Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/RMejfvfqDU-6mJRHZu7CVwTTZJE.roa
File: RMejfvfqDU-6mJRHZu7CVwTTZJE.roa (raw, json)
Hash identifier: ZcA658uI9ES0M169SLVgKbZ7N/zTS9DXu8y0zEhWizY=
Subject key identifier: 44:C7:A3:7E:F7:EA:0D:4F:BA:98:94:47:66:EE:C2:57:04:D3:64:91
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 0194221FCF90FEA90C525ECC692E8F03077A
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/RMejfvfqDU-6mJRHZu7CVwTTZJE.roa
Signing time: Wed 01 Jan 2025 13:48:17 +0000
ROA not before: Wed 01 Jan 2025 13:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203920
IP address blocks: 157.25.140.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:cf:90:fe:a9:0c:52:5e:cc:69:2e:8f:03:07:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 1 13:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44c7a37ef7ea0d4fba98944766eec25704d36491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:74:54:13:83:74:34:96:d9:5e:65:d0:18:1b:
e6:57:f7:5d:e4:f8:00:ca:55:67:05:55:4f:b3:ae:
88:83:5a:5f:3a:49:c3:de:03:4b:6a:bf:a6:ff:70:
1f:32:97:ea:36:f8:af:77:2b:8a:9c:95:c1:07:13:
b2:7e:29:79:28:23:ce:e0:ad:89:f4:8c:e8:d5:7f:
41:1a:95:e2:1b:68:92:88:88:a4:7f:aa:ff:7d:87:
a1:a3:e8:12:54:c8:4d:d8:b8:8d:50:ad:68:d6:ab:
34:5e:80:fc:44:c3:82:c0:46:0e:1a:a9:74:0f:0a:
7a:f6:a6:c5:68:4a:6e:72:5b:d5:74:68:13:ca:eb:
1d:f9:d9:c7:a6:1b:49:a3:5f:b0:b7:74:9f:77:c1:
0b:01:01:d2:36:aa:8c:9d:a6:a2:25:65:69:ea:27:
aa:87:cf:cb:b6:e5:4c:ca:a5:db:67:08:a5:40:a8:
e0:20:1d:d7:6e:4c:08:98:fa:22:4e:eb:bd:ac:de:
a6:37:3a:32:c5:54:0f:fe:06:da:db:b1:7d:bb:a2:
fc:63:6e:1f:92:0c:3a:3d:55:a1:db:fd:b2:21:74:
69:6c:ed:00:04:a5:6a:62:1e:7e:f1:7d:ed:d4:cd:
fd:71:d5:83:0f:68:84:f8:ae:82:70:32:db:79:99:
47:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:C7:A3:7E:F7:EA:0D:4F:BA:98:94:47:66:EE:C2:57:04:D3:64:91
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/RMejfvfqDU-6mJRHZu7CVwTTZJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.25.140.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:ac:99:48:7c:b7:81:81:e7:1d:05:22:d5:af:42:31:d1:b5:
54:21:30:f6:aa:f2:68:29:af:0f:3b:77:99:45:10:bf:05:b6:
05:fb:ae:2a:8e:c6:c7:62:9b:45:ef:8c:d2:a8:2f:2b:6c:09:
ee:64:7f:33:f3:e3:e6:77:d5:c9:1a:62:80:d7:9f:bc:f3:af:
04:62:dc:45:4b:f8:e9:a0:a3:4c:70:dc:28:0c:d1:e3:cf:3d:
80:43:eb:7b:b3:aa:6b:92:bf:7a:4c:b4:de:55:28:fc:e4:be:
29:84:f2:f3:6c:cf:22:5b:9e:00:77:c3:4f:8e:6c:2a:30:ff:
ad:1d:fa:69:89:77:11:44:22:28:f2:91:a5:76:53:6b:b0:6a:
80:86:39:8a:ec:af:2c:8a:c2:2c:f0:d8:18:e8:67:e5:0e:ae:
68:53:66:f7:6e:63:db:8e:43:51:28:a6:a3:fa:56:77:95:bb:
37:e8:37:a5:a2:53:14:4c:37:f5:6f:01:ef:e0:a7:18:c3:99:
ec:cd:14:12:22:9f:7b:5b:26:84:00:83:f9:7a:cd:52:c7:af:
7f:db:07:59:12:3f:91:06:50:c1:36:0d:75:b3:e3:ff:df:2f:
3e:13:82:c9:42:5b:95:4f:64:e9:b9:fb:28:c4:46:dc:66:4b:
72:b4:bc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 07:55:20 2025 by rpki-client