Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/fzev7_a9OYyMIFNofQlw5RVoFZM.roa
File: fzev7_a9OYyMIFNofQlw5RVoFZM.roa (raw, json)
Hash identifier: 10wzAQdx79ulrqhu3JqofOZW6+gKOGXZaHawTm1W9iE=
Subject key identifier: 7F:37:AF:EF:F6:BD:39:8C:8C:20:53:68:7D:09:70:E5:15:68:15:93
Certificate issuer: /CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Certificate serial: 01941FFA918F0DE59D77A8A49FE04764DD54
Authority key identifier: EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/fzev7_a9OYyMIFNofQlw5RVoFZM.roa
Signing time: Wed 01 Jan 2025 03:48:22 +0000
ROA not before: Wed 01 Jan 2025 03:48:22 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36131
IP address blocks: 185.155.136.0/22 maxlen: 22
185.155.136.0/24 maxlen: 24
185.155.138.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:91:8f:0d:e5:9d:77:a8:a4:9f:e0:47:64:dd:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1cce901e5fb7c92f09a915cf6e656f693ba100
Validity
Not Before: Jan 1 03:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f37afeff6bd398c8c2053687d0970e515681593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d3:c2:7f:36:f6:fe:8e:60:d4:a0:8a:ae:78:
f3:af:cc:2e:74:90:a4:66:91:f0:27:f9:75:46:d7:
f6:16:53:43:f7:fe:47:46:2f:3c:30:22:b2:87:c7:
28:0d:92:8f:81:fa:48:a8:c7:d1:9f:8e:54:ac:54:
49:c3:fd:c9:02:96:07:a5:c2:5d:68:65:c2:a9:df:
8c:1c:3a:60:15:8d:e4:9d:a5:c8:e8:74:79:6b:c3:
9a:07:3c:e6:3a:fc:ca:bf:f6:3e:34:ad:7c:fc:41:
a9:ba:61:29:41:f7:cc:8f:b4:82:98:a6:40:72:bd:
89:ca:ab:49:d7:3e:31:76:80:af:31:7a:a6:47:bb:
b1:91:6e:9c:82:66:69:6f:f4:13:0a:a4:2b:d8:9b:
6f:79:d0:14:c3:25:94:7f:8f:e0:99:85:17:61:7b:
cb:06:86:90:65:77:9d:ab:b6:7c:93:e4:08:1c:47:
55:ad:c5:5c:c9:e1:7f:de:b1:8e:7a:66:c5:46:ce:
5b:c7:7b:ff:61:bb:fa:73:42:f0:8f:2d:e8:9a:d0:
47:b9:8a:4e:c7:51:26:0c:5c:1a:25:7a:ef:af:3d:
db:17:fc:62:df:d1:47:a2:ab:25:e7:2e:d8:25:05:
45:a7:60:b0:8a:40:45:71:06:b5:aa:84:0f:c2:67:
05:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:37:AF:EF:F6:BD:39:8C:8C:20:53:68:7D:09:70:E5:15:68:15:93
X509v3 Authority Key Identifier:
keyid:EE:1C:CE:90:1E:5F:B7:C9:2F:09:A9:15:CF:6E:65:6F:69:3B:A1:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hzOkB5ft8kvCakVz25lb2k7oQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/fzev7_a9OYyMIFNofQlw5RVoFZM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/39d5f1-66f7-49d8-afba-14a1909b1237/1/7hzOkB5ft8kvCakVz25lb2k7oQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.136.0/22
Signature Algorithm: sha256WithRSAEncryption
01:8a:ab:38:30:5a:9a:c3:6b:03:b0:9f:2c:64:72:00:6a:f2:
1e:ed:50:6e:b4:71:52:77:9e:0d:89:a5:b1:2f:2c:1e:c7:07:
87:d4:6d:3a:f1:13:64:fa:75:57:4d:07:d1:5b:da:a9:d7:df:
4f:a1:70:b3:1e:3c:08:ed:27:48:ab:1f:1d:42:7b:18:12:fa:
3e:38:2a:2e:37:0e:09:93:00:76:32:fa:d0:4b:17:6e:5c:b7:
49:ae:af:45:61:d4:96:a0:13:c7:57:65:eb:10:19:c0:c9:13:
e2:26:e8:3b:ab:41:51:24:06:e8:8c:bc:02:73:74:cf:9c:9f:
dc:88:ef:5f:dc:ef:aa:c4:39:3d:b0:4a:db:cc:f7:17:24:fc:
93:63:ae:5d:9d:4b:2c:38:ff:85:92:54:bf:d1:28:5e:01:d2:
4a:18:7f:6f:00:19:1c:85:f0:e5:c8:29:a1:d3:41:bb:92:b4:
46:64:9b:80:af:74:3d:05:01:8a:99:6b:69:74:48:d4:f7:46:
dc:53:cf:de:ac:34:b8:bb:ae:ff:db:dd:b6:ea:a9:19:fd:82:
16:1f:71:d6:a5:b9:6b:9a:a9:6f:e2:e3:e1:bb:72:bc:68:03:
51:d6:06:b6:43:28:23:d9:09:e0:e6:4e:a9:20:58:9f:10:c6:
57:76:46:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:34:51 2025 by rpki-client