Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/7xFeKk1Iv33SPP_P8Q53KVhfBhE.roa
File: 7xFeKk1Iv33SPP_P8Q53KVhfBhE.roa (raw, json)
Hash identifier: vpakuVBdELbZmm7a1lbZtbcwCV3/qaP7VZjibySfKiU=
Subject key identifier: EF:11:5E:2A:4D:48:BF:7D:D2:3C:FF:CF:F1:0E:77:29:58:5F:06:11
Certificate issuer: /CN=3be4761d44d806c3f9e4e76b79c8f2296cc7bbcf
Certificate serial: 019424B335A7BE5F2EAF55A278DFD9410F22
Authority key identifier: 3B:E4:76:1D:44:D8:06:C3:F9:E4:E7:6B:79:C8:F2:29:6C:C7:BB:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/7xFeKk1Iv33SPP_P8Q53KVhfBhE.roa
Signing time: Thu 02 Jan 2025 01:48:31 +0000
ROA not before: Thu 02 Jan 2025 01:48:31 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 202234
IP address blocks: 185.49.108.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:35:a7:be:5f:2e:af:55:a2:78:df:d9:41:0f:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3be4761d44d806c3f9e4e76b79c8f2296cc7bbcf
Validity
Not Before: Jan 2 01:48:31 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef115e2a4d48bf7dd23cffcff10e7729585f0611
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:ff:83:93:01:1a:8b:dd:33:e6:4d:2f:83:
5b:50:2a:2d:01:b6:4c:18:13:08:3d:3f:30:87:39:
9e:c4:a5:1d:f8:22:19:e8:f3:fb:69:91:99:be:ac:
39:11:d1:08:85:40:59:56:20:16:b0:f0:64:f8:23:
2b:16:71:a0:70:31:57:fd:22:cc:8c:13:03:52:f7:
fe:dc:0b:3a:7a:10:43:d2:7c:8f:1d:fb:cb:22:a0:
d8:f7:da:d4:ee:22:a9:ef:b4:94:6a:b5:da:17:b1:
62:12:09:7b:81:38:53:81:d7:04:24:03:61:01:55:
76:37:e1:54:0c:3c:56:f8:65:1f:3b:88:65:ba:03:
2b:c2:6c:ec:e6:1f:53:59:08:00:76:7f:22:2a:5a:
6e:a0:88:f5:5d:b4:77:7f:32:16:e0:1d:18:4a:79:
bb:8d:d7:19:22:6c:d4:19:8b:21:81:35:46:67:c0:
6b:c3:29:61:a2:fc:71:72:9b:2c:2d:93:25:cd:a5:
3e:96:a0:c9:ae:4c:f7:a0:04:a6:e4:be:67:93:8a:
18:a8:12:9f:90:a2:16:c6:e5:4e:75:a8:a1:00:8b:
12:88:eb:4e:12:e4:10:54:c6:52:cd:90:b5:e5:e8:
ca:2e:d2:f5:39:16:a4:70:01:35:d2:63:88:48:58:
1f:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:11:5E:2A:4D:48:BF:7D:D2:3C:FF:CF:F1:0E:77:29:58:5F:06:11
X509v3 Authority Key Identifier:
keyid:3B:E4:76:1D:44:D8:06:C3:F9:E4:E7:6B:79:C8:F2:29:6C:C7:BB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O-R2HUTYBsP55OdrecjyKWzHu88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/7xFeKk1Iv33SPP_P8Q53KVhfBhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/d2c38e-0aaf-4e3b-8ed8-b54ae6f08f4f/1/O-R2HUTYBsP55OdrecjyKWzHu88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.49.108.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:47:28:54:78:50:b5:a7:64:b8:ff:a9:35:5d:42:95:9e:32:
02:76:68:67:b5:91:c4:14:79:bc:c8:a2:30:47:7a:b0:14:bf:
57:73:3a:63:c0:01:23:0b:8a:cb:5c:84:4b:bc:9c:aa:04:c8:
29:76:98:c8:e7:c6:38:90:28:72:2d:0f:95:23:f0:3a:60:19:
6b:4a:65:58:82:72:82:20:0e:fb:41:3e:1f:3f:25:12:de:4b:
3d:45:07:2a:05:49:4d:66:f8:8c:55:6e:d8:64:68:af:01:06:
85:1f:56:08:8f:91:7d:a8:df:6c:b7:c4:da:41:b3:ab:75:a6:
d9:08:0a:d4:60:d9:25:03:49:67:ef:85:78:ab:3e:c8:b9:a4:
24:b2:ce:40:d2:2e:c9:e7:71:73:30:22:d6:14:0d:d7:ef:b9:
92:ac:cb:d4:13:ba:06:64:8f:97:17:d7:7a:64:2b:07:a1:ab:
2a:b2:f5:a8:c7:60:c7:ee:ca:57:95:04:d7:63:cf:82:f8:a6:
ff:78:12:fd:36:93:f7:35:9e:d4:fe:15:71:9a:e7:c4:c7:6f:
0b:0e:49:5d:20:a5:9b:53:98:97:50:d9:cd:76:5b:1e:5a:f9:
be:56:b6:c6:3d:89:b1:5a:08:14:d7:94:56:4c:e6:26:65:63:
76:54:04:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 02:29:41 2025 by rpki-client