Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/7xo8CVTEQiyJ38iS0rK9qQgFG5A.roa
File: 7xo8CVTEQiyJ38iS0rK9qQgFG5A.roa (raw, json)
Hash identifier: JWn06av6DPlkBXUCEa9GjqwZR6qDi3QbIVUD7xJDtjg=
Subject key identifier: EF:1A:3C:09:54:C4:42:2C:89:DF:C8:92:D2:B2:BD:A9:08:05:1B:90
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01942144164ACF84426015F090C530F58EBA
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/7xo8CVTEQiyJ38iS0rK9qQgFG5A.roa
Signing time: Wed 01 Jan 2025 09:48:17 +0000
ROA not before: Wed 01 Jan 2025 09:48:17 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 209805
IP address blocks: 130.255.170.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:16:4a:cf:84:42:60:15:f0:90:c5:30:f5:8e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jan 1 09:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef1a3c0954c4422c89dfc892d2b2bda908051b90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:87:9f:79:d5:50:ab:ea:25:2a:05:1d:45:
2f:12:56:25:7c:58:c7:e7:c8:6e:0e:ab:d1:a1:83:
fa:24:18:7b:ba:ac:3d:6e:c8:25:73:7a:34:b7:d0:
ac:c1:09:ae:01:56:9d:df:76:ee:ca:ed:a0:13:d4:
37:95:40:d5:d6:69:77:7c:c4:84:dc:3b:bf:dd:1b:
ca:20:b7:97:64:a6:74:f6:62:ed:99:74:c5:58:8c:
81:69:c6:41:79:db:ad:33:60:b1:57:b5:3e:08:7b:
4b:bb:0b:e4:c1:b2:24:dc:7d:24:d3:b4:40:13:66:
ef:5e:cb:d3:5c:98:ed:15:de:34:18:92:9b:bb:d4:
f0:1a:69:1b:f2:a4:31:e4:7d:03:7a:77:bd:74:20:
93:a5:55:71:b2:5c:17:2d:8b:b6:34:04:b1:77:22:
2f:1e:56:3a:fb:c9:64:76:1d:a8:25:37:c2:92:4f:
5a:39:d8:5c:62:38:e3:14:3c:15:9a:67:70:ee:68:
37:8c:82:65:a4:3c:ac:af:d5:3a:81:62:cf:2c:88:
18:5f:70:ad:ee:55:84:0f:67:23:69:09:7f:32:b3:
30:00:d2:4b:bc:7f:ec:e6:3b:3d:9c:7b:42:4d:bb:
7d:24:2d:dc:00:d2:5f:21:d3:bc:7f:26:bf:a7:76:
e9:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:1A:3C:09:54:C4:42:2C:89:DF:C8:92:D2:B2:BD:A9:08:05:1B:90
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/7xo8CVTEQiyJ38iS0rK9qQgFG5A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.170.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:8f:69:e6:6d:4c:64:ba:9c:5c:26:78:4b:8d:b9:52:47:fd:
83:00:58:43:11:48:69:d8:9a:03:54:5d:55:f5:6e:f0:d9:55:
1b:df:ab:24:ce:04:f2:a9:d6:b8:4a:89:9f:ea:0e:1c:7a:57:
78:fd:70:18:55:4d:2a:b4:27:49:9d:04:19:8c:5c:24:de:c6:
2e:01:75:21:ca:65:67:ae:0b:d1:1d:74:03:9b:4b:14:8d:fa:
14:18:91:d4:92:af:92:2d:56:17:a6:19:dc:d9:a9:ac:e1:3e:
c6:d7:a5:21:90:3c:b2:45:ac:9a:60:3a:b2:52:c4:f2:86:9f:
26:90:e1:55:3c:9c:bf:9d:75:e2:6b:eb:0b:b0:da:b4:69:f1:
07:db:24:f9:b1:04:67:c5:ed:0a:f4:f6:a2:d8:10:9a:fa:d5:
f1:f3:ec:65:04:c7:1e:e6:03:ff:44:fd:c0:c4:b1:7c:83:b2:
c5:de:42:f8:9c:b3:e7:19:82:24:86:99:f9:64:f0:0c:9c:0e:
ad:77:49:51:4c:a1:d5:df:e8:e4:7e:bb:1a:c9:c5:73:59:59:
39:6d:f2:8a:a5:f1:b3:27:19:0e:82:3b:c7:e1:7d:5a:76:cd:
34:99:65:d7:42:b1:93:cb:7f:3c:1b:c9:f9:53:37:de:6f:f0:
2f:db:d6:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:46 2025 by rpki-client