Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/7r8tPZqIEFpnoOdWpnm1XCgCiNw.roa
File: 7r8tPZqIEFpnoOdWpnm1XCgCiNw.roa (raw, json)
Hash identifier: O1D3dg6QLyDMBtIxqXVRtbnEW24qzgqOVT+vQ+iMW3U=
Subject key identifier: EE:BF:2D:3D:9A:88:10:5A:67:A0:E7:56:A6:79:B5:5C:28:02:88:DC
Certificate issuer: /CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Certificate serial: 01947B4F10EBA8F7CC016250963D5F2FAAB0
Authority key identifier: 03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/7r8tPZqIEFpnoOdWpnm1XCgCiNw.roa
Signing time: Sat 18 Jan 2025 21:26:06 +0000
ROA not before: Sat 18 Jan 2025 21:26:06 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 62425
IP address blocks: 185.84.156.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:7b:4f:10:eb:a8:f7:cc:01:62:50:96:3d:5f:2f:aa:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03364fcedd691357733cd5ccd7029db8e61d1e3a
Validity
Not Before: Jan 18 21:26:06 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eebf2d3d9a88105a67a0e756a679b55c280288dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:05:0a:c1:f6:f5:4c:8a:b6:d9:3c:64:f3:51:
a2:02:74:d6:3b:69:d5:7b:96:70:4a:39:6b:e0:14:
31:1a:38:9b:66:2e:c5:6d:69:ce:bd:3f:a0:f5:91:
5e:ed:d9:9f:c8:9c:ea:32:9f:f0:e3:8f:65:5b:df:
f3:15:69:88:21:4d:07:16:42:82:36:aa:4f:09:27:
63:3b:2b:14:52:45:21:a1:1d:e4:03:5b:0c:72:26:
6e:14:dc:17:0c:1c:66:4e:3f:2c:ae:76:9a:61:98:
07:eb:f1:ca:7c:66:6c:b7:97:4b:1f:be:f9:c0:59:
fa:ae:0c:10:4c:af:b8:20:6c:99:66:ae:76:96:1d:
1e:aa:29:35:4b:e3:3c:16:b1:6c:34:ce:d5:82:bd:
db:50:fa:3a:3b:c9:aa:db:a8:f6:df:9f:39:57:b3:
4f:ff:ba:36:41:8d:ff:a6:e0:d1:b6:57:25:82:32:
7b:13:45:e3:e9:f6:f3:e8:7e:38:78:b3:dc:18:3d:
96:e5:61:98:63:ef:94:50:6b:b8:8c:87:0d:cd:0d:
2f:9f:a7:4b:11:0d:15:24:fd:67:00:2b:09:80:1b:
6a:73:8d:84:f1:8e:af:25:b3:78:4c:b0:c6:3c:ea:
d6:0d:6c:c0:7b:69:07:69:3a:e0:ac:eb:cf:1c:bf:
f2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:BF:2D:3D:9A:88:10:5A:67:A0:E7:56:A6:79:B5:5C:28:02:88:DC
X509v3 Authority Key Identifier:
keyid:03:36:4F:CE:DD:69:13:57:73:3C:D5:CC:D7:02:9D:B8:E6:1D:1E:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AzZPzt1pE1dzPNXM1wKduOYdHjo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/7r8tPZqIEFpnoOdWpnm1XCgCiNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/56f526-53de-4c9d-b401-abf0b594646f/1/AzZPzt1pE1dzPNXM1wKduOYdHjo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.84.156.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:01:e8:68:81:db:06:68:bf:4c:e3:4e:20:32:33:48:ef:2c:
eb:b3:4b:c1:c0:0b:89:7f:b1:f1:21:f6:bc:5a:f7:82:fb:89:
cb:2b:9c:18:a1:14:b0:93:23:2f:7e:60:c8:83:ae:25:89:7c:
0b:93:16:69:d4:1c:0b:85:03:57:65:b1:15:65:64:f2:19:d9:
cb:8d:da:1e:38:50:6f:10:a4:95:aa:f2:02:c0:e1:c3:89:54:
ad:bc:30:cf:cb:0f:a7:b1:08:ca:e2:96:0b:68:73:c5:68:22:
cd:11:45:ff:14:d6:03:92:32:e3:a9:35:62:25:16:d0:84:a0:
a5:a0:fc:ff:eb:e1:37:a7:f7:d9:f3:01:e3:1a:bf:3d:21:a3:
d1:f4:d6:0c:75:09:8e:1d:51:88:75:32:76:ef:26:e1:54:64:
a2:27:ec:87:ef:b2:ac:08:2a:2d:8b:d5:f3:53:49:87:ac:9d:
93:d1:29:ca:17:9e:78:5e:31:35:57:0c:b7:12:fa:8b:ef:ae:
fe:5c:1d:22:ba:69:f4:ee:05:9e:7a:3c:90:28:e1:33:a3:6a:
2f:4d:c3:df:cb:fd:99:55:c7:2b:d2:1b:16:00:01:f4:4c:e9:
1e:fc:25:cd:14:4d:c8:c9:12:99:26:07:8d:d4:d1:1b:a9:f4:
d1:39:ba:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 20:29:22 2025 by rpki-client