Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/865974-fcb5-4407-9fde-5d1113692d6f/1/7dvw4LFvDHFYlF_H7xozydZ2q2w.roa
File: 7dvw4LFvDHFYlF_H7xozydZ2q2w.roa (raw, json)
Hash identifier: vJlNhp4r4UETlj2sW7q31QqSAxMLYExLA0pMjmIjlCs=
Subject key identifier: ED:DB:F0:E0:B1:6F:0C:71:58:94:5F:C7:EF:1A:33:C9:D6:76:AB:6C
Certificate issuer: /CN=75eb4ddbac399d6e05e02b46f91864c9bde82605
Certificate serial: 03DFDCE9
Authority key identifier: 75:EB:4D:DB:AC:39:9D:6E:05:E0:2B:46:F9:18:64:C9:BD:E8:26:05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/detN26w5nW4F4CtG-Rhkyb3oJgU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/865974-fcb5-4407-9fde-5d1113692d6f/1/7dvw4LFvDHFYlF_H7xozydZ2q2w.roa
Signing time: Sat 01 Jan 2022 12:59:08 +0000
ROA not before: Sat 01 Jan 2022 12:59:08 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 51619
IP address blocks: 91.238.142.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65002729 (0x3dfdce9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75eb4ddbac399d6e05e02b46f91864c9bde82605
Validity
Not Before: Jan 1 12:59:08 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=eddbf0e0b16f0c7158945fc7ef1a33c9d676ab6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8f:2f:41:ee:e9:eb:6c:30:79:82:b1:f2:23:
9f:2f:4a:87:54:5e:27:3c:91:45:5e:83:2c:92:c0:
5b:81:8d:c3:45:3e:d1:fd:9b:91:7e:91:7b:36:d6:
0d:db:ae:21:a3:08:44:21:cc:8a:43:b5:9c:11:7f:
9f:aa:e5:9b:e3:6f:9a:fc:c1:d6:9b:7b:42:2c:72:
91:e5:48:0f:c4:6f:2a:5d:49:9c:64:24:45:bb:f6:
29:e7:70:1f:2e:a4:e5:94:f0:cb:ef:e3:0e:23:dd:
38:10:46:cb:d2:5b:05:6c:ec:1d:5c:c4:92:a4:2c:
ed:68:cd:a3:9f:29:b8:fe:60:b9:f5:77:67:db:c4:
a7:38:10:35:88:71:b4:8e:57:16:4a:ca:d0:90:ad:
62:a1:5f:4b:c9:89:a4:87:62:eb:17:63:8d:7c:16:
e6:3c:7b:e0:ba:6c:55:db:ff:f5:ab:f4:30:14:2f:
6e:9f:5d:5b:63:42:12:54:7e:10:bd:2c:aa:7b:cc:
a2:d0:9d:13:41:d5:6c:6a:01:1c:d2:46:e4:2c:89:
f8:71:ef:6d:ef:67:29:85:0f:5a:f5:31:23:41:13:
8d:c3:8c:48:1b:0c:ce:81:20:9f:fc:17:10:e1:27:
55:0c:22:d7:ee:e5:08:a5:67:ae:3c:b0:14:42:3f:
33:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:DB:F0:E0:B1:6F:0C:71:58:94:5F:C7:EF:1A:33:C9:D6:76:AB:6C
X509v3 Authority Key Identifier:
keyid:75:EB:4D:DB:AC:39:9D:6E:05:E0:2B:46:F9:18:64:C9:BD:E8:26:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/detN26w5nW4F4CtG-Rhkyb3oJgU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/865974-fcb5-4407-9fde-5d1113692d6f/1/7dvw4LFvDHFYlF_H7xozydZ2q2w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/865974-fcb5-4407-9fde-5d1113692d6f/1/detN26w5nW4F4CtG-Rhkyb3oJgU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.142.0/23
Signature Algorithm: sha256WithRSAEncryption
a2:f2:5b:87:fb:87:f8:03:9c:83:4b:19:d5:cf:b0:1a:58:64:
6f:63:85:95:bf:2e:5d:4b:d0:a8:19:5d:3f:4b:52:31:e1:2f:
e0:00:29:a2:33:0b:ed:ee:e7:ab:53:96:d4:ab:a1:d7:24:21:
1d:aa:6f:6b:75:2d:8e:5f:6b:c5:d3:b7:c2:aa:9d:89:b3:99:
be:29:34:13:26:73:ef:2a:ba:c3:31:d3:ca:66:6a:52:e5:4a:
1b:d4:0b:22:b4:a6:7b:2f:bf:7c:97:91:f6:68:4d:52:50:e1:
94:ab:b3:ef:97:28:a9:c1:e8:9a:0f:49:22:bb:bd:8e:44:3c:
23:1b:04:b3:9d:58:df:e4:d4:62:bb:b5:c2:ad:ee:7a:e1:f0:
0c:05:ef:4c:0f:7e:e0:be:51:1b:76:6e:7c:14:b9:13:fb:69:
05:1f:f8:6b:c7:c1:a6:c7:1a:60:65:30:fd:19:6e:7a:47:9a:
42:64:c5:71:db:59:ea:a0:e9:40:df:13:c7:15:82:14:e2:d3:
06:e7:8d:2d:45:6d:3e:78:45:ad:d5:87:02:94:2a:4d:7f:61:
34:75:dc:8f:76:0d:93:7d:16:bd:21:c5:03:14:49:b5:61:15:
0a:46:4b:d4:61:d1:59:da:e6:43:16:0f:47:08:46:0e:ed:7c:
7b:a4:b2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 01:56:33 2025 by rpki-client