Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/7C0eLiHaSivPjWvCeJI7OYyeX0w.roa
File: 7C0eLiHaSivPjWvCeJI7OYyeX0w.roa (raw, json)
Hash identifier: QECF5Dw9n/dUuIXbwLPUz1r2SDqHk19ywfPN3IJ1Bjo=
Subject key identifier: EC:2D:1E:2E:21:DA:4A:2B:CF:8D:6B:C2:78:92:3B:39:8C:9E:5F:4C
Certificate issuer: /CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Certificate serial: 019421B1A55E6422DD82FC2F63B443E5A08C
Authority key identifier: A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/7C0eLiHaSivPjWvCeJI7OYyeX0w.roa
Signing time: Wed 01 Jan 2025 11:47:57 +0000
ROA not before: Wed 01 Jan 2025 11:47:57 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 47297
IP address blocks: 185.124.226.0/23 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:a5:5e:64:22:dd:82:fc:2f:63:b4:43:e5:a0:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0639adf1e0b84b9ff64e4f8ebe638ebbf5d27b9
Validity
Not Before: Jan 1 11:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec2d1e2e21da4a2bcf8d6bc278923b398c9e5f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a8:32:c2:28:88:a0:80:b1:12:6e:b1:e7:cc:
a4:37:40:c4:aa:1b:ec:d9:ee:27:ae:46:f0:0f:fc:
6e:bb:7d:a8:df:49:76:9a:ea:48:bf:da:9e:06:be:
d8:49:e1:bb:19:26:d2:1e:55:0d:28:cf:29:7e:6d:
50:0d:2c:b7:65:9a:0e:60:a9:f3:d2:6d:04:0c:52:
ff:1e:17:1e:d9:ce:80:fd:72:cc:1f:dd:2e:4b:8f:
26:2b:57:23:5f:01:f1:49:b2:7d:3a:42:f7:da:1e:
c1:37:9f:d9:bb:a2:cc:e1:cc:12:e0:cf:63:fa:d6:
6a:6c:90:4d:08:9d:57:63:51:4c:08:51:02:0e:06:
f2:6d:80:69:80:a0:39:69:1d:13:a4:ad:b5:76:76:
86:4d:75:78:1d:68:e6:df:51:d4:79:2b:fa:18:99:
b3:b8:c0:e8:53:ae:ae:0b:cb:50:de:33:50:e3:26:
a2:43:26:1c:ef:e0:6d:45:b5:76:00:c6:1d:e6:ee:
59:5c:39:ae:48:9e:ea:16:0f:3d:c3:24:76:b2:8d:
25:be:f4:be:c0:be:da:f4:9b:a0:bf:66:e3:77:64:
0d:28:12:bc:63:87:64:f4:e9:14:16:20:22:5f:86:
13:6c:e3:35:b6:ae:ba:d6:66:55:87:a2:11:a2:63:
64:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2D:1E:2E:21:DA:4A:2B:CF:8D:6B:C2:78:92:3B:39:8C:9E:5F:4C
X509v3 Authority Key Identifier:
keyid:A0:63:9A:DF:1E:0B:84:B9:FF:64:E4:F8:EB:E6:38:EB:BF:5D:27:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oGOa3x4LhLn_ZOT46-Y4679dJ7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/7C0eLiHaSivPjWvCeJI7OYyeX0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/0c363c-2d0e-4bca-a9f2-813c5aab783e/1/oGOa3x4LhLn_ZOT46-Y4679dJ7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.226.0/23
Signature Algorithm: sha256WithRSAEncryption
05:1c:a1:c7:e1:4e:f7:91:8f:0d:c8:44:87:6c:d6:4e:e9:fa:
03:f0:fb:49:15:6c:02:65:f7:1d:73:71:2a:23:5a:9d:90:96:
7b:7e:30:ae:22:c4:7d:55:fd:7a:26:c4:5b:42:bb:a5:bb:67:
fc:c9:e5:bb:b0:04:90:d3:2d:ab:d8:1b:c1:d5:a1:40:23:1f:
63:f4:34:c4:9d:e0:dc:aa:f2:3c:57:7d:dd:3a:b8:ff:aa:b3:
1e:13:09:c7:a5:60:f8:a7:b6:65:03:96:a3:50:4d:30:04:2b:
9b:c3:cf:b2:a3:d5:f0:35:06:80:b8:df:07:a4:49:d5:2b:5a:
31:01:df:27:ba:70:56:c2:61:4f:52:01:ab:10:f0:7c:a4:1f:
ea:e4:0a:0a:6e:fc:89:79:77:ec:23:2f:da:da:d1:53:9e:8c:
42:fe:f0:a8:8d:5c:5d:86:f6:34:7b:de:6e:c5:4f:a3:fb:55:
a6:b2:35:48:d1:91:80:06:f0:e0:f2:3c:bd:2a:75:0c:5c:e1:
d3:f6:45:79:62:6e:ae:f1:12:8a:2e:3a:7e:0c:7a:5c:88:cd:
8e:00:c2:86:d3:19:e5:e7:4f:39:80:a3:d2:e3:fa:cf:75:90:
e4:8a:07:e3:3d:46:63:91:41:33:a5:d8:ba:5c:74:1d:18:89:
27:37:59:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:15:06 2025 by rpki-client