Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/7SbxWOq-MRP5ULWQ2099XB6fnsw.roa
File: 7SbxWOq-MRP5ULWQ2099XB6fnsw.roa (raw, json)
Hash identifier: 5+GTdZJjZ/hGlJyiza+hMgn0Xvc9DgVXyOpbY9SRSSQ=
Subject key identifier: ED:26:F1:58:EA:BE:31:13:F9:50:B5:90:DB:4F:7D:5C:1E:9F:9E:CC
Certificate issuer: /CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Certificate serial: 019422FBF9EF048D3F61BD80D70A169C6780
Authority key identifier: 08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/7SbxWOq-MRP5ULWQ2099XB6fnsw.roa
Signing time: Wed 01 Jan 2025 17:48:46 +0000
ROA not before: Wed 01 Jan 2025 17:48:46 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 25526
IP address blocks: 109.197.216.0/21 maxlen: 21
193.254.220.0/23 maxlen: 23
195.39.242.0/23 maxlen: 23
2001:678:b44::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:f9:ef:04:8d:3f:61:bd:80:d7:0a:16:9c:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08b147d39e43bb75f9f7aff45e7bf2b83530f874
Validity
Not Before: Jan 1 17:48:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed26f158eabe3113f950b590db4f7d5c1e9f9ecc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:c5:41:6a:26:af:b7:8e:5d:d6:53:48:0d:
3e:55:61:7d:1b:b3:62:75:a4:2e:38:43:3e:bf:ab:
59:dc:39:1b:bb:3b:20:c8:fd:0c:52:1b:dd:f6:65:
c7:8f:42:50:c2:76:29:45:b3:9f:03:02:f9:77:17:
10:a1:01:71:a4:d5:eb:9c:ee:13:6d:f0:50:81:8e:
cc:a9:9d:11:00:1c:23:5b:53:89:c8:a0:42:f6:48:
aa:b6:1b:ee:46:a0:a8:54:61:8a:a3:fa:23:fc:f5:
70:b1:bb:30:02:9f:c0:69:1b:66:2e:65:e2:22:8a:
fe:c3:3a:e8:49:86:b9:30:6b:0f:8b:d3:e8:bf:08:
4c:e9:24:d2:d5:50:fa:ad:7c:42:b7:3c:1c:0e:ae:
2b:65:e8:7e:88:72:ad:c4:e0:fb:b9:c4:cd:dd:e4:
fe:3d:69:44:c4:fb:45:12:ad:2d:e5:0a:e3:5a:fe:
10:7f:c6:85:8b:9b:28:57:47:dd:67:ee:6b:b6:56:
93:10:e0:d1:c3:b6:41:59:87:99:2e:f9:af:38:ab:
58:59:be:b6:12:69:fe:fb:56:2f:41:79:eb:3f:d1:
bf:3f:59:89:d2:90:60:fc:18:29:8e:f0:07:7e:9d:
23:63:15:a8:07:d4:32:d7:e4:39:a3:9e:1a:d1:6c:
73:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:26:F1:58:EA:BE:31:13:F9:50:B5:90:DB:4F:7D:5C:1E:9F:9E:CC
X509v3 Authority Key Identifier:
keyid:08:B1:47:D3:9E:43:BB:75:F9:F7:AF:F4:5E:7B:F2:B8:35:30:F8:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CLFH055Du3X596_0XnvyuDUw-HQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/7SbxWOq-MRP5ULWQ2099XB6fnsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/6ac73a-6b5f-4232-9b8c-305e33ef8b29/1/CLFH055Du3X596_0XnvyuDUw-HQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.197.216.0/21
193.254.220.0/23
195.39.242.0/23
IPv6:
2001:678:b44::/48
Signature Algorithm: sha256WithRSAEncryption
53:d5:88:d1:28:03:9e:69:d5:63:32:25:66:17:ee:8b:33:17:
53:68:76:04:33:70:90:eb:a8:d6:b3:09:ba:d3:ed:30:d6:c1:
32:ce:ef:0e:9a:72:b9:c4:9f:65:ba:1b:6d:3c:07:ba:50:64:
70:0d:44:9f:bb:9a:66:ff:0c:67:99:fa:18:40:ab:72:10:34:
f2:2d:9e:85:31:35:ab:00:30:da:b5:6d:a4:2a:75:5a:91:3c:
84:61:5a:15:4d:0a:b3:81:9c:4e:84:b1:b6:29:b6:12:aa:02:
b0:c3:7e:b8:99:f5:f3:f4:90:4d:c7:2b:03:b2:c5:3f:1a:8d:
1c:e5:5e:f7:12:11:42:ad:61:cd:37:24:33:e5:8f:82:4b:88:
fb:c7:12:5c:00:f1:42:98:6e:8d:e3:29:74:78:c2:b9:cc:60:
bd:37:97:f9:e2:cc:7b:75:54:c2:72:28:8c:fc:e3:e5:ca:4b:
22:bf:9b:40:9a:35:df:14:49:d0:af:b3:0b:5a:75:6a:76:6d:
4d:dd:40:18:06:ed:fc:58:9c:87:01:c6:a0:9b:9a:14:67:34:
3e:10:a7:12:4b:31:b7:97:43:fb:c0:38:8a:57:ad:30:28:5b:
c1:ea:e5:4c:bc:34:ea:d2:9f:37:f5:40:f8:75:18:e2:b1:51:
7e:93:68:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 13:05:47 2025 by rpki-client