Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/7w_UXb_9EuacQXaOkUvAB9t3GPY.roa
File: 7w_UXb_9EuacQXaOkUvAB9t3GPY.roa (raw, json)
Hash identifier: BdddFhDjZUrdf5plsycRSqL9pb4uMD9DIqhfXxLsESI=
Subject key identifier: EF:0F:D4:5D:BF:FD:12:E6:9C:41:76:8E:91:4B:C0:07:DB:77:18:F6
Certificate issuer: /CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Certificate serial: 019423D7554C88AC70F2D77D0E1CFDF9B9F6
Authority key identifier: D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/7w_UXb_9EuacQXaOkUvAB9t3GPY.roa
Signing time: Wed 01 Jan 2025 21:48:22 +0000
ROA not before: Wed 01 Jan 2025 21:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 205191
IP address blocks: 194.140.187.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:55:4c:88:ac:70:f2:d7:7d:0e:1c:fd:f9:b9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d434f1686102876c6216bcea28a5e502ec0d7b6b
Validity
Not Before: Jan 1 21:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef0fd45dbffd12e69c41768e914bc007db7718f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:4c:f3:43:2f:72:bd:95:3c:78:8d:26:cb:
5b:99:46:80:ac:1a:e7:d6:bf:e8:6f:83:05:31:c1:
9f:38:27:db:e3:07:e1:0c:f4:5e:ab:08:28:8c:fc:
87:5e:99:c7:f6:33:28:3a:18:1c:3b:5d:45:a2:a8:
04:5f:7d:97:b3:1f:33:54:da:80:0e:aa:8d:ea:53:
ba:0a:cc:1f:cc:2b:92:ba:25:4f:cc:12:40:e6:e8:
18:af:bb:d5:f5:92:e3:9a:ee:77:bb:23:a7:4e:66:
27:e2:94:78:07:7a:cc:5e:d7:05:3d:b0:be:11:f6:
ca:2b:47:a7:ad:60:93:d2:2e:75:2a:57:89:d7:6c:
1f:6b:59:47:e5:c0:88:1d:66:d9:d0:f2:8b:77:c9:
25:88:9c:ac:d2:c8:84:5f:09:54:cb:0c:f7:63:7e:
6b:37:6b:d7:ff:b7:35:8d:e0:23:2b:0c:bd:24:67:
06:19:24:ce:21:64:1c:ba:7e:f2:3c:da:25:bf:bc:
b1:b1:57:a0:4b:7d:48:07:14:a1:85:67:13:31:3e:
59:f7:4e:28:ca:fc:bf:86:1d:6b:c6:3a:2d:75:54:
4e:14:e7:a9:45:37:dc:55:19:e6:26:91:51:99:f1:
bc:06:e7:1a:18:ec:e9:ff:f4:89:95:37:59:5c:74:
49:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:0F:D4:5D:BF:FD:12:E6:9C:41:76:8E:91:4B:C0:07:DB:77:18:F6
X509v3 Authority Key Identifier:
keyid:D4:34:F1:68:61:02:87:6C:62:16:BC:EA:28:A5:E5:02:EC:0D:7B:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1DTxaGECh2xiFrzqKKXlAuwNe2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/7w_UXb_9EuacQXaOkUvAB9t3GPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/726bb4-5d87-402d-91ce-5712d95ae638/1/1DTxaGECh2xiFrzqKKXlAuwNe2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.140.187.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:8e:e2:23:41:4f:5c:43:4f:4e:91:62:ea:98:c7:1e:d9:9f:
1b:ed:a7:74:ba:4c:ab:e8:58:e4:9e:e8:dc:64:4d:93:fb:11:
76:a9:d9:aa:fd:cd:fb:06:95:76:f5:c5:13:04:ff:47:7a:b1:
88:16:46:7b:44:03:cd:6a:16:65:2e:88:69:33:0b:69:78:c2:
39:e6:26:f8:9d:00:2e:64:a7:72:42:16:88:46:85:f3:1d:7f:
33:09:cd:0e:bd:0f:02:f4:3d:40:98:af:24:c1:d7:06:ef:68:
41:6f:3b:ab:6a:12:c7:5e:bd:9b:26:5e:99:cc:ce:62:50:30:
7f:ab:88:b2:9b:27:fc:14:ae:c8:c7:bd:a4:35:4e:f3:29:05:
21:90:9e:45:b9:32:e7:c5:8b:3c:7a:e9:e1:59:2a:bf:91:b8:
1a:2d:66:2a:57:c4:fe:0f:59:0f:ce:d6:08:67:20:8b:1b:f2:
3e:91:40:37:1b:58:9a:eb:e7:06:fa:6e:f8:72:26:6d:c8:c0:
fd:f9:0f:7a:b8:a8:db:53:d8:42:dc:a4:37:cd:38:e7:38:ee:
25:51:c6:0b:be:80:88:d4:89:7b:f7:23:b9:19:33:89:cd:95:
73:df:72:06:09:89:6b:2f:92:dc:00:ed:3e:57:d4:5a:21:f5:
7b:75:72:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:47:45 2025 by rpki-client