Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/7JvREGRTdMvw-HJmLI4sB5IDTYY.roa
File: 7JvREGRTdMvw-HJmLI4sB5IDTYY.roa (raw, json)
Hash identifier: ShBhL6ajyRBWJjEmogXSewTevYt5ay8ZVken8Ad9s4I=
Subject key identifier: EC:9B:D1:10:64:53:74:CB:F0:F8:72:66:2C:8E:2C:07:92:03:4D:86
Certificate issuer: /CN=b754992ba488a872c89cbdf42ca4df895e609c53
Certificate serial: 018571B0BFB8CA24221563596E524E2F54EB
Authority key identifier: B7:54:99:2B:A4:88:A8:72:C8:9C:BD:F4:2C:A4:DF:89:5E:60:9C:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t1SZK6SIqHLInL30LKTfiV5gnFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/7JvREGRTdMvw-HJmLI4sB5IDTYY.roa
Signing time: Mon 02 Jan 2023 08:54:46 +0000
ROA not before: Mon 02 Jan 2023 08:54:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203537
IP address blocks: 185.130.28.0/22 maxlen: 24
193.163.126.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:b0:bf:b8:ca:24:22:15:63:59:6e:52:4e:2f:54:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b754992ba488a872c89cbdf42ca4df895e609c53
Validity
Not Before: Jan 2 08:54:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec9bd110645374cbf0f872662c8e2c0792034d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:e0:5d:a7:86:5d:81:4a:6c:f4:54:dc:cb:6c:
cc:d1:a4:65:30:eb:96:7e:90:95:ca:fd:4a:e7:3f:
97:f3:4a:95:be:ad:69:16:94:5a:b0:2b:d5:c3:16:
a5:29:21:1b:75:3e:82:90:5d:e1:d9:41:fe:2c:01:
2b:42:1c:94:51:76:e0:2b:ce:7c:3a:22:1d:d4:fb:
05:21:dc:c6:1b:2b:98:4e:0d:26:7b:b2:50:62:c7:
88:31:67:3e:78:e4:e0:bf:b3:9d:7d:3c:25:a0:b2:
1c:5e:d1:80:50:56:25:e8:b7:1a:3b:36:bd:30:79:
3a:e4:95:ba:5f:d5:57:29:6a:fc:8f:3e:91:d3:52:
b0:fc:95:fb:86:31:3d:ea:a0:ba:30:b6:0f:2d:62:
4a:ea:d7:32:3e:d0:41:67:a7:56:34:64:2a:9a:38:
d7:b7:71:91:b2:de:c9:22:30:bd:b4:72:7e:97:0b:
02:f5:0a:eb:d6:a1:03:b4:0d:bc:18:28:d1:3f:66:
b5:7e:14:e5:2f:6d:6d:59:79:9c:f0:9a:a6:b8:b8:
a7:39:16:f2:82:0c:7f:9c:74:13:a9:86:8f:cf:85:
a2:f0:ef:f5:22:a7:21:1f:1c:7b:86:1d:77:83:ca:
08:f6:42:bc:65:b6:33:7f:21:af:7a:b7:88:7b:5c:
3e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:9B:D1:10:64:53:74:CB:F0:F8:72:66:2C:8E:2C:07:92:03:4D:86
X509v3 Authority Key Identifier:
keyid:B7:54:99:2B:A4:88:A8:72:C8:9C:BD:F4:2C:A4:DF:89:5E:60:9C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t1SZK6SIqHLInL30LKTfiV5gnFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/7JvREGRTdMvw-HJmLI4sB5IDTYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/4a839e-c86a-49ee-989e-7c42c494ef8d/1/t1SZK6SIqHLInL30LKTfiV5gnFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.130.28.0/22
193.163.126.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ea:07:72:c6:81:a4:98:98:e2:e2:ce:bd:f4:f4:fa:9f:12:
90:e7:26:7f:ec:62:ad:b6:ba:e5:44:1e:b2:dd:63:90:28:02:
18:5b:8d:a5:df:25:24:82:92:c4:b0:9a:45:d6:ff:ea:88:9d:
b9:1b:9a:cd:00:f3:95:a3:27:c5:6c:38:8d:03:9f:c1:11:5b:
32:2b:47:f0:66:f9:03:6b:b3:17:8e:3c:a8:d2:f2:88:1a:7d:
5b:ab:69:b4:3d:74:eb:91:59:6f:79:1c:1c:fe:25:94:b9:01:
1b:6a:8d:46:5d:3e:1c:e9:7c:3f:33:e0:3c:ac:3b:4e:68:b3:
df:fb:6c:a1:6c:b4:d0:7c:1c:6f:ce:7e:b4:5d:7a:cb:c7:eb:
6d:bf:98:4f:34:3f:a6:3b:43:a1:2b:c5:02:74:45:2b:c5:43:
99:4c:d1:78:21:87:52:30:67:ca:e7:85:07:3f:d2:29:df:cb:
66:98:0c:28:45:28:da:c4:b9:b1:25:ca:74:3b:f0:d3:9e:b3:
fc:28:25:43:b1:5e:cc:00:9b:52:05:69:d7:8b:5b:63:72:3c:
fd:3e:de:12:5e:11:8b:87:f9:36:14:ce:3e:61:37:34:22:ba:
00:fb:de:44:5d:b8:2d:56:f6:07:98:0a:45:a9:cd:03:95:f2:
26:28:0e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:15:53 2025 by rpki-client