80:32:5f:6f:
0d:46:2e:35:d4:70:61:43:fa:90:78:4c:1b:82:32:
2e:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:E8:53:69:09:27:5C:3A:76:0C:AB:8F:EA:FB:DA:64:DD:DB:AD:E7
X509v3 Authority Key Identifier:
keyid:B7:B6:7B:A5:79:F4:8A:42:07:AC:40:9A:BF:4F:01:19:40:46:EA:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t7Z7pXn0ikIHrECav08BGUBG6jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/k-hTaQknXDp2DKuP6vvaZN3brec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/963d75-4cff-4b14-83df-b774320d997f/1/t7Z7pXn0ikIHrECav08BGUBG6jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.171.192.0/21
185.19.236.0/22
IPv6:
2a02:fe00::/29
Signature Algorithm: sha256WithRSAEncryption
11:62:f7:2a:9c:46:21:5e:1a:99:ad:bd:c9:85:01:f8:6c:c9:
c3:9a:46:43:61:64:7c:5d:e1:5b:a1:81:f6:05:e3:6a:43:73:
d8:14:ac:b9:37:eb:fb:f5:c9:09:54:bd:84:5c:ce:0b:9c:38:
81:df:3f:2f:c7:45:cd:00:9d:62:23:11:79:03:9a:31:2b:94:
76:8f:c6:8e:2b:c4:ae:f1:26:d2:b8:4b:cb:e9:7a:a3:6c:41:
84:29:98:c0:a9:d3:a7:2b:b7:b7:9b:65:e4:1c:35:5a:58:06:
a1:55:c8:47:42:7e:31:0c:07:6e:4c:5c:14:80:04:d5:30:4f:
b6:2d:ae:52:3c:82:e8:e5:6f:ff:2a:9c:08:d7:9f:1a:40:0d:
28:41:7f:d0:f4:2e:ba:24:ff:49:bd:aa:62:8b:f4:fc:8d:fa:
ac:7e:9c:23:ce:90:17:33:87:b6:7f:2d:1a:9b:50:29:b4:7a:
de:d5:56:a5:74:15:fa:61:26:9e:ba:43:af:bf:1e:d5:b6:cf:
8b:98:90:ec:28:8e:da:38:3d:ba:8b:6a:1a:1d:04:36:25:92:
5a:2d:ee:99:9e:e9:de:b0:d8:31:fe:2c:bb:aa:36:55:10:69:
61:8c:19:71:c5:ed:bc:33:e1:9c:e1:fa:9b:52:3a:87:5a:11:
d1:43:a6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 05:26:38 2025 by rpki-client