Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/7iP4nOGy_JVuI8qnvDv60a6BhYQ.roa
File: 7iP4nOGy_JVuI8qnvDv60a6BhYQ.roa (raw, json)
Hash identifier: 4s47hXyI0ed0XFx6LcF7wuk0vSfFs0i5LsinZAkAZPs=
Subject key identifier: EE:23:F8:9C:E1:B2:FC:95:6E:23:CA:A7:BC:3B:FA:D1:AE:81:85:84
Certificate issuer: /CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
Certificate serial: 0194266BC75D07833F2C2AD3691BF4F1731D
Authority key identifier: 2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/7iP4nOGy_JVuI8qnvDv60a6BhYQ.roa
Signing time: Thu 02 Jan 2025 09:49:45 +0000
ROA not before: Thu 02 Jan 2025 09:49:45 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 51107
IP address blocks: 193.46.84.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c7:5d:07:83:3f:2c:2a:d3:69:1b:f4:f1:73:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2f208545ca71c5497f9a44795a1c0ca8c4dba961
Validity
Not Before: Jan 2 09:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee23f89ce1b2fc956e23caa7bc3bfad1ae818584
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:f0:5c:f7:38:da:90:03:66:ea:c0:54:24:d5:
40:93:67:74:b5:b3:c1:8f:90:e3:79:ce:01:1a:55:
ff:fa:71:1f:bf:0d:4e:fb:21:af:dc:4e:14:32:99:
02:c0:8e:a7:eb:e6:95:1b:00:4e:ff:36:1f:4e:68:
4f:0a:74:40:9f:86:d8:56:49:c7:bf:35:1e:d9:a2:
29:60:27:25:d9:e9:bd:6a:3a:09:55:2d:f1:68:50:
fc:b6:39:4a:be:28:27:0f:0c:34:df:dd:5e:e1:7b:
f1:84:dc:54:9a:68:78:d5:91:c9:18:4b:34:69:f9:
8f:38:c9:5c:bd:c4:63:7a:d2:48:f6:93:0c:1d:c8:
85:02:a9:18:c3:61:39:7c:df:2a:aa:c7:d0:19:6a:
93:50:8a:47:72:2a:a7:3e:a4:2a:5c:a2:a9:7c:1b:
24:ae:ed:e3:c3:90:09:c7:cd:2e:58:32:9a:87:36:
72:a6:a4:5f:d9:84:d7:3e:f1:f5:ed:74:75:dc:9f:
2d:53:fb:21:e4:ed:be:15:b0:31:77:54:30:eb:4d:
bb:97:56:32:69:7f:84:3a:1c:8d:34:3e:8b:7b:64:
80:6c:ee:9a:e1:bd:29:fb:bf:bc:68:01:6b:51:00:
74:d5:0b:66:81:a4:84:2e:c2:d4:e5:40:8e:dc:7d:
a9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:23:F8:9C:E1:B2:FC:95:6E:23:CA:A7:BC:3B:FA:D1:AE:81:85:84
X509v3 Authority Key Identifier:
keyid:2F:20:85:45:CA:71:C5:49:7F:9A:44:79:5A:1C:0C:A8:C4:DB:A9:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LyCFRcpxxUl_mkR5WhwMqMTbqWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/7iP4nOGy_JVuI8qnvDv60a6BhYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/0fefcd-363b-4806-b94c-da85de16683f/1/LyCFRcpxxUl_mkR5WhwMqMTbqWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.46.84.0/24
Signature Algorithm: sha256WithRSAEncryption
39:7f:3b:b7:d5:f5:10:15:cb:89:6c:05:ef:c5:34:c0:5c:a4:
fa:55:13:34:9e:b3:75:0e:3c:19:ce:9d:46:3c:ad:f9:0a:c8:
49:fb:8d:d6:42:22:ff:18:ad:1d:19:68:7c:b6:0a:07:ba:34:
6a:24:0f:7f:75:e0:4b:df:3b:5a:22:72:57:dc:f9:6b:8c:88:
ba:49:1e:39:a0:d7:2a:3a:43:f9:93:2c:04:d5:33:0c:93:9e:
38:35:67:c2:45:08:bb:3d:64:61:e1:21:ba:ea:f8:89:51:2e:
dc:2a:8f:c1:85:40:16:ca:9c:a4:dd:52:85:9e:04:5a:a3:a4:
22:9e:ee:21:2c:d2:54:0f:48:61:8c:cb:f6:6c:16:c6:4c:5b:
f8:50:f1:1a:44:03:69:09:7d:e4:dd:c9:0b:d7:8e:ec:d4:d8:
cc:fd:50:4d:0e:7f:53:ae:16:90:8d:2c:c7:5d:8f:df:fa:c2:
a4:31:6b:ab:a3:09:b9:5f:8e:08:0e:b5:ed:50:14:55:d4:cc:
13:46:29:13:75:3e:d1:2b:3f:39:78:7e:81:14:c2:13:79:7f:
a5:68:64:8d:3b:61:3b:d4:66:78:46:e6:88:e1:51:7c:cd:24:
59:c8:3d:5f:a2:41:a7:12:f7:b9:72:ac:9a:f8:a8:dd:9b:1b:
e5:ed:4b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 16:44:21 2025 by rpki-client