Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/7JOUvwkyPQ1DTzQCnNYJRn4OhQ0.roa
File: 7JOUvwkyPQ1DTzQCnNYJRn4OhQ0.roa (raw, json)
Hash identifier: xnSqfGFM0zGVSe+BxSC/5gHs4y3XCg4qFEKaXeh9NBg=
Subject key identifier: EC:93:94:BF:09:32:3D:0D:43:4F:34:02:9C:D6:09:46:7E:0E:85:0D
Certificate issuer: /CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Certificate serial: 01949CBC7E9F2A263C9C84898679F7DD18A4
Authority key identifier: 0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/7JOUvwkyPQ1DTzQCnNYJRn4OhQ0.roa
Signing time: Sat 25 Jan 2025 09:13:06 +0000
ROA not before: Sat 25 Jan 2025 09:13:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 203735
IP address blocks: 195.7.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:9c:bc:7e:9f:2a:26:3c:9c:84:89:86:79:f7:dd:18:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c7161e622f63c0db8568d8cb4c4d7c0d9808346
Validity
Not Before: Jan 25 09:13:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ec9394bf09323d0d434f34029cd609467e0e850d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9b:1d:eb:4d:6d:09:05:2c:ad:a7:71:e2:fe:
e9:ec:75:f1:2f:de:ec:65:e5:b3:91:bc:93:96:c2:
00:68:ae:1b:19:65:40:aa:52:85:ee:2b:38:12:42:
0f:0d:47:9f:bc:4b:42:2f:01:5a:41:d2:b1:0d:d6:
ae:11:e6:be:8c:d9:eb:7f:91:03:7c:38:dc:65:f1:
9f:90:76:8f:e1:ca:23:7a:5d:94:e3:20:42:63:fd:
47:61:41:6b:93:b5:97:99:e8:3e:f9:7a:0a:c0:04:
50:36:17:72:92:8d:42:1a:86:b5:fd:ee:3f:1f:c1:
a2:1f:61:cc:24:79:91:10:d7:9c:94:b3:4a:0f:c6:
de:c2:9f:37:f0:83:2c:0c:bf:bb:59:64:f6:21:20:
07:bc:ff:1d:c4:4e:fb:3d:eb:c0:44:02:d9:47:67:
ab:62:a2:dd:27:aa:5c:85:a8:c5:77:28:e8:31:f1:
89:f9:1a:46:b3:f3:d6:4a:e1:c4:c6:c0:10:da:20:
24:81:c8:f9:34:3d:fb:71:3f:2c:6e:b7:63:37:e9:
21:09:45:90:f2:20:77:e9:87:03:e5:3b:64:f6:24:
93:87:76:4b:d3:02:08:b0:71:de:8b:80:03:bf:64:
2a:c8:2d:ff:26:57:34:9b:d2:40:b3:b9:a6:11:c2:
5c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:93:94:BF:09:32:3D:0D:43:4F:34:02:9C:D6:09:46:7E:0E:85:0D
X509v3 Authority Key Identifier:
keyid:0C:71:61:E6:22:F6:3C:0D:B8:56:8D:8C:B4:C4:D7:C0:D9:80:83:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/7JOUvwkyPQ1DTzQCnNYJRn4OhQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01f08c-065e-4ac1-8e80-b15e3f09e01b/1/DHFh5iL2PA24Vo2MtMTXwNmAg0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.7.8.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:ae:b8:23:9c:7d:3d:f2:ef:39:50:5a:aa:94:4d:f3:89:57:
78:4c:62:31:c0:77:fd:b9:7d:21:ea:51:f1:54:ce:a7:61:64:
51:86:23:ea:6f:cd:de:9e:9d:c3:13:1e:b7:1c:ab:0a:61:f6:
46:dc:35:c0:98:25:12:54:9c:c6:7a:94:d4:f0:6d:5c:1e:f3:
6c:ba:0a:8e:d8:ac:2e:c5:e3:4a:12:94:7c:24:1f:a1:7d:c6:
6e:6e:ad:a5:e8:0f:c2:58:38:db:6c:8f:e3:3a:b4:d8:ff:95:
02:ed:f9:51:b1:c3:8b:57:c2:87:53:02:71:72:1c:96:cf:1a:
2a:5e:05:14:37:b8:90:35:c2:53:36:c9:88:e8:12:00:ca:4b:
cc:7c:79:57:8e:da:f2:8e:87:56:9f:af:ce:e1:d2:51:cf:08:
de:05:e7:91:63:84:7e:ec:28:90:d1:f5:6b:ed:79:68:1b:5a:
9d:0d:12:1d:03:33:10:cc:4a:5c:c8:ae:48:94:61:c7:47:8f:
1b:62:47:0b:77:8d:6b:76:56:89:bf:a3:83:f0:cf:88:81:a9:
3e:71:b0:b0:da:4f:61:3b:29:77:52:67:68:98:6e:27:72:50:
54:f9:24:f0:97:85:67:16:ee:b1:93:5a:d9:cf:d9:dd:55:35:
7c:57:ce:2f
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZScvH6fKiY8nISJhnn33RikMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjNzE2MWU2MjJmNjNjMGRiODU2OGQ4Y2I0YzRkN2MwZDk4
MDgzNDYwHhcNMjUwMTI1MDkxMzA2WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzkzOTRiZjA5MzIzZDBkNDM0ZjM0MDI5Y2Q2MDk0NjdlMGU4NTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZsd601tCQUsradx4v7p7HXxL97s
ZeWzkbyTlsIAaK4bGWVAqlKF7is4EkIPDUefvEtCLwFaQdKxDdauEea+jNnrf5ED
fDjcZfGfkHaP4cojel2U4yBCY/1HYUFrk7WXmeg++XoKwARQNhdyko1CGoa1/e4/
H8GiH2HMJHmRENeclLNKD8bewp838IMsDL+7WWT2ISAHvP8dxE77PevARALZR2er
YqLdJ6pchajFdyjoMfGJ+RpGs/PWSuHExsAQ2iAkgcj5ND37cT8sbrdjN+khCUWQ
8iB36YcD5Ttk9iSTh3ZL0wIIsHHei4ADv2QqyC3/Jlc0m9JAs7mmEcJctwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFOyTlL8JMj0NQ080ApzWCUZ+DoUNMB8GA1UdIwQY
MBaAFAxxYeYi9jwNuFaNjLTE18DZgINGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREhGaDVpTDJQQTI0Vm8yTXRNVFh3Tm1BZzBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMWYwOGMtMDY1ZS00YWMxLThlODAt
YjE1ZTNmMDllMDFiLzEvN0pPVXZ3a3lQUTFEVHpRQ25OWUpSbjRPaFEwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8wMWYwOGMtMDY1ZS00YWMxLThlODAtYjE1ZTNmMDllMDFi
LzEvREhGaDVpTDJQQTI0Vm8yTXRNVFh3Tm1BZzBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwwcIMA0G
CSqGSIb3DQEBCwUAA4IBAQBOrrgjnH098u85UFqqlE3ziVd4TGIxwHf9uX0h6lHx
VM6nYWRRhiPqb83enp3DEx63HKsKYfZG3DXAmCUSVJzGepTU8G1cHvNsugqO2Kwu
xeNKEpR8JB+hfcZubq2l6A/CWDjbbI/jOrTY/5UC7flRscOLV8KHUwJxchyWzxoq
XgUUN7iQNcJTNsmI6BIAykvMfHlXjtryjodWn6/O4dJRzwjeBeeRY4R+7CiQ0fVr
7XloG1qdDRIdAzMQzEpcyK5IlGHHR48bYkcLd41rdlaJv6OD8M+Igak+cbCw2k9h
Oyl3UmdomG4nclBU+STwl4VnFu6xk1rZz9ndVTV8V84v
-----END CERTIFICATE-----
Generated at Sat Apr 26 01:25:14 2025 by rpki-client