Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/7bkqv-5V5iNs3-aTwhXfpe1N_H4.roa
File: 7bkqv-5V5iNs3-aTwhXfpe1N_H4.roa (raw, json)
Hash identifier: wNJTS1s1GS5nqF/G2hmQFOimq7UQMenpdIPW59xhivU=
Subject key identifier: ED:B9:2A:BF:EE:55:E6:23:6C:DF:E6:93:C2:15:DF:A5:ED:4D:FC:7E
Certificate issuer: /CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Certificate serial: 019428236A3A3D4B3C13F9576426393C1492
Authority key identifier: B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/7bkqv-5V5iNs3-aTwhXfpe1N_H4.roa
Signing time: Thu 02 Jan 2025 17:49:56 +0000
ROA not before: Thu 02 Jan 2025 17:49:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 199329
IP address blocks: 212.49.180.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:6a:3a:3d:4b:3c:13:f9:57:64:26:39:3c:14:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914961f67f22c61e84a66c8ad9c1a8ce51d099b
Validity
Not Before: Jan 2 17:49:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edb92abfee55e6236cdfe693c215dfa5ed4dfc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:ca:99:d0:c2:ce:79:09:38:89:46:aa:ef:79:
2e:34:1d:b8:c4:93:5e:49:35:cd:ef:1a:87:3d:ed:
4e:78:a2:db:45:6c:db:9f:ab:04:2c:9c:9e:49:60:
59:d0:90:65:21:8e:9b:cb:30:19:d8:d8:54:98:2c:
b3:e8:d2:64:0b:03:2d:e9:58:17:02:28:9c:ab:7a:
e4:4e:f0:44:93:d2:21:ae:89:c9:4f:8e:f9:74:f8:
75:88:83:48:d2:a2:91:d5:f9:29:a7:06:ad:46:69:
5b:a3:a5:e6:e4:1b:32:61:69:e5:9b:c1:f2:fd:86:
c2:b7:ac:7b:90:57:1f:b0:65:cd:48:52:04:b3:33:
c4:95:47:14:c7:d3:67:97:3a:92:3e:71:db:c0:23:
5c:8c:8a:ec:48:97:31:7d:ad:f1:c4:8a:0a:56:05:
96:9e:31:ec:79:e5:6d:a8:89:d9:e5:2b:1c:cb:90:
08:fd:5d:c2:fc:f8:75:0f:63:9b:97:f8:cd:80:21:
2a:2f:c9:4a:c8:db:7e:7f:02:62:9e:a5:d6:8e:c9:
25:18:ff:0a:ee:b6:93:ce:90:2f:cd:79:fa:4e:f9:
b2:76:eb:e2:0d:6e:49:87:d6:54:ee:aa:d2:6e:00:
4e:78:7a:1e:19:3a:28:10:c4:3b:3e:89:77:10:63:
91:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B9:2A:BF:EE:55:E6:23:6C:DF:E6:93:C2:15:DF:A5:ED:4D:FC:7E
X509v3 Authority Key Identifier:
keyid:B9:14:96:1F:67:F2:2C:61:E8:4A:66:C8:AD:9C:1A:8C:E5:1D:09:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRSWH2fyLGHoSmbIrZwajOUdCZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/7bkqv-5V5iNs3-aTwhXfpe1N_H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/0917a7-9ebd-45b9-9de2-27473ca612de/1/uRSWH2fyLGHoSmbIrZwajOUdCZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.49.180.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:04:d2:f1:04:03:bf:54:d3:9d:a2:c8:29:e7:c1:95:4b:13:
37:64:27:49:4f:66:2e:79:5b:b5:1a:f6:c8:52:28:d9:32:b2:
0c:fb:d0:8f:ea:c5:23:36:cf:5f:8e:2c:a9:dc:3c:de:31:51:
dc:88:d9:ad:e8:a0:4a:8b:6f:05:1e:a7:2a:3b:c1:be:24:c0:
a5:43:5a:66:78:8c:c5:b2:06:bd:92:26:7f:0b:f7:4c:50:56:
46:29:e4:e0:94:48:b8:35:ac:b0:5d:7d:8a:d4:d5:44:41:29:
0b:e9:b2:44:23:91:bc:df:57:58:46:8c:41:6b:f5:e7:4a:77:
66:64:fe:5c:f8:c0:70:38:87:53:6c:62:95:19:db:80:c6:32:
e5:30:6c:3a:0c:55:2d:53:91:b3:cf:b8:8a:d5:9e:0e:48:24:
9b:d1:4e:c5:f7:ab:2c:cf:32:c7:3f:f9:45:d9:24:a1:85:88:
81:9e:0e:17:76:a6:04:71:4f:c0:29:01:03:0a:15:f7:0d:74:
9d:80:3f:27:d1:e1:f5:48:4e:c1:06:09:e5:d0:b8:97:a8:4d:
9b:71:e4:64:a3:42:30:4a:af:dc:be:98:26:52:a0:60:f8:a3:
9a:da:f7:d6:7a:a8:05:0e:48:7f:2e:7b:1e:dc:1d:ca:8a:1a:
ae:75:6d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 12:17:51 2025 by rpki-client