Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/7yPrPSPXbQ5YfjAvdWuFO_HsNCk.roa
File: 7yPrPSPXbQ5YfjAvdWuFO_HsNCk.roa (raw, json)
Hash identifier: Pg58C+70vrZraNOpqECeExmqKR43GzafKWP1c0fQzx4=
Subject key identifier: EF:23:EB:3D:23:D7:6D:0E:58:7E:30:2F:75:6B:85:3B:F1:EC:34:29
Certificate issuer: /CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Certificate serial: 01942369FE9F5485B0A6D5C5DCAE23916337
Authority key identifier: 1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/7yPrPSPXbQ5YfjAvdWuFO_HsNCk.roa
Signing time: Wed 01 Jan 2025 19:48:56 +0000
ROA not before: Wed 01 Jan 2025 19:48:56 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 212165
IP address blocks: 109.120.159.0/24 maxlen: 24
176.98.185.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:fe:9f:54:85:b0:a6:d5:c5:dc:ae:23:91:63:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b2c219f3c297b775880c3b651a2003f9be6de5e
Validity
Not Before: Jan 1 19:48:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ef23eb3d23d76d0e587e302f756b853bf1ec3429
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c7:10:bf:8c:1e:a5:5f:c3:7d:b9:bd:62:2d:
07:8d:51:36:8b:bd:4a:66:b9:a5:a6:2d:e6:ee:8c:
12:db:7a:49:1b:b0:b0:7f:e1:98:3e:b4:e2:66:0f:
c1:a7:6c:b6:53:73:8d:a6:39:87:26:80:1a:ce:67:
22:09:76:7d:a1:5b:27:99:77:d8:61:81:b1:9a:ed:
30:bc:b5:4f:2a:94:b4:1a:86:d8:2d:e5:ac:41:e2:
d9:07:9d:22:a1:49:66:e4:0d:7e:e7:fb:6a:c4:4b:
48:35:27:4f:fc:89:c7:b0:31:1d:9f:75:66:34:a0:
db:81:4f:c4:78:cf:ce:05:4d:cb:24:6d:4f:17:8a:
35:fc:5a:a8:c1:86:92:e3:7a:02:a0:a9:0d:c7:e3:
af:fe:8d:4e:09:f2:37:d8:1e:73:05:87:6c:ba:b2:
d7:ec:20:f6:ca:65:42:5a:17:eb:0a:49:76:7c:6e:
fa:e8:b3:75:91:fa:83:34:9d:71:a8:99:d9:0e:99:
03:2c:52:c6:6c:1b:17:75:71:aa:77:0d:70:75:d1:
55:cd:66:d1:58:0c:57:d7:7a:13:5f:04:79:32:28:
70:83:3d:19:73:7e:c3:88:fa:51:dd:58:48:5c:28:
0b:5a:96:7a:4a:ff:15:3e:e0:67:b3:12:8e:3b:3b:
d7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:23:EB:3D:23:D7:6D:0E:58:7E:30:2F:75:6B:85:3B:F1:EC:34:29
X509v3 Authority Key Identifier:
keyid:1B:2C:21:9F:3C:29:7B:77:58:80:C3:B6:51:A2:00:3F:9B:E6:DE:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gywhnzwpe3dYgMO2UaIAP5vm3l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/7yPrPSPXbQ5YfjAvdWuFO_HsNCk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/b11a40-48e9-4e06-bf11-92c81f22e712/1/Gywhnzwpe3dYgMO2UaIAP5vm3l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.120.159.0/24
176.98.185.0/24
Signature Algorithm: sha256WithRSAEncryption
47:ff:3a:22:0b:e1:7a:79:c6:63:03:f1:4c:be:91:95:e5:bd:
84:33:2e:6c:25:3a:0f:46:7e:1b:2e:25:1b:ea:f5:be:04:17:
ec:73:6d:fd:1e:22:9a:fd:99:fc:f7:c7:29:61:cb:e0:95:52:
6d:3b:81:b2:fd:f7:ad:c3:29:67:e7:93:1e:17:d9:f7:da:da:
bf:54:bf:87:bd:c9:57:48:d1:fc:97:4c:e3:64:9b:e6:7f:77:
16:83:8a:0f:62:d6:79:46:82:1d:69:98:c4:27:6a:2d:2d:76:
26:60:fd:2a:3f:70:47:39:58:80:aa:47:8b:62:e7:85:1d:21:
1d:b3:04:bf:40:da:ec:19:20:c8:d6:69:c2:5f:9b:b8:06:51:
11:17:ee:79:2c:7a:56:40:a1:da:e9:e7:6b:e0:e9:4e:55:75:
d7:60:80:68:62:85:68:11:01:27:c4:dd:99:fb:75:0b:e7:8a:
7b:8b:ea:45:70:82:b9:8e:fa:93:ef:56:5f:d8:87:3a:08:dc:
54:6a:dd:3b:03:28:58:50:8f:4f:dc:d8:88:17:d4:73:ea:88:
35:0e:da:12:f9:d8:a9:35:3d:84:d8:a7:f9:c6:06:e5:53:e6:
0a:41:c5:c5:98:e8:24:9a:76:bf:09:fb:a5:f8:ae:25:84:0d:
ad:42:fc:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:20:41 2025 by rpki-client