Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/7KfzHRhceMH3Gb7zOEYksplo7xE.roa
File: 7KfzHRhceMH3Gb7zOEYksplo7xE.roa (raw, json)
Hash identifier: iVfBfIuw7lWYjZl+rIhHi1Vj8lrxetMWHxIKh5tV/kE=
Subject key identifier: EC:A7:F3:1D:18:5C:78:C1:F7:19:BE:F3:38:46:24:B2:99:68:EF:11
Certificate issuer: /CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Certificate serial: 01958715D52AAB412C475BE6C15420794F72
Authority key identifier: 2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/7KfzHRhceMH3Gb7zOEYksplo7xE.roa
Signing time: Tue 11 Mar 2025 21:21:49 +0000
ROA not before: Tue 11 Mar 2025 21:21:49 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 36352
IP address blocks: 195.234.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:95:87:15:d5:2a:ab:41:2c:47:5b:e6:c1:54:20:79:4f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b051ef23060eb51bfd8c79795f6a4daf48a3aa0
Validity
Not Before: Mar 11 21:21:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=eca7f31d185c78c1f719bef3384624b29968ef11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:75:7d:58:3d:d6:94:c5:69:ed:53:1f:2e:0e:
9d:90:b8:a5:83:7a:4f:55:12:98:4b:a7:d7:6c:06:
b1:b6:9e:6a:67:20:54:71:04:d4:29:25:35:b5:7d:
2d:ee:4b:91:c7:2a:78:f3:ec:a8:d5:22:a5:b9:b4:
e2:78:79:26:86:87:54:09:60:3d:b6:9c:8a:48:22:
10:4d:7f:6e:8a:e6:87:39:56:59:56:3f:37:e4:2b:
59:18:a8:c8:79:fa:e6:ee:e3:ce:f9:99:f9:54:d4:
60:15:8d:14:fe:8b:56:80:f0:eb:23:95:28:8c:31:
ed:41:ed:b1:34:82:c9:17:6a:eb:88:f8:58:35:7d:
03:5c:24:f2:73:c6:c2:c2:37:92:5a:06:eb:4b:b2:
bc:0e:bc:bf:f0:07:a1:85:f3:0d:6a:92:ed:3c:5b:
4c:ea:67:55:e4:04:1f:61:f4:43:a3:fd:ea:f1:f3:
f8:af:80:8f:02:d8:27:9a:48:c8:ae:9b:a0:86:ad:
c4:e0:5d:43:db:cc:36:26:84:57:95:b2:71:fe:15:
06:ae:75:97:e1:05:4a:72:6c:85:cb:42:d2:29:88:
f0:7b:e0:91:45:21:c4:cc:3c:f0:2d:f8:64:89:b9:
fb:9b:94:f6:c5:97:f3:2e:99:da:bf:00:20:39:82:
ae:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:A7:F3:1D:18:5C:78:C1:F7:19:BE:F3:38:46:24:B2:99:68:EF:11
X509v3 Authority Key Identifier:
keyid:2B:05:1E:F2:30:60:EB:51:BF:D8:C7:97:95:F6:A4:DA:F4:8A:3A:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KwUe8jBg61G_2MeXlfak2vSKOqA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/7KfzHRhceMH3Gb7zOEYksplo7xE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/38179c-25ab-4368-8cf8-57e593cf9a4e/1/KwUe8jBg61G_2MeXlfak2vSKOqA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.234.153.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:2a:bd:01:06:cd:b3:cb:82:07:f4:3e:99:bb:e3:c7:3f:32:
54:15:2c:f2:ce:03:62:1a:2b:c5:95:68:63:c3:2c:f8:06:e2:
65:9a:b8:48:a9:ab:ca:db:bd:3e:68:56:cc:dd:df:27:3e:c0:
21:41:d4:35:c5:9c:23:f8:28:2e:a6:21:0a:a6:0f:c4:3f:09:
73:ac:c2:66:f1:a9:60:f6:df:50:ea:8d:7f:34:da:f4:34:06:
bb:9c:cc:e2:e8:5f:65:b0:68:bb:c0:5d:94:db:a0:f4:2a:e5:
1f:84:cd:ed:d0:ee:4a:8e:8c:b6:a2:b0:43:cd:7d:81:aa:e7:
0b:5a:9a:09:a7:ec:c9:7b:3f:e7:3a:47:cb:f0:dd:56:8d:7c:
e4:e2:aa:e4:92:41:f3:11:01:14:2a:a3:75:a3:1f:0e:1e:e6:
7e:64:ce:71:9d:5e:d7:fb:d2:50:6a:f6:c4:ba:12:0a:45:39:
79:a9:bf:24:c7:ba:67:98:92:74:40:f5:09:2d:6a:60:fc:60:
94:30:cc:0f:70:98:ac:57:a0:0f:af:ba:78:cd:06:88:30:4c:
b8:f2:46:c0:84:c8:c0:79:be:25:b1:d4:9a:3d:e3:f8:77:28:
88:1e:70:fc:ba:5c:a6:7c:eb:11:9c:8f:a5:45:29:f3:f4:23:
6f:86:a4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:02:02 2025 by rpki-client