Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/fEOcGEZ5LiHMFz7AsWmRrnleewQ.roa
File: fEOcGEZ5LiHMFz7AsWmRrnleewQ.roa (raw, json)
Hash identifier: 2hWk6Tz7S8lDQWf6IFB7UfW3IQLP7xOfkykS1elEFd0=
Subject key identifier: 7C:43:9C:18:46:79:2E:21:CC:17:3E:C0:B1:69:91:AE:79:5E:7B:04
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 01941FFA32779B7738CD6777739754550749
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/fEOcGEZ5LiHMFz7AsWmRrnleewQ.roa
Signing time: Wed 01 Jan 2025 03:47:58 +0000
ROA not before: Wed 01 Jan 2025 03:47:58 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 48806
IP address blocks: 157.97.123.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:32:77:9b:77:38:cd:67:77:73:97:54:55:07:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Jan 1 03:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7c439c1846792e21cc173ec0b16991ae795e7b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:df:6a:c5:87:43:f4:4e:41:d8:63:32:3a:2c:
68:81:18:ea:60:48:07:92:03:76:08:b7:bb:2e:89:
54:c1:2d:96:5c:f8:4f:62:6c:3f:8f:f9:2d:bc:11:
d6:d4:a0:ef:dd:08:aa:18:00:70:b9:c3:b0:f0:83:
4d:7d:05:e2:c1:e3:61:7b:2c:bb:0a:bd:e9:c9:4a:
e2:17:a9:df:91:ef:0b:6c:36:92:84:4e:51:aa:8e:
01:fb:b3:20:7b:01:0c:df:cf:3b:1e:e0:f7:5e:7a:
4b:e2:b3:76:49:3a:1b:3e:ac:5d:a7:32:d8:e5:7b:
9a:39:f6:c3:61:63:4a:10:43:19:de:9d:f9:6b:2b:
59:6b:0a:bd:ed:14:41:4a:44:76:18:58:21:0d:b3:
cf:0c:92:82:2c:5a:b1:d2:22:3c:64:55:79:ae:06:
89:08:e5:38:64:48:5a:92:2f:88:13:63:18:61:0c:
72:af:1c:3c:c5:ca:74:a5:2e:4b:11:d3:cf:ff:54:
33:5e:7f:03:de:ce:42:2a:c4:bb:6a:8a:48:a3:b7:
52:01:d3:e5:4a:9a:7d:f5:08:bb:d9:e8:15:9b:03:
19:cf:69:64:3f:4a:08:3b:5c:7d:3e:d8:b3:b3:02:
3f:d7:5b:6e:a4:07:7c:3d:a2:e5:cb:fe:13:b5:e3:
98:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:43:9C:18:46:79:2E:21:CC:17:3E:C0:B1:69:91:AE:79:5E:7B:04
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/fEOcGEZ5LiHMFz7AsWmRrnleewQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.97.123.0/24
Signature Algorithm: sha256WithRSAEncryption
17:04:89:14:44:ea:1c:1c:8a:a6:b5:1c:9d:5c:7c:f1:d3:8e:
55:0e:2b:e1:03:2a:38:58:b8:f7:63:09:3d:30:e4:ea:99:e6:
59:26:4c:d7:76:27:d4:d1:b3:96:b6:6b:89:e6:fd:a5:34:da:
7f:78:ac:f8:68:57:3e:f9:e5:a2:ac:f4:aa:f1:9c:ac:6a:3b:
71:a5:b5:8e:87:39:0a:7e:10:5c:ee:d2:3e:65:72:17:3c:c3:
85:44:06:b4:74:01:fe:f0:79:8a:71:15:cf:4b:fb:1a:6b:a8:
a6:0b:23:bc:6a:da:4d:47:db:64:fe:58:19:54:fe:8f:92:aa:
bf:dc:e2:07:64:ed:b3:0d:b3:e6:27:b6:26:35:8a:39:fd:8a:
41:3f:59:13:29:77:55:02:3d:82:60:5f:3d:ff:c6:c3:3b:99:
14:d7:ce:ca:4c:eb:1f:ad:c7:63:db:54:99:55:fc:d3:b8:be:
0c:5c:43:69:2d:5f:71:91:d0:d3:ff:1c:12:27:5a:d9:78:ff:
81:7c:85:49:a4:22:d5:f0:99:13:96:ee:eb:80:a0:29:9b:5d:
ad:4f:1f:c2:85:b7:3a:8b:20:13:7a:7c:c7:56:06:3a:43:dd:
06:7e:eb:74:a7:7d:36:64:06:1e:5d:92:1f:2e:0b:5b:c4:a8:
da:0b:d3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 02:09:44 2025 by rpki-client