Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/7orBj7YMT4gBwnFmFUteBIB6gTk.roa
File: 7orBj7YMT4gBwnFmFUteBIB6gTk.roa (raw, json)
Hash identifier: uE+ghq+hpJaBw+wZQSp+m7XV35yV9ikpIFxdBywTXWo=
Subject key identifier: EE:8A:C1:8F:B6:0C:4F:88:01:C2:71:66:15:4B:5E:04:80:7A:81:39
Certificate issuer: /CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Certificate serial: 048CA162
Authority key identifier: 82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/7orBj7YMT4gBwnFmFUteBIB6gTk.roa
Signing time: Sat 14 May 2022 05:36:40 +0000
ROA not before: Sat 14 May 2022 05:36:40 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 2914
IP address blocks: 192.166.114.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 76325218 (0x48ca162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82ed4a2fb180df5f99d4bf8c77cc9a06ef26058c
Validity
Not Before: May 14 05:36:40 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=ee8ac18fb60c4f8801c27166154b5e04807a8139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:06:3f:43:fa:ba:70:11:02:63:f9:98:54:25:
49:97:20:6d:99:1c:e7:d4:2e:d1:06:96:e3:50:2a:
65:9f:ee:ef:65:0a:76:d2:75:7d:c2:4e:6d:7f:cb:
fb:7a:cf:0d:2a:19:9a:cb:b3:c9:b3:0e:f5:17:df:
ad:24:e7:2d:1c:e6:7f:b8:22:05:a5:f2:73:01:a0:
ce:84:74:4e:21:ae:90:80:47:8e:b4:89:b5:57:63:
39:95:23:73:03:a0:8b:c4:88:50:f3:45:a3:e4:06:
2c:e5:3a:79:50:87:9b:ec:4e:eb:5b:6b:44:08:b2:
0d:df:ff:02:ee:e2:6f:de:55:2f:4c:3d:05:85:48:
37:6f:e3:39:03:8c:ef:50:f2:19:0d:ed:0f:ea:a7:
02:3e:d9:22:4c:40:09:12:b4:70:5f:3a:7f:6f:34:
b0:d7:fe:9b:61:91:95:ae:dd:bf:29:e0:53:c5:9a:
14:68:b4:06:bc:c6:b1:aa:88:9c:5c:38:85:d5:0d:
aa:26:68:6b:76:5e:c0:31:99:20:01:f1:f1:3f:69:
40:5d:53:f4:02:55:08:79:bb:82:68:c0:c4:6f:a3:
e5:8c:50:9c:60:d8:54:cb:88:4f:01:1d:d0:18:f8:
ff:31:4d:6e:3c:45:ff:40:00:eb:85:db:0b:b5:39:
8d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:8A:C1:8F:B6:0C:4F:88:01:C2:71:66:15:4B:5E:04:80:7A:81:39
X509v3 Authority Key Identifier:
keyid:82:ED:4A:2F:B1:80:DF:5F:99:D4:BF:8C:77:CC:9A:06:EF:26:05:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gu1KL7GA31-Z1L-Md8yaBu8mBYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/7orBj7YMT4gBwnFmFUteBIB6gTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/0301bc-c7fe-46e9-b7a0-4526f6263bce/1/gu1KL7GA31-Z1L-Md8yaBu8mBYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.166.114.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:87:63:82:a9:4b:ce:48:54:c3:06:23:6b:1c:34:de:5a:47:
f6:74:c2:6b:d5:db:2b:0b:e8:12:b6:a1:24:d7:41:82:2c:2d:
3a:1e:71:22:61:43:b1:8c:18:7f:d1:43:f7:91:6f:b7:35:9a:
8c:b9:c8:8a:9c:f9:1b:6e:31:17:fb:08:80:cf:e4:44:b5:9c:
fa:ba:ac:5f:42:b0:6e:df:25:09:af:fb:00:d4:72:c3:0e:79:
56:6e:90:ff:ae:af:d7:b2:74:cc:00:de:78:37:99:fc:43:ff:
13:ef:82:7c:b5:16:b6:1d:8b:26:e2:60:08:2e:40:0e:e3:34:
6c:3c:90:ff:aa:34:cf:d4:ac:50:d3:80:85:88:f9:23:50:c7:
ae:c6:45:a6:eb:c3:1b:5d:e6:3b:da:8c:f7:58:29:af:9c:18:
6b:6f:65:86:7d:fe:27:bf:47:cf:a8:12:5c:b4:ca:83:2d:a0:
ca:9a:25:75:7a:7a:a3:ae:80:58:a7:bc:6b:79:29:9d:3c:49:
c0:27:82:cd:77:8c:77:90:b8:66:94:bd:1e:de:8a:be:1a:41:
4a:8b:cf:c8:6d:97:d6:67:6c:b3:2c:d6:82:da:10:e1:37:9c:
4a:05:2d:10:d5:27:7c:f3:d0:b0:17:85:d8:1c:6c:85:c6:b7:
d3:3a:5d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:42:37 2025 by rpki-client