Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/7Zrn_XBWju-Og5hlhKowGwl2kf8.roa
File: 7Zrn_XBWju-Og5hlhKowGwl2kf8.roa (raw, json)
Hash identifier: CHg97u7b8WBMpcTvfGndNn9XQr55QZ9IWb+Xsbuljto=
Subject key identifier: ED:9A:E7:FD:70:56:8E:EF:8E:83:98:65:84:AA:30:1B:09:76:91:FF
Certificate issuer: /CN=72e6826c8628489db041fe78c09ef28b5421e45c
Certificate serial: 019427B570A836B61ED8A8B8B37F4A3D5C03
Authority key identifier: 72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/7Zrn_XBWju-Og5hlhKowGwl2kf8.roa
Signing time: Thu 02 Jan 2025 15:49:49 +0000
ROA not before: Thu 02 Jan 2025 15:49:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 34385
IP address blocks: 31.47.200.0/21 maxlen: 21
217.28.192.0/20 maxlen: 20
2a02:24f8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:70:a8:36:b6:1e:d8:a8:b8:b3:7f:4a:3d:5c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72e6826c8628489db041fe78c09ef28b5421e45c
Validity
Not Before: Jan 2 15:49:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed9ae7fd70568eef8e83986584aa301b097691ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:27:7a:97:83:5d:f7:02:cd:4d:04:da:7e:9d:
0d:9e:02:91:6b:be:27:f0:d9:47:7a:f5:d3:71:d9:
b4:73:11:4e:8a:8c:1f:3c:65:e5:18:8e:53:e8:c5:
e1:4e:d5:0e:d2:fb:56:97:b3:39:58:16:06:6a:28:
d8:c1:a6:0d:bb:b8:9d:0e:d3:90:a4:e0:c2:bb:d9:
2c:87:d0:ea:09:8a:86:a8:77:71:a2:79:7e:96:63:
df:86:c2:82:4c:12:2c:d3:1f:e8:02:fb:0b:04:cd:
f2:3a:4e:f7:0c:db:9c:fc:a5:c0:39:82:45:21:af:
0b:2a:c3:cd:c9:aa:7f:ab:73:c1:e0:82:7c:92:19:
1a:88:a7:b2:5d:5b:1a:9d:5b:0e:48:54:b1:5d:ea:
58:5e:75:f5:6b:18:9f:c6:64:18:d9:64:09:22:fd:
73:7c:e6:7b:b4:66:c8:29:c6:a0:6b:39:c5:78:48:
4d:14:4a:d6:cc:8d:03:94:08:8d:d2:68:3f:58:64:
e9:d2:c8:ee:81:7c:1e:c6:d3:d5:1c:dc:2c:b8:e3:
dc:d1:4b:10:cc:bc:55:99:24:ac:1d:43:18:92:9a:
fc:bd:20:8d:2a:14:4e:37:5e:f9:d3:b2:2e:3e:ce:
63:a1:62:a1:9d:ad:07:47:ad:e2:be:40:b0:24:a5:
b7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9A:E7:FD:70:56:8E:EF:8E:83:98:65:84:AA:30:1B:09:76:91:FF
X509v3 Authority Key Identifier:
keyid:72:E6:82:6C:86:28:48:9D:B0:41:FE:78:C0:9E:F2:8B:54:21:E4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/7Zrn_XBWju-Og5hlhKowGwl2kf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/0a7826-6db0-4662-901a-975ad03d88e6/1/cuaCbIYoSJ2wQf54wJ7yi1Qh5Fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.47.200.0/21
217.28.192.0/20
IPv6:
2a02:24f8::/32
Signature Algorithm: sha256WithRSAEncryption
0b:ee:e9:2a:80:d8:36:08:07:25:9e:5b:b9:9b:6b:ff:bf:42:
88:6d:29:b9:e4:a2:01:bf:3b:6a:86:7e:dc:d5:a4:5f:04:ea:
32:10:4d:2a:96:61:3f:50:f6:ea:76:40:19:a9:3e:ec:0f:ac:
62:b4:f7:bf:cf:37:58:57:16:c4:0e:48:91:87:b0:9c:84:cd:
0f:a5:34:fc:1e:e7:86:19:a1:ff:d1:3e:ec:d6:fc:df:74:0b:
37:c5:fd:f8:20:53:4f:18:cb:06:37:66:6c:1e:56:e8:34:10:
42:ea:98:9e:0d:88:9e:2e:b1:f4:b0:01:fd:f4:45:c1:a1:2c:
09:d9:c6:ce:f1:db:61:d2:87:2d:34:fe:51:0d:e0:73:eb:bc:
7f:d6:d0:a4:a0:c3:bf:14:71:26:5f:8e:ff:35:ec:55:4b:b7:
b6:41:ba:dc:30:75:27:68:01:a9:8e:80:91:66:d4:e6:74:ce:
55:cb:24:68:00:e6:ca:f1:04:d7:22:a1:95:77:80:57:14:b3:
3a:38:be:ca:1f:75:7e:5d:c3:7a:60:ba:38:40:15:09:8c:e9:
c7:05:3e:cf:0b:dc:17:74:d3:de:e6:10:6e:58:80:66:c7:4c:
f1:73:7e:2f:41:99:77:24:2e:97:5e:95:8c:0c:e7:24:5a:31:
67:fa:2b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 11:40:02 2025 by rpki-client