Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/7RH8q326KlHuJPjQMSVa_xv9mM8.roa
File: 7RH8q326KlHuJPjQMSVa_xv9mM8.roa (raw, json)
Hash identifier: jYAaBPFexodAbG01790lRYCRx2XbFPYuT6Kt3pZUZ84=
Subject key identifier: ED:11:FC:AB:7D:BA:2A:51:EE:24:F8:D0:31:25:5A:FF:1B:FD:98:CF
Certificate issuer: /CN=29db7ca4eee1e453d26fab99c8201adf894612be
Certificate serial: 01942826598FD38E0075C9133CB22F290634
Authority key identifier: 29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/7RH8q326KlHuJPjQMSVa_xv9mM8.roa
Signing time: Thu 02 Jan 2025 17:53:09 +0000
ROA not before: Thu 02 Jan 2025 17:53:09 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203
IP address blocks: 37.123.254.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:59:8f:d3:8e:00:75:c9:13:3c:b2:2f:29:06:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29db7ca4eee1e453d26fab99c8201adf894612be
Validity
Not Before: Jan 2 17:53:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed11fcab7dba2a51ee24f8d031255aff1bfd98cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c7:25:e1:55:ff:d6:f1:fb:85:3f:7c:0c:93:
80:2c:85:fc:c1:fd:f6:98:24:33:12:95:4b:07:c6:
1e:86:16:19:01:3e:02:9e:0b:90:d2:e8:00:97:aa:
16:f3:23:1b:3c:9c:6e:e7:9e:80:e0:19:aa:9a:92:
b9:9f:df:8b:62:2e:ba:b3:c6:48:92:86:15:49:1e:
7e:e3:06:a7:4b:df:e3:03:54:9c:48:68:35:6d:e8:
7f:9c:ae:05:b6:60:66:cd:b5:ab:bc:4a:29:87:aa:
e9:3f:7c:37:b2:c4:f1:7f:d4:1c:f9:ef:44:61:bb:
54:05:4c:9a:f9:44:e5:02:e0:db:18:ef:96:2f:95:
06:c2:b2:d9:4a:9f:30:3b:e2:cc:47:c1:41:a8:6c:
ba:d7:b3:9e:74:54:45:8f:ee:18:7c:a8:a1:d0:7e:
9c:3a:50:e3:d1:6d:e8:31:e0:44:b9:a3:bd:30:48:
5a:f4:3f:21:25:c1:10:00:a1:2f:65:90:42:9c:0b:
1c:6d:b6:2c:55:a7:0d:dd:e2:e8:7e:f1:80:fe:06:
52:f6:eb:d6:44:0f:89:74:14:ad:a1:b2:bc:2b:e2:
96:c4:8f:61:2d:2a:f5:55:9e:0c:84:79:af:ba:9f:
9c:bb:49:85:2b:89:5f:cf:b1:a2:77:9a:be:09:ce:
13:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:11:FC:AB:7D:BA:2A:51:EE:24:F8:D0:31:25:5A:FF:1B:FD:98:CF
X509v3 Authority Key Identifier:
keyid:29:DB:7C:A4:EE:E1:E4:53:D2:6F:AB:99:C8:20:1A:DF:89:46:12:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kdt8pO7h5FPSb6uZyCAa34lGEr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/7RH8q326KlHuJPjQMSVa_xv9mM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/7f290b-81c7-42b7-947f-d33fa1605ae1/1/Kdt8pO7h5FPSb6uZyCAa34lGEr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.123.254.0/24
Signature Algorithm: sha256WithRSAEncryption
93:8c:b8:3a:96:54:af:29:45:da:7e:29:02:4b:86:f8:f9:75:
38:38:6b:ad:09:df:7b:ea:a9:e5:07:af:ef:5f:42:45:02:6e:
be:71:cb:24:4f:4d:db:82:e7:92:01:50:dc:85:a2:62:f3:a5:
b8:44:24:d5:72:99:86:c6:6b:2c:f7:4f:ec:99:44:95:86:a5:
0e:40:6a:3d:7d:ea:87:d8:d7:b2:44:52:83:e3:ad:a4:d0:e1:
f4:b8:a4:8d:40:fd:6c:72:d4:4f:65:18:a2:a5:e8:0d:13:4f:
8a:d4:77:7e:13:0e:b5:19:7d:26:ce:4c:ea:a2:bb:90:a5:d1:
0e:51:b2:d9:96:c8:2f:60:7e:22:a0:43:fe:4d:64:6b:70:e1:
6d:cf:b6:9a:b4:84:2c:79:b2:5d:3c:5e:0e:4f:c3:5c:72:66:
31:64:8e:7b:6b:94:94:5f:be:69:a4:53:29:c2:12:8c:7b:32:
d7:4e:6f:aa:5e:b5:b0:53:44:1c:98:a5:24:14:92:35:cb:d3:
e6:b1:48:54:8a:22:20:28:47:ff:4c:41:47:01:11:f1:ae:cb:
7b:cb:34:c5:66:da:db:24:6b:5b:28:33:30:35:7c:18:44:1f:
04:f8:cd:78:80:3e:44:b7:c7:35:1d:40:28:69:4a:a3:7d:ae:
35:0f:07:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:08:09 2025 by rpki-client