Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/7u9HNLxm9pcYaogfDQxcvTuVdBc.roa
File: 7u9HNLxm9pcYaogfDQxcvTuVdBc.roa (raw, json)
Hash identifier: O3tVTVyLgMTQRdcIzr5g60UdATSZQkZBfh6yZ+9zJBw=
Subject key identifier: EE:EF:47:34:BC:66:F6:97:18:6A:88:1F:0D:0C:5C:BD:3B:95:74:17
Certificate issuer: /CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
Certificate serial: 019421B255F548C4B9CB4871A3F746705026
Authority key identifier: 78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/7u9HNLxm9pcYaogfDQxcvTuVdBc.roa
Signing time: Wed 01 Jan 2025 11:48:43 +0000
ROA not before: Wed 01 Jan 2025 11:48:43 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 15580
IP address blocks: 193.29.52.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:55:f5:48:c4:b9:cb:48:71:a3:f7:46:70:50:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=782f9f3bbbe0b51ea9e9b2e96c6868748fa078f7
Validity
Not Before: Jan 1 11:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eeef4734bc66f697186a881f0d0c5cbd3b957417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:76:26:15:f2:f7:b2:1d:35:86:4c:e3:21:31:
5c:cd:78:18:37:dd:8b:ca:ef:71:36:4a:ca:92:95:
2f:67:17:95:dc:47:22:3b:db:46:6d:df:20:71:89:
75:fe:e1:1a:6a:18:12:6e:ff:b2:14:94:c5:1e:77:
3f:78:1f:e6:9a:75:e5:40:44:59:07:d0:3c:1d:de:
22:aa:09:fd:c8:75:a8:88:27:0b:67:5e:78:fc:d6:
1b:a2:01:97:cd:8e:19:a4:c3:b2:67:cb:ed:80:fc:
d0:01:76:c9:ea:bd:c7:6d:a8:01:80:f1:83:84:29:
26:b4:0a:e0:3f:fd:e2:15:4e:55:ea:21:ce:a1:4e:
57:61:86:21:09:ca:62:04:6a:6a:1b:05:3f:f8:aa:
06:f3:e2:b3:4f:a1:d3:11:79:d9:f5:84:ff:b5:4e:
5a:6a:1b:6e:b9:f6:cb:e8:ac:94:de:96:ab:41:00:
e3:87:01:1e:4d:6d:1a:cb:df:36:2f:22:1f:be:7c:
17:b7:71:05:b5:82:62:a7:2a:5d:55:49:2e:0b:2b:
d9:a4:5d:a8:bb:53:fa:3c:47:76:52:00:4a:57:25:
d1:60:49:c3:89:58:7f:ea:1a:27:89:01:ea:fd:ea:
bd:7d:cb:6a:b4:4e:db:dd:b2:30:0c:87:81:8e:6d:
b4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:EF:47:34:BC:66:F6:97:18:6A:88:1F:0D:0C:5C:BD:3B:95:74:17
X509v3 Authority Key Identifier:
keyid:78:2F:9F:3B:BB:E0:B5:1E:A9:E9:B2:E9:6C:68:68:74:8F:A0:78:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eC-fO7vgtR6p6bLpbGhodI-gePc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/7u9HNLxm9pcYaogfDQxcvTuVdBc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/e7f322-39b5-437a-99fd-743c30801ff1/1/eC-fO7vgtR6p6bLpbGhodI-gePc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.29.52.0/24
Signature Algorithm: sha256WithRSAEncryption
04:39:d6:a0:ad:bc:50:1a:14:ce:91:b3:27:d9:95:eb:41:08:
5c:bc:3d:01:0c:ef:81:84:d4:88:b4:8c:9e:d8:d8:5a:a2:c5:
81:18:db:dc:61:c6:a5:06:0c:2a:ed:e0:08:61:58:35:24:20:
f9:53:5f:42:18:f4:3c:bc:84:c8:f5:1a:66:31:5e:14:56:38:
be:1a:20:75:c9:f7:c4:aa:d3:4f:40:02:07:dd:74:5b:e6:ae:
32:f7:2c:39:e7:49:54:fb:32:e2:cc:da:e6:e1:f6:81:9e:3a:
1a:e3:61:2e:45:d2:02:60:83:26:ce:62:2e:4a:e0:01:8c:cb:
3c:b1:3e:61:2a:21:6b:b5:80:75:9c:34:e1:32:41:af:d8:13:
33:83:fb:bf:ee:01:d0:95:39:81:b1:3c:52:c7:25:1d:fc:59:
a0:b4:65:a0:e6:c8:f5:97:f5:f7:7d:0a:e2:2b:a0:18:c6:89:
93:50:e2:e5:3d:ef:01:84:cd:fe:b5:6e:2f:ab:8d:45:f6:e4:
46:34:67:67:c6:93:73:93:59:97:bd:2e:ce:7f:91:fa:0b:45:
0e:4e:13:0f:2b:4c:a6:a3:21:7a:40:91:ac:d0:c7:ae:29:b9:
ba:ac:ba:7a:91:01:68:b8:a5:a7:27:b1:0c:52:b5:2e:55:6c:
65:0e:51:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 18:36:50 2025 by rpki-client