Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/dxX6Ti3aWleuStaWraXr4frz_Vc.roa
File: dxX6Ti3aWleuStaWraXr4frz_Vc.roa (raw, json)
Hash identifier: 9TFe9RK9UFo1A/A9wWB7oP8/UKvwVNCCx5PAodMGlCE=
Subject key identifier: 77:15:FA:4E:2D:DA:5A:57:AE:4A:D6:96:AD:A5:EB:E1:FA:F3:FD:57
Certificate issuer: /CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Certificate serial: 0194266BC15EB2165B3729CE93C9EB29EE58
Authority key identifier: C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/dxX6Ti3aWleuStaWraXr4frz_Vc.roa
Signing time: Thu 02 Jan 2025 09:49:43 +0000
ROA not before: Thu 02 Jan 2025 09:49:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3292
IP address blocks: 147.29.150.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6b:c1:5e:b2:16:5b:37:29:ce:93:c9:eb:29:ee:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c62d7cac1ffb2c3fbde284625bf1af4c6bae6b0e
Validity
Not Before: Jan 2 09:49:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7715fa4e2dda5a57ae4ad696ada5ebe1faf3fd57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f1:28:4a:bc:19:85:80:b1:2d:32:c0:40:19:
67:13:17:9e:1d:2e:d5:49:c2:75:84:dd:96:fd:2c:
c7:a1:0d:47:ae:0f:bc:f0:4e:82:3d:96:02:11:9d:
9c:94:f5:ec:35:98:50:b7:df:8c:5f:f5:b0:1f:f3:
00:01:d9:d9:82:7e:9b:de:4c:19:cb:62:44:b7:f2:
19:bf:8d:c2:40:c1:9b:3e:1b:72:9a:6b:23:2a:1f:
90:1d:7f:88:72:41:43:28:d3:57:14:2b:b6:4e:bd:
f9:9b:9f:0c:d4:5e:84:44:65:1f:7f:3e:39:06:cb:
91:1c:2c:66:2b:be:6e:df:ea:f0:04:f2:4e:c1:1f:
6e:74:a1:d9:c5:48:6a:31:45:9f:47:be:11:f6:ec:
d0:d0:74:74:92:c2:57:3b:27:76:aa:a7:3e:cc:ff:
61:f8:2f:52:ac:0e:30:2f:49:7c:fe:8e:fb:fa:67:
99:3f:79:03:1d:6d:77:f4:72:d7:25:81:ad:39:2c:
0d:63:ce:d3:8e:e5:28:0f:83:2b:22:a6:81:f6:26:
31:62:7c:78:96:5f:7f:b4:04:d4:9f:e8:b9:97:0d:
6d:a9:2d:7e:cf:03:ef:ee:69:a0:64:69:62:bd:33:
d5:9c:b8:d0:c8:89:de:4e:69:97:73:b1:86:7d:0e:
5e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:15:FA:4E:2D:DA:5A:57:AE:4A:D6:96:AD:A5:EB:E1:FA:F3:FD:57
X509v3 Authority Key Identifier:
keyid:C6:2D:7C:AC:1F:FB:2C:3F:BD:E2:84:62:5B:F1:AF:4C:6B:AE:6B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xi18rB_7LD-94oRiW_GvTGuuaw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/dxX6Ti3aWleuStaWraXr4frz_Vc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/6cd5fc-60cc-45de-bd8a-1544b44d59ca/1/xi18rB_7LD-94oRiW_GvTGuuaw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.29.150.0/23
Signature Algorithm: sha256WithRSAEncryption
17:35:4a:92:b4:b0:52:83:a7:be:5d:fa:e2:5c:50:00:ad:c8:
f2:f6:4e:2b:68:c0:a3:d1:4a:0c:fa:cf:70:6f:54:37:ca:6f:
ae:9d:12:60:a0:21:99:71:f9:2e:3c:26:45:47:61:be:f0:14:
e4:e1:6b:d0:3b:a6:19:fb:80:c4:4d:d6:0d:97:f6:32:b3:94:
2d:78:62:db:ec:be:80:0c:7a:4f:95:a6:17:91:66:b5:63:15:
f4:17:80:ab:7d:de:8a:0f:d1:2c:15:95:b6:33:07:bb:fd:91:
28:09:18:4a:f9:68:e7:87:0a:35:5a:d8:59:4c:c6:1b:62:bd:
f7:3b:1e:81:f3:e3:31:7c:a5:3d:93:22:c2:6d:bf:d9:92:eb:
71:26:11:4d:32:2e:15:64:f9:ed:60:71:8c:0c:b9:06:2a:d0:
8e:3b:5e:1a:2f:af:0b:54:d3:0d:13:37:f6:cf:ee:b7:16:6d:
8a:9e:74:4a:6d:ee:05:1f:7c:30:69:d1:de:ca:b2:ee:d5:f5:
17:43:64:de:4f:8b:c6:82:c7:1b:f0:de:b3:54:92:98:a3:aa:
5c:c0:d2:4e:d4:d2:e0:c5:88:7e:df:ec:60:23:6c:82:71:66:
d4:88:44:c5:7b:21:07:1e:96:cc:e5:40:12:66:ec:13:41:fb:
f0:80:61:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 22:36:20 2025 by rpki-client