Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/7QXZND5RcY5Hc2vs7DJ0efA8Af0.roa
File: 7QXZND5RcY5Hc2vs7DJ0efA8Af0.roa (raw, json)
Hash identifier: W7ckwhy1oa1xgn5umFFUkKiOSX7ItyscYhQ/zlFz4XU=
Subject key identifier: ED:05:D9:34:3E:51:71:8E:47:73:6B:EC:EC:32:74:79:F0:3C:01:FD
Certificate issuer: /CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Certificate serial: 019427B5AB4A12333482650C62BBD4446272
Authority key identifier: EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/7QXZND5RcY5Hc2vs7DJ0efA8Af0.roa
Signing time: Thu 02 Jan 2025 15:50:04 +0000
ROA not before: Thu 02 Jan 2025 15:50:04 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 57494
IP address blocks: 37.139.51.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b5:ab:4a:12:33:34:82:65:0c:62:bb:d4:44:62:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eaaa8a0a5fdfd698e104be36a2aeec813aeca071
Validity
Not Before: Jan 2 15:50:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ed05d9343e51718e47736becec327479f03c01fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:8e:0d:c4:14:f0:37:b6:4d:59:44:b9:0b:
8c:6d:99:49:b3:44:31:ff:8c:d0:63:9b:54:1a:79:
4a:df:47:99:88:d9:31:4a:1b:c6:4a:cd:26:ae:9b:
30:2f:7d:98:6f:f2:bc:9a:72:91:5b:40:f6:38:29:
28:ba:61:c6:45:87:c8:6d:a7:4d:bc:2d:16:77:b3:
e7:90:1a:45:72:b6:de:9c:02:30:fb:18:9d:1e:11:
c3:14:7d:ed:7d:f2:5f:9f:3e:f2:39:36:6b:a9:7e:
c7:bf:c2:d7:20:46:70:4d:f4:88:90:73:27:0a:38:
d9:b7:6c:30:2c:57:32:51:d4:42:ef:5c:b1:dc:36:
87:1b:b1:61:99:f7:2e:fc:70:0e:5f:da:cc:7f:23:
da:5f:50:7d:00:f5:54:08:9d:8f:8a:64:09:12:c5:
4a:92:79:1a:93:ca:06:99:94:10:73:19:8d:9d:4b:
64:95:54:3b:7f:ea:76:a2:0e:35:a6:92:38:f4:bf:
83:57:88:32:59:f3:59:8c:3d:68:78:b3:93:c3:72:
11:24:23:bb:86:3a:c2:ba:3d:c2:9f:8b:74:03:49:
db:6e:84:3c:b6:c6:0d:d0:a9:a6:7b:e4:de:1a:3d:
72:59:33:c5:93:70:a8:2d:ed:30:77:04:3e:e2:79:
88:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:05:D9:34:3E:51:71:8E:47:73:6B:EC:EC:32:74:79:F0:3C:01:FD
X509v3 Authority Key Identifier:
keyid:EA:AA:8A:0A:5F:DF:D6:98:E1:04:BE:36:A2:AE:EC:81:3A:EC:A0:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6qqKCl_f1pjhBL42oq7sgTrsoHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/7QXZND5RcY5Hc2vs7DJ0efA8Af0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/2932df-a4bd-4af5-a4d4-89d09240c43b/1/6qqKCl_f1pjhBL42oq7sgTrsoHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.139.51.0/24
Signature Algorithm: sha256WithRSAEncryption
83:fc:96:37:36:66:cc:cb:2d:22:93:98:cf:6d:82:2e:e5:b7:
f1:55:bd:2f:54:c9:7a:15:ea:d2:38:ff:45:f2:93:da:41:cb:
67:6f:b3:d8:35:98:b9:fa:3b:e9:c3:69:6f:20:e6:eb:86:a6:
3d:47:45:2c:60:2c:61:07:e6:37:c1:6f:85:f7:3d:3a:7c:63:
12:16:9e:ab:7b:bd:dd:9e:34:d8:0b:f7:a3:d3:d8:83:d7:52:
19:8a:07:cc:a8:f1:f8:ce:1a:fe:bf:ae:63:4c:ce:2e:06:d5:
9a:eb:c3:3b:a7:d7:35:cc:01:2d:bc:bd:f3:1f:27:89:1f:d4:
49:41:4d:ce:22:25:48:f8:26:ad:b9:b4:90:10:b1:00:41:7b:
83:5b:01:f7:ac:72:8b:6b:bb:c6:bc:dd:fb:c0:7f:40:dd:d1:
b9:94:44:30:9a:cb:9a:ee:95:9a:bd:a0:8c:a7:80:8f:27:16:
c1:bd:17:09:7e:f7:4d:96:1c:bf:c8:43:79:dd:fe:26:b3:7b:
e7:88:4e:3b:02:3d:fc:77:ab:6a:f9:03:3e:8c:49:2f:cf:91:
81:88:a6:fb:13:79:91:00:72:ea:be:de:e5:ba:da:ee:52:f3:
a7:0b:19:4e:7b:79:54:27:04:1a:f3:e9:0d:9f:c3:63:20:93:
b8:96:f9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:21:48 2025 by rpki-client