Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/c7GuDPd6K8Mw6TfxSKv8OUbqyUg.roa
File: c7GuDPd6K8Mw6TfxSKv8OUbqyUg.roa (raw, json)
Hash identifier: L3mZu6WxGNpKrVa630mczwqlZOlcgqKqthoD3BhJb+k=
Subject key identifier: 73:B1:AE:0C:F7:7A:2B:C3:30:E9:37:F1:48:AB:FC:39:46:EA:C9:48
Certificate issuer: /CN=7946c5601064101b1b54cf5c6efcd407f17911b9
Certificate serial: 019424B3F522623922CFA7F89C9E111B9EA0
Authority key identifier: 79:46:C5:60:10:64:10:1B:1B:54:CF:5C:6E:FC:D4:07:F1:79:11:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/c7GuDPd6K8Mw6TfxSKv8OUbqyUg.roa
Signing time: Thu 02 Jan 2025 01:49:20 +0000
ROA not before: Thu 02 Jan 2025 01:49:20 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 8708
IP address blocks: 194.102.128.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:f5:22:62:39:22:cf:a7:f8:9c:9e:11:1b:9e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7946c5601064101b1b54cf5c6efcd407f17911b9
Validity
Not Before: Jan 2 01:49:20 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=73b1ae0cf77a2bc330e937f148abfc3946eac948
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d4:fb:b1:3a:f1:39:32:02:31:35:e8:56:9d:
95:99:39:04:3c:f7:5e:c5:3e:79:f1:40:74:db:56:
36:22:e3:96:37:44:42:c9:e1:4f:8d:44:3f:f2:4a:
07:bb:78:dd:ae:84:97:62:69:06:ac:f9:7d:1a:8b:
de:7e:6d:98:df:19:be:6c:5f:0a:b9:00:f4:39:dc:
2c:cd:03:93:28:1f:91:b3:74:7b:36:f4:59:71:d4:
06:4f:67:0b:37:ee:b0:91:99:c1:93:7c:58:5f:76:
3b:94:3a:6e:3a:51:b4:85:f3:7f:6b:2f:9d:a5:c1:
87:a2:c0:41:1a:bb:b2:21:9f:52:2d:d1:22:c7:dc:
21:ec:38:b0:6d:d5:89:5d:b4:ce:38:c3:82:24:40:
12:f2:f3:e2:44:d0:3e:7c:00:8b:99:68:3b:95:3f:
96:35:c6:cd:4b:6e:e9:fe:3b:69:fe:29:e6:e3:52:
a8:4f:ea:1e:36:ac:e3:6f:ad:de:cd:2b:55:7b:b2:
6a:64:a5:b2:f1:12:97:1d:e1:f0:51:d6:da:f6:f9:
61:ce:4a:6f:c8:81:90:6b:40:ed:81:c2:c7:66:a8:
c1:12:47:91:82:a6:d5:86:e5:d7:93:14:b5:2f:df:
c8:bc:3b:fe:c9:ba:9e:44:48:85:e3:45:03:fe:c1:
bf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B1:AE:0C:F7:7A:2B:C3:30:E9:37:F1:48:AB:FC:39:46:EA:C9:48
X509v3 Authority Key Identifier:
keyid:79:46:C5:60:10:64:10:1B:1B:54:CF:5C:6E:FC:D4:07:F1:79:11:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/c7GuDPd6K8Mw6TfxSKv8OUbqyUg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/73fe78-f00d-45f8-bfd3-f2a0e9c8c7f0/1/eUbFYBBkEBsbVM9cbvzUB_F5Ebk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.128.0/24
Signature Algorithm: sha256WithRSAEncryption
04:6f:13:5f:79:3c:13:cb:d2:78:67:c8:a5:9a:32:20:67:90:
b9:5b:79:b3:db:eb:a1:c2:8b:fa:42:42:8c:83:37:76:65:24:
93:0c:b1:f9:33:0d:0b:e4:5f:8a:e5:43:1a:87:a0:55:ac:30:
9a:34:c2:69:84:d6:90:df:01:16:53:e7:e6:1d:20:b9:88:be:
7a:d2:f0:30:70:0b:46:a9:12:f5:1b:02:0d:a9:66:71:21:c7:
5b:90:d2:4b:71:d3:aa:9e:95:5d:24:8c:1d:a8:4f:35:20:6e:
e4:a8:41:64:5c:94:73:fb:18:a0:0f:9c:dc:01:b1:1e:59:61:
93:c2:2a:6f:35:40:84:48:2f:42:73:d7:91:57:48:f5:3d:db:
5a:8b:41:78:47:79:32:58:70:d1:ca:97:89:de:3c:57:46:d7:
41:db:f6:1b:f8:1b:80:9e:86:4e:0e:0e:52:d1:09:4e:f6:21:
d0:d8:16:2c:75:e8:d4:77:5f:65:fc:f7:77:02:d8:6c:3e:80:
b4:0f:66:f8:e1:7f:2a:47:f9:5d:71:e2:a9:09:9e:5e:c4:37:
48:6e:80:00:fc:78:ec:4e:96:a7:28:f7:3c:19:dd:37:2a:9e:
9b:37:60:ee:47:c0:b0:43:04:34:e9:49:4b:27:08:70:16:0b:
94:50:32:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 00:00:39 2025 by rpki-client