Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/7G7G7tpVmWd60uNlZ2vEN1k8ScQ.roa
File: 7G7G7tpVmWd60uNlZ2vEN1k8ScQ.roa (raw, json)
Hash identifier: 2r8MgNw8qHVAZHcXcB+fjTECDN+jibhAZMIq0CBmNHM=
Subject key identifier: EC:6E:C6:EE:DA:55:99:67:7A:D2:E3:65:67:6B:C4:37:59:3C:49:C4
Certificate issuer: /CN=71a3413d407d8adf8ab6be55706094efe9c3d5da
Certificate serial: 019421B1E79F95AE7CE9836655A7C606DA90
Authority key identifier: 71:A3:41:3D:40:7D:8A:DF:8A:B6:BE:55:70:60:94:EF:E9:C3:D5:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/caNBPUB9it-Ktr5VcGCU7-nD1do.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/7G7G7tpVmWd60uNlZ2vEN1k8ScQ.roa
Signing time: Wed 01 Jan 2025 11:48:14 +0000
ROA not before: Wed 01 Jan 2025 11:48:14 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205774
IP address blocks: 91.208.100.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e7:9f:95:ae:7c:e9:83:66:55:a7:c6:06:da:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71a3413d407d8adf8ab6be55706094efe9c3d5da
Validity
Not Before: Jan 1 11:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec6ec6eeda5599677ad2e365676bc437593c49c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:99:b0:59:88:1c:a5:d4:76:e6:59:13:3a:b3:
d5:4f:80:83:92:18:5e:cd:2c:7a:0f:34:b2:e3:48:
5e:e9:c2:7a:3d:87:f6:ad:71:ef:35:c4:a8:a3:f5:
95:f0:a2:4c:30:fb:7e:e8:8d:14:45:85:47:cc:43:
13:39:f5:3d:1e:4e:54:f4:96:e8:25:fb:9d:56:b5:
6b:3e:7e:5a:21:de:94:41:b9:e9:85:7a:cc:e4:da:
3a:64:d6:24:b0:46:ab:1f:fa:60:7c:f5:f0:16:f5:
bd:26:80:ec:b4:1c:f7:a6:fa:c7:f1:f5:59:9a:7a:
71:28:01:f4:7a:68:4c:c7:3d:c2:6c:7e:55:40:1b:
e2:b3:07:67:58:75:d0:4f:34:b6:2d:5a:e9:c1:0b:
6d:7c:96:03:cd:fd:82:12:67:7e:aa:0d:4e:ad:35:
da:93:c1:3b:f3:bd:18:07:00:97:1e:cd:7a:42:c2:
72:e4:71:88:7d:46:bd:a0:f5:fc:7c:04:eb:9d:e1:
0d:3f:09:c8:fc:ee:87:23:f5:7d:42:cd:0c:a0:ee:
20:b0:7b:52:6f:67:0e:23:d5:9f:8b:ff:16:d0:b0:
fb:25:e9:bc:05:0f:ca:cc:ac:b1:e2:a9:d0:93:b4:
47:b4:83:59:e7:cf:ab:a8:cb:94:f4:91:48:02:8a:
73:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6E:C6:EE:DA:55:99:67:7A:D2:E3:65:67:6B:C4:37:59:3C:49:C4
X509v3 Authority Key Identifier:
keyid:71:A3:41:3D:40:7D:8A:DF:8A:B6:BE:55:70:60:94:EF:E9:C3:D5:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/caNBPUB9it-Ktr5VcGCU7-nD1do.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/7G7G7tpVmWd60uNlZ2vEN1k8ScQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/5b4b36-1ac9-4d29-a067-8320de44df8b/1/caNBPUB9it-Ktr5VcGCU7-nD1do.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.100.0/24
Signature Algorithm: sha256WithRSAEncryption
98:0c:1b:e0:04:eb:e5:60:bd:0a:7f:67:fb:01:6d:fb:81:7f:
c9:95:8d:34:c1:ea:c4:18:47:bf:10:0c:a1:17:23:c3:91:f5:
05:79:fe:2b:26:e0:91:81:3d:82:e3:9b:ce:e1:cb:c6:cb:73:
fa:6d:e6:7e:3a:96:fa:27:c3:4a:a0:1c:e5:9d:21:fc:b5:82:
35:a2:15:38:d5:42:ea:4c:b1:a4:00:3d:18:9e:5d:6b:73:2f:
65:58:1a:7c:ef:23:60:b4:96:4c:ce:cf:ea:9c:52:69:97:89:
98:03:e8:7c:93:30:47:57:49:ba:38:12:fa:ec:dc:b8:7a:a0:
87:6a:ff:69:2c:0a:11:52:30:20:bc:aa:0b:23:82:83:54:3b:
0b:11:f2:80:4e:48:b4:8a:cd:47:f2:b8:8c:9a:ca:12:2e:65:
a2:cb:cd:35:76:78:e4:f4:b7:77:dd:b7:ac:8e:87:6c:7b:ec:
87:60:0b:29:0e:4b:28:fc:c8:5a:ff:a3:89:71:1b:d6:c2:be:
7f:2a:4b:2c:b1:92:09:8a:aa:56:80:3c:6e:b5:9b:74:18:3e:
52:7d:b9:3e:5c:46:ca:59:39:61:60:7f:64:eb:c7:eb:68:ee:
82:6a:d9:70:aa:3f:2c:e2:22:c4:80:a7:a8:52:a8:cd:7b:1c:
0e:fd:d1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:45:14 2025 by rpki-client