Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/7e4XWoTxR_4GFJNbOkXvGvD-gG4.roa
File: 7e4XWoTxR_4GFJNbOkXvGvD-gG4.roa (raw, json)
Hash identifier: 4YXw3iLwYdL9YkiJ0wB5yVfXs/BwnpG21A305csfmtA=
Subject key identifier: ED:EE:17:5A:84:F1:47:FE:06:14:93:5B:3A:45:EF:1A:F0:FE:80:6E
Certificate issuer: /CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Certificate serial: 019425FD79110536DF22A3DAF11B2292E803
Authority key identifier: E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/7e4XWoTxR_4GFJNbOkXvGvD-gG4.roa
Signing time: Thu 02 Jan 2025 07:49:16 +0000
ROA not before: Thu 02 Jan 2025 07:49:16 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8708
IP address blocks: 194.153.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fd:79:11:05:36:df:22:a3:da:f1:1b:22:92:e8:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1aed1484e96e4bf7993e9b867b34c34d6a8ae36
Validity
Not Before: Jan 2 07:49:16 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=edee175a84f147fe0614935b3a45ef1af0fe806e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d7:68:d1:0b:64:0f:32:69:9b:62:cf:d3:95:
39:24:be:70:e2:2f:cf:21:18:55:a3:2f:c2:43:90:
94:96:e6:51:a2:2d:c9:aa:d4:78:6e:d7:d5:12:ad:
e8:a0:a1:54:98:f9:1f:21:b0:c2:8e:ce:f5:d9:c3:
e0:a5:5c:c4:b5:b8:3d:18:de:e7:b4:53:e9:a7:50:
37:e2:e2:ff:5f:5a:9b:95:0e:0a:b8:ae:c9:73:a4:
cb:e1:df:d2:0a:e8:69:46:be:66:59:db:2d:27:5b:
ce:5f:57:51:cd:f8:1e:e7:81:0f:ee:66:9d:72:4d:
05:1b:54:fa:13:74:ab:72:90:36:05:0d:c0:02:f3:
72:a0:44:08:94:0e:9f:e3:70:eb:16:6f:f7:c8:bb:
33:72:9a:40:4e:59:d0:3e:42:a8:35:27:b7:87:fc:
c8:9b:54:89:62:cc:48:94:da:aa:a1:dc:5a:76:12:
64:b2:79:43:bc:50:71:d1:99:0f:5e:9d:08:99:dd:
82:c6:9e:5a:39:b8:bc:0f:bf:39:20:ba:2a:64:06:
62:8c:8f:13:fb:d7:61:f9:d0:af:4a:d9:0f:79:ae:
78:dc:af:86:1a:90:1c:c7:dc:3c:36:bc:1e:8a:c8:
11:32:b4:d0:97:50:35:50:11:c2:4f:03:de:f7:45:
79:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:EE:17:5A:84:F1:47:FE:06:14:93:5B:3A:45:EF:1A:F0:FE:80:6E
X509v3 Authority Key Identifier:
keyid:E1:AE:D1:48:4E:96:E4:BF:79:93:E9:B8:67:B3:4C:34:D6:A8:AE:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a7RSE6W5L95k-m4Z7NMNNaorjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/7e4XWoTxR_4GFJNbOkXvGvD-gG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/523a93-8bbd-44ac-88bd-4e7bca55f821/1/4a7RSE6W5L95k-m4Z7NMNNaorjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.153.248.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:64:7f:33:ae:a9:fb:e2:55:3d:4c:d7:ba:a3:09:15:fb:bd:
8a:f7:eb:aa:f5:67:d5:d5:3d:76:27:cc:d1:0e:57:bf:64:74:
3d:e6:67:7b:8c:09:02:f3:10:b7:14:14:43:f4:bf:35:0d:02:
58:49:40:96:88:de:1e:bb:5f:94:94:04:74:32:5b:b2:3d:51:
ce:96:f8:4d:62:66:98:12:5a:c4:78:7c:99:c9:2f:a3:25:be:
c2:ca:38:da:48:d7:bd:29:2b:55:fa:13:83:2d:bc:cc:cd:dc:
8f:d5:4d:cb:7a:a3:f1:5d:96:54:94:df:3f:46:bb:8d:f5:0c:
46:17:f4:0b:c8:76:fc:85:74:a5:e0:e0:0c:88:c7:fa:94:a4:
a5:92:80:98:23:71:fc:59:3f:9d:04:47:a2:fb:40:d9:d5:8e:
ea:07:dc:22:e2:1a:32:ea:8f:60:13:10:47:17:fa:6d:42:4e:
d3:5b:c3:09:4f:bd:90:4b:aa:1c:15:2c:9d:28:35:ec:0d:69:
c8:2f:4a:fe:7f:a3:b8:5e:58:ca:a4:ca:82:82:11:60:75:ff:
d3:44:6b:e2:8b:cc:fe:d8:c7:d4:df:46:57:e0:d4:ef:0f:2b:
e2:f8:91:b2:8c:ec:54:68:42:85:5b:43:22:e7:23:ec:68:45:
f0:48:be:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 21:58:32 2025 by rpki-client